Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6a79905-1ce6-3fd2-88fb-06de78072adf.roa
File:                     a6a79905-1ce6-3fd2-88fb-06de78072adf.roa (raw, json)
Hash identifier:          1P1TZZGwe/OijT70bmGoObMpTnTddzBZwhKd18mM3Xk=
Subject key identifier:   85:BC:66:59:9D:5F:C6:60:9B:3A:3B:A4:FD:A2:8C:68:C1:35:72:AF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581BEAE257ABB5BCD1E3E80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6a79905-1ce6-3fd2-88fb-06de78072adf.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        99.196.46.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:be:ae:25:7a:bb:5b:cd:1e:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=3e5569ab-3dab-497d-b7d8-ee8bebac8e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:74:e3:02:ea:04:68:72:4a:61:7a:6a:c4:c9:
                    17:55:9f:b0:af:1a:5b:4c:e8:69:67:31:81:18:9c:
                    02:b4:0f:0c:13:58:69:30:a7:f6:1c:0f:2e:dd:6c:
                    44:1c:b1:3d:78:36:6b:7a:0e:1d:2d:82:1d:62:2f:
                    a4:6d:ff:47:32:72:58:ac:ea:88:12:d0:8a:8f:24:
                    05:b3:f9:d0:c5:be:f5:34:a3:c9:3e:4a:b1:8d:ff:
                    2b:58:72:62:d3:19:db:5e:46:47:19:7d:c3:43:3d:
                    37:aa:d2:37:ff:b9:44:f4:cd:21:e4:9c:f8:73:33:
                    f3:b7:84:b4:7f:59:72:f6:de:ee:ec:a8:b6:70:00:
                    e3:58:02:81:0b:3a:67:34:6d:56:a2:c6:2b:26:fd:
                    9c:29:ee:a6:b4:93:ab:a0:41:71:db:65:9a:cd:c1:
                    78:6f:ad:c3:e3:7c:17:55:26:0a:be:d3:25:34:74:
                    8d:bc:98:c4:29:48:9c:a4:73:a1:bb:46:eb:7c:b5:
                    0e:2c:67:e7:13:a0:59:f5:1b:85:07:b6:05:a2:a7:
                    29:4b:db:49:6a:ac:73:61:27:32:4b:2d:65:a9:11:
                    2d:5e:ac:d3:87:93:54:0b:03:4e:eb:01:2d:30:ad:
                    be:fe:95:44:82:c8:53:fa:0e:27:7b:f6:0a:35:49:
                    4a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BC:66:59:9D:5F:C6:60:9B:3A:3B:A4:FD:A2:8C:68:C1:35:72:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6a79905-1ce6-3fd2-88fb-06de78072adf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:50:7d:4e:39:b7:0f:25:db:0a:61:5e:cb:d9:e6:4c:1c:24:
         e5:f3:63:00:ff:e4:4c:6e:b6:4a:e4:2a:d9:b1:38:ed:3c:a0:
         af:5b:4b:2b:00:e2:15:f2:05:56:ff:45:10:4b:06:a4:1a:83:
         b3:d1:9a:cc:10:4f:f4:4a:25:61:87:9e:77:c6:0f:c0:58:cb:
         43:e7:fe:37:e2:f5:62:bf:e7:79:41:3c:3e:8d:75:e4:a6:2c:
         d7:91:66:35:cd:d6:85:3e:6b:c6:e6:e0:34:8c:5e:4d:fc:5f:
         24:ad:65:18:64:2f:ff:68:5d:32:ab:3f:50:b2:c4:a4:e6:32:
         64:ce:45:98:5d:df:95:0e:49:79:4b:0b:ea:4f:5a:9d:37:e2:
         8e:2c:06:71:88:44:88:d3:ed:8b:8e:38:cf:a5:d1:3b:1f:cd:
         3f:15:93:92:4a:ae:44:bf:42:e6:0b:50:5c:63:09:11:e0:9d:
         7b:a1:7e:f4:d0:7f:48:53:6c:bd:54:7d:73:9b:4e:1b:b1:b9:
         ef:59:8a:99:1f:36:4c:9f:e8:49:eb:8f:1d:b4:93:de:22:0f:
         76:c3:00:29:d8:c7:10:ee:b1:9e:70:e5:75:9e:87:ba:5e:3e:
         a2:57:d0:1a:87:8c:0a:92:d7:a6:89:5b:83:08:0f:11:ca:b0:
         17:ab:2a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:41:09 2025 by rpki-client