Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7d299a97-9670-38cb-ad7b-20c997488bad.roa
File:                     7d299a97-9670-38cb-ad7b-20c997488bad.roa (raw, json)
Hash identifier:          0al7OAnJTGYXaklWIkQJ7mtZq2X+gtpXEXDXPjpRaKQ=
Subject key identifier:   6A:85:17:0A:D6:58:BD:DB:A7:6C:8B:FB:9D:80:61:88:2F:13:70:7D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581BDA14F79D53A8919BE00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7d299a97-9670-38cb-ad7b-20c997488bad.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        99.196.2.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:bd:a1:4f:79:d5:3a:89:19:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=10da5e58-75a5-4702-abb2-883e8b4fab7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:52:20:b5:b9:85:73:d6:f4:14:0d:cf:a8:
                    42:9e:45:26:0f:a7:bd:3e:be:79:0d:fc:8c:57:b2:
                    7f:3a:7a:10:26:59:0d:c9:3e:20:a3:0b:12:26:cf:
                    0e:66:b2:f2:47:64:96:f3:d4:08:30:93:8f:ca:11:
                    24:c8:89:90:1b:53:79:a2:89:9e:41:95:3c:0a:f6:
                    02:74:4a:f5:cb:1e:43:25:12:f5:b9:53:9c:09:9c:
                    6b:d1:e8:68:9f:3f:a3:c3:04:fb:49:5d:3b:fc:a7:
                    d9:ff:c3:6c:c3:f5:cd:7a:84:e4:9a:e2:21:ce:a6:
                    7b:f0:4d:32:9f:e9:49:55:9e:f6:d8:13:fb:5e:b9:
                    c7:3c:72:ee:65:14:40:1c:b2:9a:97:6b:21:27:9e:
                    7b:f5:31:a8:53:db:7d:bc:58:b4:22:b0:03:39:d2:
                    99:18:d5:c6:7e:4e:f0:e7:c1:56:ee:a7:18:3b:b3:
                    b6:9f:5a:e3:b4:0d:46:0c:35:57:85:61:2d:bd:ee:
                    59:ff:13:db:01:99:a5:a6:6a:f7:e1:8d:7a:2f:3a:
                    fb:50:b8:8d:cc:6c:f9:5f:1a:40:0d:62:21:71:25:
                    11:c8:9a:4d:85:99:36:e6:fc:3a:4a:b8:3f:c9:b2:
                    58:ae:e0:27:3e:6a:e7:60:61:f8:fd:dc:16:31:f9:
                    78:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:85:17:0A:D6:58:BD:DB:A7:6C:8B:FB:9D:80:61:88:2F:13:70:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7d299a97-9670-38cb-ad7b-20c997488bad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:64:9a:64:19:78:30:25:6f:5c:5e:5a:b3:43:1f:c5:76:5e:
         99:98:96:b4:6f:04:c3:7c:e5:50:16:e6:e7:a2:b5:20:08:2f:
         5c:96:09:9c:2b:27:a7:c6:e4:9c:7a:48:bd:21:e2:45:d6:d6:
         e3:d4:5c:3d:a0:92:c4:72:a7:e4:68:df:fd:11:72:29:8a:6f:
         7e:7d:65:29:36:93:b5:97:05:21:b1:60:e6:01:74:5a:55:a9:
         c8:27:1b:a7:67:e4:ac:7a:7a:41:c0:35:15:84:7e:0a:1f:65:
         d4:bd:6a:eb:26:fe:56:25:50:73:1c:3a:c3:1d:dc:0a:15:10:
         af:d8:b7:1a:4f:cf:eb:90:2b:e3:eb:0b:e7:c9:a9:d6:40:1d:
         83:ba:9c:bd:aa:9f:4f:52:13:bb:d6:6c:e3:0a:cf:d7:43:90:
         17:87:a0:aa:65:af:6d:77:77:0b:45:95:b7:4f:7c:af:8a:d2:
         32:6b:70:59:d3:39:d5:f6:2c:c1:b3:80:0c:92:75:3d:5b:1b:
         bb:a2:ad:ee:75:58:1b:14:cd:e8:aa:0d:46:6c:c6:86:90:0b:
         27:b6:d6:68:f8:fb:1c:bc:c7:3a:f5:7f:cf:1e:b7:fe:7e:47:
         64:bd:0a:d3:cc:3c:6a:6c:da:cd:a0:af:4e:32:81:cb:3f:a3:
         9e:79:a1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:24 2025 by rpki-client