Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/18b4072a-2ca8-31b2-8f64-7236c732f56c.roa
File:                     18b4072a-2ca8-31b2-8f64-7236c732f56c.roa (raw, json)
Hash identifier:          s6D5KoTojzENjvckYnYoE7TpwPRxkympfHdiQfBFNqk=
Subject key identifier:   30:AB:8A:70:29:6C:29:4E:B4:B1:19:30:2D:0C:19:19:4F:1D:89:DA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581322510AEEC6B0EA73BF4
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/18b4072a-2ca8-31b2-8f64-7236c732f56c.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        99.196.100.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:32:25:10:ae:ec:6b:0e:a7:3b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=bf852fd2-4da7-45e0-8bf5-25b03fe12bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ba:86:7a:27:d6:c2:25:8f:3c:3d:73:b9:b3:
                    66:60:6f:2f:68:44:59:53:3f:70:5c:c3:f7:ca:25:
                    67:c4:d4:97:43:9a:75:fb:a6:7c:c6:da:cc:c3:12:
                    ec:59:a7:41:f6:a9:b6:d3:1a:d3:22:00:f1:56:5c:
                    7d:c1:dc:ba:0b:78:cd:63:1c:65:01:2c:9c:14:c9:
                    24:b0:ab:38:bb:6e:3e:0a:30:d2:28:b5:50:41:3f:
                    9b:2a:ee:d8:81:5e:b2:22:25:12:69:55:d7:b3:17:
                    0b:ce:39:60:bb:4a:bc:64:9c:83:04:32:1a:67:0a:
                    bb:0c:37:d4:65:ce:4f:ec:dd:13:61:4b:71:a2:a4:
                    49:8d:13:1c:08:35:8e:8f:76:4d:86:c5:1b:2a:2e:
                    fe:4d:b8:74:73:e7:63:36:15:0f:e1:f0:7a:da:57:
                    62:7b:b1:f3:df:42:e3:01:ef:8a:24:a9:8a:49:55:
                    a4:da:2e:ec:65:46:b2:a0:9d:54:97:87:2e:f5:29:
                    a9:d5:93:46:8b:64:e4:5e:74:72:49:17:2a:e6:a3:
                    b0:eb:92:eb:5f:77:3d:c5:87:7a:17:ec:d4:4e:4f:
                    b2:8c:00:7f:a6:79:1d:23:97:1a:30:8c:0d:5a:96:
                    3c:83:be:35:54:87:eb:f4:c5:01:32:f5:08:50:9e:
                    8a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AB:8A:70:29:6C:29:4E:B4:B1:19:30:2D:0C:19:19:4F:1D:89:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/18b4072a-2ca8-31b2-8f64-7236c732f56c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:74:b4:c7:7e:d0:e4:e6:d3:fa:e2:f2:54:18:95:ab:88:f3:
         8e:35:55:54:98:6e:01:f4:ba:19:90:c5:f5:78:31:eb:49:8b:
         5f:d0:d2:ca:44:0c:1b:1a:0e:2f:c5:82:ba:90:77:75:45:1f:
         7b:b1:83:8d:87:f1:08:a5:ba:7f:c0:64:e2:a9:20:74:c5:6b:
         27:64:50:31:0e:a0:40:15:7c:5b:fa:26:59:6f:c8:0d:b0:96:
         69:97:b4:e7:00:3c:c6:99:61:66:0e:af:86:1a:69:eb:d6:2b:
         83:4f:b2:0b:28:91:f3:72:0d:2f:7e:53:10:f0:d5:8c:92:08:
         13:50:1c:73:b1:a8:d7:8c:ff:41:dd:71:62:85:94:fd:bd:a2:
         6a:e2:d0:46:4e:73:bb:79:5c:ca:45:0e:e3:64:15:d6:6f:c2:
         c5:93:b7:96:6b:0f:1e:52:ca:b7:58:a3:88:70:36:a8:29:a9:
         d0:03:01:26:96:13:82:25:32:93:0c:9f:c2:45:f2:cd:af:a7:
         00:6e:ae:75:57:d5:27:df:4d:9d:1e:46:23:66:30:57:e6:ce:
         e6:6e:01:76:ef:f2:1a:3b:ec:ba:6f:6d:b7:a7:65:62:e0:2f:
         57:48:58:40:d3:6c:37:02:16:3d:85:27:fd:12:86:c1:1c:1b:
         05:e4:6e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:47 2025 by rpki-client