Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/296f3449-5b88-3c7e-93ed-389128dc28df.roa
File:                     296f3449-5b88-3c7e-93ed-389128dc28df.roa (raw, json)
Hash identifier:          AuFIh6htfDq6opR8uFCiGGotR2IEzru0D6nEQfGlFaY=
Subject key identifier:   B2:F3:62:6B:F5:41:38:B4:1B:43:D9:75:3D:48:B1:06:42:77:36:F0
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F432858482EC00D5B84D0550FD689F200
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/296f3449-5b88-3c7e-93ed-389128dc28df.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     54120
IP address blocks:        24.157.33.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:c0:0d:5b:84:d0:55:0f:d6:89:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=eca4798b-271a-4e37-bdd1-8ef2b11a07ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b8:5c:74:ba:31:50:a9:97:1c:fb:34:70:21:
                    f4:c7:7e:91:72:d0:17:4f:30:33:a7:9a:32:ad:ca:
                    f1:2d:30:d0:0f:53:f9:3f:5f:93:6f:dd:00:d3:71:
                    b9:ae:52:72:e0:bf:ee:16:75:49:42:ac:45:01:ad:
                    2e:42:de:8f:d3:85:b8:60:4e:79:c0:0f:de:ee:86:
                    52:53:e0:1f:7f:de:3c:7e:ac:9b:1b:77:36:0d:95:
                    58:ea:c6:ef:6e:a9:29:a1:29:aa:63:18:e0:7b:52:
                    9c:12:2b:0a:95:a1:50:bd:1f:b3:32:15:3f:70:e3:
                    d1:70:54:75:39:a0:fa:89:dc:25:e4:9d:a0:82:8b:
                    c7:66:4c:63:a2:f2:44:3f:8b:41:86:18:83:50:a1:
                    c1:17:51:fc:ed:ae:c3:b9:db:7a:71:41:7c:25:77:
                    c9:a3:ce:19:9a:08:24:82:d6:d7:30:d0:5d:50:34:
                    a4:fa:22:f6:06:10:53:a0:4c:b5:f1:a6:bc:36:9a:
                    60:36:0c:69:f6:88:60:17:e5:02:3f:5d:b4:2a:14:
                    b7:e9:46:e5:35:3c:5c:d2:c9:04:6a:57:b9:58:ef:
                    d4:9f:b6:d5:6e:c2:0e:e5:a7:31:e3:22:3b:8d:f8:
                    91:e2:5e:bb:8c:ff:9e:e2:16:b5:c2:77:52:6e:1e:
                    bf:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F3:62:6B:F5:41:38:B4:1B:43:D9:75:3D:48:B1:06:42:77:36:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/296f3449-5b88-3c7e-93ed-389128dc28df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.157.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:47:ba:48:c3:b2:dd:3c:7c:0e:47:ed:bb:28:ca:a2:fd:50:
         ba:49:94:56:e0:81:e2:de:93:f0:2a:ae:ca:91:a7:c1:df:28:
         3d:b9:91:4f:ab:40:4e:5e:5e:d3:99:7e:c9:d0:b1:ff:72:07:
         24:3c:f7:af:90:da:00:85:6e:be:56:fb:39:70:e6:9b:25:9d:
         47:d3:23:63:b0:b6:f1:aa:78:38:97:20:36:d6:ff:a0:7d:90:
         ce:3e:d8:4a:28:9f:00:a4:ab:92:cb:c3:38:d9:85:29:f8:8d:
         c2:e1:79:da:7e:61:bf:03:84:1d:7c:63:77:ce:00:2b:0c:57:
         6e:07:60:6d:d7:b3:d8:89:95:78:d9:6a:e8:ca:49:3e:a0:7c:
         d9:a0:6e:0d:7a:64:34:46:0b:a6:88:9c:21:ce:dc:29:10:bc:
         c8:19:5d:6e:a2:29:ab:53:50:03:cb:99:ee:6c:c2:89:06:17:
         68:a9:4b:51:51:b1:f3:89:85:2d:5a:70:15:ca:91:d5:58:60:
         28:ba:d1:59:91:c4:03:f1:a1:24:36:3b:b1:95:db:26:03:4c:
         b6:4e:47:f5:06:4a:2c:05:34:18:e1:f9:48:a4:8a:cd:59:80:
         35:bd:bf:ad:9c:ad:31:a1:a1:03:95:5c:d7:ab:4a:92:db:ee:
         cd:72:9c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:22:43 2025 by rpki-client