Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be95d340-ab17-3233-a763-518786bb8abd.roa
File:                     be95d340-ab17-3233-a763-518786bb8abd.roa (raw, json)
Hash identifier:          LUJrsc5xuMr54CElDBKgxlscn1SNx7HS0dBakJyeUs4=
Subject key identifier:   DF:BE:8F:5F:13:01:F6:42:BF:AF:44:44:63:42:AC:80:61:E4:89:4F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F432858490CB17EFFBEE56E65488FAFC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be95d340-ab17-3233-a763-518786bb8abd.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     62957
IP address blocks:        24.120.99.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:7e:ff:be:e5:6e:65:48:8f:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=1bfe5c45-7d25-4f9f-b4e5-c6d68e095042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2a:ae:56:bb:ab:a3:bc:1a:3d:93:ce:3f:f7:
                    05:9e:1c:e4:8f:6e:d7:62:9e:06:44:18:b0:d4:ce:
                    bd:a0:dc:14:89:49:b3:fb:a6:8f:fa:49:6b:03:9a:
                    f3:2a:e2:81:3e:55:a0:c1:56:16:ff:ad:93:fa:d0:
                    02:01:15:02:0a:28:86:b7:d9:fb:4e:14:11:c2:2d:
                    a7:9b:6f:93:d8:6a:93:87:56:50:7d:74:9b:19:4a:
                    44:b5:bf:34:98:8c:83:0c:ce:42:67:44:71:36:f5:
                    f7:8f:da:b7:27:d8:c1:cd:da:81:f4:28:31:b2:d3:
                    a3:8b:71:bb:c7:22:b0:d1:95:a5:c5:73:bf:83:96:
                    5b:6d:80:d7:38:b3:65:5a:92:b4:08:2d:c7:cc:0b:
                    ad:d1:46:c2:ab:a4:5f:7d:d2:f8:18:a9:b4:b2:05:
                    df:db:5e:68:d5:65:a4:82:6d:67:29:45:ba:c9:29:
                    72:26:e2:73:fd:28:66:a9:3b:35:77:10:94:ce:43:
                    3b:5f:39:3c:4f:45:e5:53:24:2d:18:2b:df:e7:6e:
                    3a:eb:8c:c3:a7:fa:6e:14:f2:d3:50:e2:06:2c:e0:
                    da:e8:cd:79:db:f2:2b:07:80:90:20:af:be:0a:ee:
                    ed:51:24:5e:59:25:ca:91:ef:0b:c9:71:82:11:0a:
                    ec:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BE:8F:5F:13:01:F6:42:BF:AF:44:44:63:42:AC:80:61:E4:89:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be95d340-ab17-3233-a763-518786bb8abd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.120.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:55:10:d2:64:03:64:3a:a9:df:30:07:33:60:84:35:3b:fe:
         c2:a6:29:17:71:be:34:1b:8b:14:b0:c5:6e:d7:10:18:7b:02:
         6c:60:fc:ad:27:49:25:ac:70:27:5a:59:1f:d1:ac:4b:ab:d9:
         0b:eb:a1:5e:cf:ca:0c:5e:d3:bb:34:15:1c:ff:82:9f:18:da:
         c8:6e:e2:19:80:5e:d8:4e:05:b8:85:9a:a8:3a:c2:05:6c:1c:
         57:8c:66:8a:aa:23:62:20:68:1f:ff:48:ef:8f:3b:cb:4b:68:
         42:ae:9d:32:f6:72:56:fd:6b:16:43:ed:9f:8d:f4:72:15:54:
         2e:f3:9e:7e:72:07:b0:76:54:b1:90:2f:2d:b5:1e:79:7e:bc:
         91:2a:be:4f:f5:dd:b6:39:07:e3:ac:37:f0:1b:26:8e:09:7f:
         5e:29:7c:51:f1:be:b5:64:51:87:d6:b9:f1:8b:76:57:56:ed:
         31:b1:fc:83:2b:59:e5:81:8a:52:91:cb:67:1a:c4:6a:ca:64:
         f8:c3:bf:66:e9:89:9b:e9:a0:a4:71:03:cc:b3:20:73:dd:3b:
         33:b9:18:25:a3:e8:c3:bd:09:fd:33:17:21:96:84:29:5c:c8:
         5f:28:32:72:63:8a:83:b8:a3:4a:2f:45:18:17:cc:c3:95:1f:
         c0:4d:32:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:02:19 2025 by rpki-client