Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/04a31621-bfe8-3329-8525-e060df72506b.roa
File:                     04a31621-bfe8-3329-8525-e060df72506b.roa (raw, json)
Hash identifier:          Vdf8NS60OHnwdSv9QyePN0BcWJiU9r/2H2bKIhUqank=
Subject key identifier:   82:CD:6C:5D:2E:35:EF:C4:0A:6F:9A:B6:80:14:55:55:F6:2B:EC:74
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584828123D368A59364C45613980
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/04a31621-bfe8-3329-8525-e060df72506b.roa
Signing time:             Tue 10 Dec 2024 04:35:58 +0000
ROA not before:           Tue 10 Dec 2024 04:35:58 +0000
ROA not after:            Mon 10 Mar 2025 03:35:58 +0000
asID:                     13335
IP address blocks:        162.159.42.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:28:12:3d:36:8a:59:36:4c:45:61:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 04:35:58 2024 GMT
            Not After : Mar 10 03:35:58 2025 GMT
        Subject: CN=46439443-1dbe-4cb9-a4fd-588078d9e932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:52:3e:cb:b3:0c:21:bf:7d:2f:78:8b:e3:15:
                    76:19:26:c0:cc:f3:18:0c:cb:fb:55:92:06:95:e9:
                    9a:27:b7:07:9b:7d:a0:ba:7d:c6:68:32:3f:a9:59:
                    75:f2:6c:88:81:5a:da:3e:e4:06:cc:46:5c:5a:0c:
                    19:a0:0f:34:7c:bf:68:27:33:2e:82:40:c2:90:ee:
                    e6:3c:f4:88:18:fd:0b:5e:e7:24:35:e3:f0:6c:7d:
                    6e:15:00:36:82:ca:a5:e3:41:96:cd:79:43:fa:4f:
                    09:a9:24:66:b2:38:d1:c2:e2:ed:3a:41:35:c2:08:
                    1b:af:d2:fb:2b:4e:c5:a1:ab:dd:de:30:65:48:9a:
                    23:7c:fb:e7:97:67:b6:18:f4:a1:ca:06:6e:8c:74:
                    71:ee:5b:36:3b:ce:d8:cd:0f:98:74:b2:5b:10:68:
                    ee:6d:4d:9a:05:f5:66:ed:2a:b9:bf:ce:d2:eb:a6:
                    27:8f:a6:e7:58:83:39:a8:e5:35:50:37:6b:61:0d:
                    8e:6f:45:4e:5a:72:f5:e7:f6:90:8e:30:37:6c:95:
                    de:72:20:6f:7e:82:00:d9:e3:93:0c:2c:0d:8f:8a:
                    33:af:f0:62:f8:64:8e:1a:b3:60:dc:a0:49:5f:5d:
                    a5:c6:03:2c:f3:e0:d6:f3:c2:45:0a:08:3b:e3:fe:
                    b8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CD:6C:5D:2E:35:EF:C4:0A:6F:9A:B6:80:14:55:55:F6:2B:EC:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/04a31621-bfe8-3329-8525-e060df72506b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:d3:76:d4:ff:12:96:8e:1a:ad:e6:5f:16:f9:4e:a8:0e:d4:
         08:22:63:bf:c6:4e:d8:33:6e:55:72:00:c6:39:b0:66:76:bb:
         d7:b0:6f:5d:fa:a6:df:d1:c1:7e:97:42:62:55:be:ac:21:4e:
         c9:fe:23:9e:00:36:39:42:43:c0:90:05:0f:13:82:69:f2:da:
         0f:b0:0f:50:77:00:09:23:18:e8:0b:25:b8:6c:b4:23:02:db:
         a8:92:01:a3:96:f4:60:42:e4:5f:5a:39:97:bc:d4:89:16:3c:
         ab:6e:3b:f4:53:d9:1e:ba:60:75:6f:55:5d:49:09:9e:66:36:
         c9:c2:67:6f:f1:7e:13:47:df:bb:b9:78:a9:dc:60:50:93:08:
         7d:75:4a:f9:83:3a:d1:73:27:3f:c4:65:f0:22:48:fa:35:c1:
         a1:bf:27:a4:b5:57:d3:e4:10:85:e8:94:6f:f7:69:d7:d8:f3:
         15:a4:d3:ce:52:03:18:7b:20:b4:db:af:3e:51:b3:fa:7f:70:
         68:7a:78:a7:5e:11:c7:8c:53:c8:66:7f:59:8a:10:ba:35:a8:
         09:cc:d1:6a:dc:6f:ba:7a:c5:89:f4:95:89:66:8a:fd:f0:7c:
         49:7c:57:75:e8:d1:84:60:49:8e:72:f5:5c:cb:86:5b:62:63:
         63:ae:f1:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgoEj02ilk2TEVhOYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDA0MzU1OFoXDTI1MDMxMDAzMzU1OFowLzEtMCsGA1UEAxMk
NDY0Mzk0NDMtMWRiZS00Y2I5LWE0ZmQtNTg4MDc4ZDllOTMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1I+y7MMIb99L3iL4xV2GSbAzPMYDMv7VZIG
lemaJ7cHm32gun3GaDI/qVl18myIgVraPuQGzEZcWgwZoA80fL9oJzMugkDCkO7m
PPSIGP0LXuckNePwbH1uFQA2gsql40GWzXlD+k8JqSRmsjjRwuLtOkE1wggbr9L7
K07Foavd3jBlSJojfPvnl2e2GPShygZujHRx7ls2O87YzQ+YdLJbEGjubU2aBfVm
7Sq5v87S66Ynj6bnWIM5qOU1UDdrYQ2Ob0VOWnL15/aQjjA3bJXeciBvfoIA2eOT
DCwNj4ozr/Bi+GSOGrNg3KBJX12lxgMs8+DW88JFCgg74/649QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFILNbF0uNe/ECm+atoAUVVX2K+x0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDRhMzE2MjEtYmZlOC0z
MzI5LTg1MjUtZTA2MGRmNzI1MDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBop8qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAETTdtT/EpaOGq3mXxb5TqgO1AgiY7/GTtgzblVyAMY5sGZ2u9ewb136
pt/RwX6XQmJVvqwhTsn+I54ANjlCQ8CQBQ8Tgmny2g+wD1B3AAkjGOgLJbhstCMC
26iSAaOW9GBC5F9aOZe81IkWPKtuO/RT2R66YHVvVV1JCZ5mNsnCZ2/xfhNH37u5
eKncYFCTCH11SvmDOtFzJz/EZfAiSPo1waG/J6S1V9PkEIXolG/3adfY8xWk085S
Axh7ILTbrz5Rs/p/cGh6eKdeEceMU8hmf1mKELo1qAnM0Wrcb7p6xYn0lYlmiv3w
fEl8V3Xo0YRgSY5y9VzLhltiY2Ou8Zo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:15:00 2025 by rpki-client