Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/77ef8160-1b57-36f9-9b66-e7115d91c659.roa
File:                     77ef8160-1b57-36f9-9b66-e7115d91c659.roa (raw, json)
Hash identifier:          Nd10dCHY6rr264duH6EGa27txWPfWTDBjNZrt1vrNHA=
Subject key identifier:   55:2F:BD:66:DA:FC:46:12:A5:5B:33:4C:96:E5:CE:B3:00:0E:0E:CD
Certificate issuer:       /CN=4dfb879f-7966-496a-b35e-d766981846ee
Certificate serial:       010D0C9F432858489075F97F0E580A4DAD006B00
Authority key identifier: 47:A0:89:91:6C:7F:47:53:FB:B8:28:FF:43:4D:96:C5:0F:02:A5:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/77ef8160-1b57-36f9-9b66-e7115d91c659.roa
Signing time:             Thu 16 Jan 2025 14:00:50 +0000
ROA not before:           Thu 16 Jan 2025 14:00:50 +0000
ROA not after:            Wed 16 Apr 2025 13:00:50 +0000
asID:                     271
IP address blocks:        199.60.120.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:75:f9:7f:0e:58:0a:4d:ad:00:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dfb879f-7966-496a-b35e-d766981846ee
        Validity
            Not Before: Jan 16 14:00:50 2025 GMT
            Not After : Apr 16 13:00:50 2025 GMT
        Subject: CN=17222971-98b3-457e-874d-b4b0806441b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:49:fe:22:06:bd:32:85:4c:c4:0f:80:e5:d4:
                    d0:98:89:cb:30:16:ff:59:42:08:69:b8:66:d6:af:
                    85:54:6f:29:75:4e:83:8a:46:c8:bd:c7:3b:38:f3:
                    32:21:aa:51:bd:9c:ee:7f:ec:b6:a2:44:ad:33:63:
                    f7:68:76:22:a3:6d:53:31:a9:2f:d6:e8:bd:ff:7f:
                    be:ae:d6:a2:55:24:b2:7e:25:53:50:84:11:4b:86:
                    be:d7:39:c4:53:e6:b9:63:05:08:c1:6c:90:42:5d:
                    c8:51:dd:83:9f:47:86:56:65:5c:89:ba:04:cf:a1:
                    fb:7e:3d:21:d0:ad:b6:b9:94:92:df:e5:c4:de:09:
                    6c:f6:7e:e8:e1:3c:ee:61:6f:86:cb:3a:ac:b8:52:
                    02:bb:6f:46:c0:52:45:2c:65:9c:b3:a1:56:b5:76:
                    54:09:c3:0d:9f:9d:79:eb:96:72:9f:ca:24:cc:15:
                    6a:1f:e6:2f:b8:99:0f:1c:71:4f:4a:bc:b6:b0:50:
                    90:63:85:4e:34:0b:1d:a0:e1:3c:59:2a:4c:29:c1:
                    d1:8a:22:05:80:ef:45:18:6b:b8:67:a1:45:c7:4e:
                    7b:db:e7:1f:18:dd:77:f7:2f:93:c5:74:fd:4a:5a:
                    97:ee:8c:7f:ad:67:24:54:a9:fe:6d:84:88:86:04:
                    b4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2F:BD:66:DA:FC:46:12:A5:5B:33:4C:96:E5:CE:B3:00:0E:0E:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/77ef8160-1b57-36f9-9b66-e7115d91c659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/4dfb879f-7966-496a-b35e-d766981846ee.crl

            X509v3 Authority Key Identifier:
                keyid:47:A0:89:91:6C:7F:47:53:FB:B8:28:FF:43:4D:96:C5:0F:02:A5:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.60.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:8e:ed:b9:4f:0a:bd:13:6f:cf:9d:bd:b2:90:b6:45:31:ce:
         09:cf:ee:3a:51:69:e7:f2:71:1b:c1:58:da:14:04:81:be:db:
         b8:d7:1c:fd:60:04:7d:df:00:ef:ba:44:63:b9:d9:60:6a:29:
         28:25:51:c7:eb:38:f8:d9:d7:19:ab:bb:1f:0b:11:ee:5f:89:
         ae:b1:bc:c0:f4:15:2d:45:52:08:07:a7:4f:92:e9:51:86:f8:
         2a:fe:2a:91:a7:85:7b:19:8c:f2:3f:2f:bc:15:77:14:73:02:
         51:79:0e:6f:8e:10:27:4a:78:6c:c5:d9:58:99:5d:fe:a0:0b:
         51:aa:85:1e:ed:a6:2b:7c:37:23:d7:42:e0:17:80:23:37:92:
         a5:c3:ef:a6:d1:94:32:84:7c:b6:8d:7f:fe:a8:f0:ec:4f:13:
         34:01:c4:bd:96:cc:b1:50:3a:87:82:b0:75:ff:8b:11:b7:a5:
         6d:15:1c:32:49:55:8e:fe:0b:3e:6a:a5:f3:b9:13:40:c5:f3:
         4e:fb:24:d9:35:9a:7e:9f:69:31:41:51:74:94:e2:3d:dd:c5:
         92:00:c8:c9:f2:07:a0:ea:3c:3e:45:93:d8:db:36:e5:64:9a:
         ce:64:22:70:d2:31:fc:ff:11:6f:09:38:a0:c8:ef:f1:33:56:
         9a:66:59:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:04:40 2025 by rpki-client