Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/2dc9f341-325f-366e-a73d-dc2863b557b8.roa
File:                     2dc9f341-325f-366e-a73d-dc2863b557b8.roa (raw, json)
Hash identifier:          ychjH4uufaVWVLONqpiMw74eM5VM02QXePuDBhKUGhw=
Subject key identifier:   42:35:8A:C5:5D:01:E6:FB:76:F2:A5:52:ED:AF:DA:4F:D3:19:55:D2
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285848F4F694D595FE7C520CE86900
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/2dc9f341-325f-366e-a73d-dc2863b557b8.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     53459
IP address blocks:        199.254.27.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:94:d5:95:fe:7c:52:0c:e8:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=b8026d9c-885a-46f7-90e9-86a23acdd707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:39:41:0f:20:c5:20:f9:5f:43:c0:d8:12:cc:
                    f9:79:64:93:92:94:c5:22:b0:80:ab:16:64:cb:c1:
                    48:99:04:ff:00:58:4e:e6:45:46:49:92:40:53:57:
                    8c:c2:0f:4e:39:03:9c:9b:91:cc:4d:b0:f8:1e:dc:
                    e0:13:57:66:3e:2f:30:a0:f9:92:24:5e:52:77:1e:
                    e1:be:98:c6:73:53:95:73:9c:66:b9:2e:9c:eb:e8:
                    7f:0d:6f:3c:1e:c6:ab:d4:d2:0f:c0:09:bd:44:5f:
                    03:96:59:5b:03:78:90:24:09:28:e2:2d:e3:cc:44:
                    1e:5b:2f:09:44:51:73:7e:ce:52:83:e6:6d:f8:24:
                    f0:91:c4:3e:7c:41:ce:74:dd:8b:1e:ff:21:d1:00:
                    8e:d6:26:59:a3:a6:f2:ee:92:90:b3:a4:57:58:51:
                    9a:3a:a5:b8:69:11:3d:ed:7e:4a:95:01:57:26:c2:
                    e3:36:95:ac:af:fd:b2:9f:d4:99:af:63:f5:55:01:
                    39:da:51:39:fb:01:99:ce:38:a3:2f:ee:ac:92:0c:
                    b6:10:f3:80:8f:b6:c9:6c:71:81:5d:6a:ec:46:47:
                    d1:15:0c:e3:ea:ca:98:bb:5d:45:f8:9b:d4:30:46:
                    5b:15:41:af:3e:c1:a0:fa:b1:2b:22:e0:b0:93:27:
                    aa:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:35:8A:C5:5D:01:E6:FB:76:F2:A5:52:ED:AF:DA:4F:D3:19:55:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/2dc9f341-325f-366e-a73d-dc2863b557b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.254.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:3e:e3:a2:da:65:36:27:04:ac:46:8c:68:2b:3c:ca:3e:22:
         0d:9b:d2:1c:5e:52:7d:17:ac:c3:9c:e7:ae:30:fe:99:9f:a7:
         a8:7a:f2:65:90:16:7b:20:6d:6c:32:3b:ff:43:11:78:16:c0:
         c4:55:ac:cf:cd:43:ed:57:a5:02:c5:b5:3d:cb:6b:a6:f4:da:
         0e:c3:04:e6:7b:71:71:83:b5:16:cd:f8:e8:61:28:7f:ea:0a:
         4c:9b:ee:c8:9b:fd:a4:40:2b:e4:cc:bf:52:6a:e9:d6:7c:e0:
         4e:17:af:5b:83:39:b7:4c:56:b2:3d:b4:42:a9:2f:d6:58:6b:
         ed:99:30:a8:b3:f8:51:ab:49:71:fa:c4:ff:41:c9:f0:eb:2c:
         55:a2:d2:3a:bd:48:b7:4f:0d:93:cd:a5:f2:59:a1:05:ea:ed:
         c2:f1:74:f6:4f:e7:95:ed:87:38:07:d2:bd:5a:87:bd:99:c5:
         95:19:18:d3:10:e5:db:0e:0e:4d:d8:94:45:ff:67:77:26:1c:
         5b:8b:65:b6:14:9b:04:39:08:e1:19:d8:67:8c:d6:35:e5:fb:
         e3:a6:6c:da:b1:63:39:c6:89:6a:9a:f3:fc:aa:96:78:18:51:
         56:97:56:5b:5a:56:43:c9:02:83:9b:3b:ac:6c:29:20:a5:a0:
         db:3e:01:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:53 2025 by rpki-client