Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/58e6a273-3100-3713-9d8a-7ff71945dd2d.roa
File:                     58e6a273-3100-3713-9d8a-7ff71945dd2d.roa (raw, json)
Hash identifier:          bJpgdIaxkRpXhzl8CNEu9k3zZEYfx6POwvJUUwxAFq8=
Subject key identifier:   E4:24:4D:69:AC:98:79:18:76:45:D6:1C:D0:D6:DB:9D:C2:B0:87:2B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58135B001C8E6D0AD8B6DB0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/58e6a273-3100-3713-9d8a-7ff71945dd2d.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        99.196.229.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:35:b0:01:c8:e6:d0:ad:8b:6d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=97208299-bd8d-4b19-bee9-13e13dec70cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b9:b8:6f:99:5b:22:d6:cb:15:12:e0:29:5f:
                    8c:f8:47:2b:7d:d0:e6:56:9e:ac:4f:33:35:25:6a:
                    45:b0:89:fb:53:50:17:8a:61:e0:7b:5b:3a:ee:9c:
                    e0:0e:92:69:04:78:17:7a:dd:8e:e1:2c:54:0b:78:
                    4a:70:01:02:7e:16:ab:51:bf:17:20:f2:f2:3a:90:
                    7f:76:52:1a:8d:e0:1c:db:0c:65:15:18:30:56:4c:
                    24:9b:19:0d:3f:82:84:cb:88:62:37:ad:0c:16:d0:
                    f3:81:b5:1a:5b:f6:d7:87:ed:02:0f:a7:5c:fa:c9:
                    0f:3a:d5:58:60:c0:9c:29:10:52:cb:7e:d5:7f:81:
                    b4:5a:05:a9:d8:76:ca:bb:91:9c:bc:65:5a:2a:0a:
                    9f:cc:d1:ba:b3:99:db:3d:38:1c:19:68:05:cc:20:
                    c1:fa:94:94:7e:31:3c:33:2d:d0:41:a6:bb:6b:ef:
                    59:83:a4:41:d0:51:76:1d:48:6c:ca:f3:90:aa:0d:
                    8b:7a:39:ec:49:18:47:75:67:38:da:06:dc:0d:80:
                    6d:28:18:2d:21:20:56:27:f6:c4:22:da:c3:bc:d8:
                    dc:6a:cc:ab:af:f3:41:d8:a5:80:f1:b5:a4:51:53:
                    b1:f1:45:12:23:85:0e:ef:c3:09:3b:c6:30:3c:ec:
                    b4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:24:4D:69:AC:98:79:18:76:45:D6:1C:D0:D6:DB:9D:C2:B0:87:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/58e6a273-3100-3713-9d8a-7ff71945dd2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:4a:14:2b:c7:0d:b5:db:83:0f:3c:b8:5f:f2:f1:1e:c0:19:
         dd:65:d0:57:47:44:03:97:20:57:d9:c3:f3:37:fe:25:37:76:
         0b:f6:5c:3d:91:62:e4:9a:e9:1b:39:4d:c3:a2:f2:bc:3e:b6:
         c2:a5:1a:54:cd:da:0e:d6:83:de:14:da:ef:d9:d3:7b:3e:01:
         40:11:7f:56:84:86:f8:10:e1:48:73:b8:b8:ce:8a:f1:60:80:
         a1:7d:b5:4d:d1:db:b0:37:d6:6e:fe:7c:6f:9f:c4:a8:f4:63:
         fc:39:e0:24:90:c1:0f:9e:3b:fe:22:b9:07:7d:70:77:1b:b2:
         db:fc:27:5d:48:9f:7d:90:7f:a7:a8:dc:9d:74:c4:b5:c7:3b:
         e6:b1:a5:23:49:36:88:aa:58:90:1d:86:b0:72:f0:1b:c4:a2:
         7a:5f:43:a7:bf:2f:dd:ce:da:0f:6e:d4:47:52:37:f9:5c:8c:
         91:c6:cd:7a:39:cc:74:a5:7b:2f:4a:79:8e:b4:98:27:da:1f:
         47:3b:9b:d6:55:3b:73:78:b1:4b:ad:18:85:72:bf:d4:00:38:
         dd:13:ec:3c:ba:f6:37:26:09:81:25:3e:2a:ae:fd:1d:a2:03:
         ae:e7:33:03:5c:cc:6d:a7:77:76:29:eb:91:a6:87:05:94:7a:
         13:a0:4f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:39 2025 by rpki-client