Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9956650b-303e-327f-bd51-21ee6ef2d2fd.roa
File:                     9956650b-303e-327f-bd51-21ee6ef2d2fd.roa (raw, json)
Hash identifier:          escuXUs81qvTHr8nrCdDGBwXaAd2O/j1z15wUr1+VhQ=
Subject key identifier:   B8:68:7F:65:CA:76:92:CE:AF:40:CF:34:E2:34:61:AE:92:75:73:AA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581315A5EE2762B6444FC00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9956650b-303e-327f-bd51-21ee6ef2d2fd.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        99.196.68.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:31:5a:5e:e2:76:2b:64:44:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=30b5c9c1-fe97-439c-81a4-65c6285fd17c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:93:a5:c0:30:f4:a9:95:f8:03:62:06:17:2f:
                    66:9a:06:6d:2d:f7:90:28:8c:ec:0b:12:4f:e9:8f:
                    32:37:3a:63:52:2c:bd:c9:7e:c4:e3:bb:99:c3:a2:
                    40:a4:24:35:c2:43:df:b4:c6:aa:ca:a1:77:f6:4b:
                    5c:ef:07:bc:40:1e:fa:5a:de:d7:d2:42:5a:71:c9:
                    4a:ad:51:37:b6:86:a2:2e:5b:2d:67:f1:08:e6:d2:
                    50:d1:78:23:31:03:c0:b9:ce:37:cb:9a:4c:2c:67:
                    22:f4:d9:6a:58:cf:e2:09:95:70:de:a5:98:22:dc:
                    c3:dc:2d:18:32:be:b1:10:1b:eb:de:cd:81:2c:e3:
                    d6:03:1c:aa:d4:d9:a8:74:bf:ed:7c:55:39:55:b1:
                    26:67:80:99:b7:83:a6:e7:f1:bf:e2:55:a8:a7:7e:
                    d6:6e:08:68:08:24:9b:1a:ce:dd:10:c0:b1:9e:d2:
                    aa:9d:ba:c0:28:fa:87:f7:a6:b2:34:1c:f9:ba:16:
                    61:75:32:09:1b:e4:49:af:40:35:82:b3:20:30:ca:
                    25:60:a4:9b:8a:37:61:6e:b8:e4:6e:e9:a4:40:a1:
                    59:f8:ae:aa:12:7c:9e:3f:da:1c:f5:bf:a5:be:40:
                    ee:24:99:ad:42:79:a2:4a:41:e5:1e:1e:f1:9c:0f:
                    78:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:68:7F:65:CA:76:92:CE:AF:40:CF:34:E2:34:61:AE:92:75:73:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9956650b-303e-327f-bd51-21ee6ef2d2fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:5c:ed:33:14:c8:ec:bf:f4:5b:44:c1:ac:fa:60:d6:a0:80:
         de:bd:2e:ff:24:be:ed:8a:67:1d:53:f4:03:d8:6b:93:88:af:
         77:62:ec:aa:e8:6b:41:43:15:b3:9c:75:46:e5:e8:fd:a5:a4:
         c5:0c:e6:fb:4a:ef:14:a5:e9:9b:19:39:bd:9f:7e:72:3c:be:
         8c:d4:4e:e4:cc:c4:a9:47:a1:8d:a6:d9:1e:bd:7a:b7:94:03:
         3b:a4:c7:4e:eb:9f:3c:4b:2b:32:fc:59:f6:f5:92:8d:fb:1d:
         34:08:2c:ee:70:f5:af:0a:2d:54:17:29:0a:34:ac:98:8f:4e:
         5d:f1:8f:4d:dc:be:90:92:13:72:08:8a:0c:4c:42:c7:d7:83:
         59:f4:46:00:20:69:d2:9b:3e:59:07:71:aa:a3:45:18:44:51:
         2a:c1:96:71:3d:fe:3b:73:89:7d:a2:11:18:e2:24:32:61:93:
         a9:7d:cb:88:98:6c:30:bf:48:4c:9a:d0:82:f8:bb:75:d0:3a:
         eb:61:df:1b:30:51:f6:37:5e:b2:ef:34:d1:92:02:42:04:89:
         79:5e:b0:3a:c8:19:18:8d:0c:a1:22:35:61:59:e8:0f:35:09:
         0d:55:c5:2e:67:1e:cf:22:4d:c7:3f:94:f0:7b:ea:c0:70:7f:
         60:fc:fe:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:50 2025 by rpki-client