Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4cfc2a6c-c7d4-3280-b1e3-392b3258c039.roa
File:                     4cfc2a6c-c7d4-3280-b1e3-392b3258c039.roa (raw, json)
Hash identifier:          x8oGWMQr48b+IaLPw1YqMjumJ+idNVEHm1TO3uy0euw=
Subject key identifier:   BF:FD:99:9A:0B:1E:24:45:5F:74:EE:6F:7E:7E:F8:5F:76:7E:DB:67
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581F96C97C5B96C2524EF80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4cfc2a6c-c7d4-3280-b1e3-392b3258c039.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        184.63.241.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:f9:6c:97:c5:b9:6c:25:24:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=2cb9c6b1-2091-4345-8260-b1da442fad84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:70:88:21:9d:f2:b1:e3:ae:58:6c:8e:dd:8b:
                    0f:53:98:ae:12:34:35:ac:8b:d0:29:ac:99:0a:43:
                    d7:76:0e:fd:ee:e9:0b:ae:fe:0e:93:a8:0e:39:65:
                    26:4f:d7:e3:47:0f:6e:34:81:45:4b:9a:ee:b3:b0:
                    ca:2a:66:ff:52:31:10:82:90:1d:5b:30:0c:d5:0b:
                    93:f8:dc:4e:e9:c9:c1:b4:92:9f:07:b7:2f:fd:81:
                    9c:34:f9:99:cc:27:e6:2e:36:82:52:f2:cb:fc:4f:
                    08:61:85:9d:8d:d7:76:0b:4e:f2:1f:f4:94:91:4d:
                    ae:cf:13:74:3b:1f:bb:fa:ee:fd:c7:1d:25:00:89:
                    60:03:dc:59:97:e7:cb:99:2f:08:9e:4b:96:7d:b9:
                    04:36:7c:ee:72:6a:fc:2e:88:cb:63:62:d5:59:77:
                    58:b2:78:30:1c:2d:b9:52:f7:a4:d5:0d:f7:6d:5d:
                    db:ed:61:d7:be:21:a2:d4:bf:78:df:f1:5e:19:54:
                    13:4a:18:52:fb:77:94:fa:18:0e:e8:5d:ca:da:cd:
                    62:5d:7b:c4:01:73:fc:11:b3:e5:b0:ff:e8:91:30:
                    28:91:9b:32:cb:d4:38:e2:56:65:32:2a:0e:81:46:
                    b2:88:db:8c:93:f4:3a:4a:85:4e:b9:86:f6:ce:fe:
                    64:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FD:99:9A:0B:1E:24:45:5F:74:EE:6F:7E:7E:F8:5F:76:7E:DB:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4cfc2a6c-c7d4-3280-b1e3-392b3258c039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:b0:9c:a5:01:ec:19:b0:0c:4e:f4:a9:4c:11:93:80:2c:fb:
         5b:26:9a:34:19:54:7d:6a:b2:91:39:b6:38:12:d8:f8:67:9a:
         0b:3c:47:83:d8:09:2b:05:5f:ec:8b:2a:6e:4b:22:40:c5:ee:
         6a:8d:b4:65:a5:6b:ce:19:b3:7e:5d:66:a1:49:72:d9:11:d6:
         f5:7b:8c:b0:50:1b:dd:a0:1f:b9:ad:b6:e3:60:e6:b1:6d:3f:
         20:b2:54:6b:27:81:81:13:d3:84:1e:77:a1:27:26:82:a8:3f:
         38:24:3f:3d:07:27:5c:7c:b7:59:3b:97:f5:ff:5b:fc:1a:3a:
         85:e7:45:f1:d6:35:13:e3:7e:00:d0:8f:4e:91:06:61:e3:7f:
         2b:d0:cc:b9:74:db:2b:74:d9:55:52:25:84:57:f2:8b:85:66:
         b3:df:91:28:03:70:ae:01:7d:b1:6a:97:7b:bc:bb:ab:bc:da:
         02:f6:c0:97:32:79:1b:ff:86:e4:af:96:be:1d:e1:92:4d:ff:
         3f:c2:fa:06:44:79:ca:5b:71:08:5d:3b:d4:73:c6:c3:45:bc:
         6e:a1:13:fa:06:24:50:a7:e0:58:da:c4:17:32:ef:e1:19:82:
         0d:ef:56:60:56:67:29:21:77:8d:7f:3e:c7:c9:fc:83:6d:fb:
         10:c8:d0:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgflsl8W5bCUk74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MmNiOWM2YjEtMjA5MS00MzQ1LTgyNjAtYjFkYTQ0MmZhZDg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHCIIZ3yseOuWGyO3YsPU5iuEjQ1rIvQKayZ
CkPXdg797ukLrv4Ok6gOOWUmT9fjRw9uNIFFS5rus7DKKmb/UjEQgpAdWzAM1QuT
+NxO6cnBtJKfB7cv/YGcNPmZzCfmLjaCUvLL/E8IYYWdjdd2C07yH/SUkU2uzxN0
Ox+7+u79xx0lAIlgA9xZl+fLmS8InkuWfbkENnzucmr8LojLY2LVWXdYsngwHC25
Uvek1Q33bV3b7WHXviGi1L943/FeGVQTShhS+3eU+hgO6F3K2s1iXXvEAXP8EbPl
sP/okTAokZsyy9Q44lZlMioOgUayiNuMk/Q6SoVOuYb2zv5kYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL/9mZoLHiRFX3Tub35++F92fttnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGNmYzJhNmMtYzdkNC0z
MjgwLWIxZTMtMzkyYjMyNThjMDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD/xMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKWwnKUB7BmwDE70qUwRk4As+1smmjQZVH1qspE5tjgS2Phnmgs8R4PY
CSsFX+yLKm5LIkDF7mqNtGWla84Zs35dZqFJctkR1vV7jLBQG92gH7mttuNg5rFt
PyCyVGsngYET04Qed6EnJoKoPzgkPz0HJ1x8t1k7l/X/W/waOoXnRfHWNRPjfgDQ
j06RBmHjfyvQzLl02yt02VVSJYRX8ouFZrPfkSgDcK4BfbFql3u8u6u82gL2wJcy
eRv/huSvlr4d4ZJN/z/C+gZEecpbcQhdO9RzxsNFvG6hE/oGJFCn4FjaxBcy7+EZ
gg3vVmBWZykhd41/PsfJ/INt+xDI0Ps=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:52 2025 by rpki-client