Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1598ca3d-5035-3b50-aa15-360fada01876.roa
File:                     1598ca3d-5035-3b50-aa15-360fada01876.roa (raw, json)
Hash identifier:          C+2HPg6epjNlA2noWocHa7pY3NdOQAbi3Gq9NSnxao0=
Subject key identifier:   1E:58:E6:2E:99:E8:77:A7:51:23:F5:9B:28:24:81:7B:D0:95:2F:29
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848256444342A2B02AC32479480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1598ca3d-5035-3b50-aa15-360fada01876.roa
Signing time:             Mon 09 Dec 2024 05:33:49 +0000
ROA not before:           Mon 09 Dec 2024 05:33:49 +0000
ROA not after:            Sun 09 Mar 2025 05:33:49 +0000
asID:                     13335
IP address blocks:        172.71.146.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:25:64:44:34:2a:2b:02:ac:32:47:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec  9 05:33:49 2024 GMT
            Not After : Mar  9 05:33:49 2025 GMT
        Subject: CN=69d65e58-ed3b-4de6-a731-44d2dca26b0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d1:c9:9a:ec:76:47:41:11:2a:d6:6e:ff:25:
                    83:cc:58:00:a5:22:75:e6:f8:25:e8:22:ab:88:67:
                    86:70:91:13:53:ea:c2:f1:eb:7f:7f:4f:10:a8:e1:
                    c5:ec:90:9a:7a:0e:2b:58:d7:10:21:da:ce:b9:45:
                    3a:97:60:c3:9c:31:9d:94:a6:8a:f9:b1:94:7f:70:
                    54:fe:b0:53:8e:5c:54:6e:a8:57:7a:f2:47:3d:c4:
                    89:cc:16:2a:5f:ec:ce:7b:7b:ae:e1:a1:ec:0b:55:
                    3c:ba:dd:18:0b:54:8a:55:36:9e:cf:2e:0b:45:4c:
                    40:dc:24:6b:e9:41:54:04:d8:b0:eb:1f:15:87:ce:
                    1f:2f:e1:09:86:cf:c2:02:a2:e4:c5:81:ec:fb:78:
                    47:9b:ca:08:a4:46:14:92:bc:b7:1c:55:2a:bb:98:
                    94:0f:4c:b2:e8:60:24:a9:4c:c0:eb:ca:ac:b3:24:
                    73:ad:1d:c7:91:1c:5f:ed:60:ac:55:81:a5:2d:bb:
                    40:27:9b:cc:08:45:a2:f0:72:f6:cf:ce:2e:e9:4c:
                    66:c4:89:d3:20:c4:1b:f4:9f:ea:5b:ed:51:0a:bd:
                    d8:98:9c:3a:e4:3a:c5:e4:61:50:cc:8d:cc:09:2f:
                    3e:7e:19:12:61:09:fa:e6:1c:5a:d2:96:31:de:1b:
                    69:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:58:E6:2E:99:E8:77:A7:51:23:F5:9B:28:24:81:7B:D0:95:2F:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1598ca3d-5035-3b50-aa15-360fada01876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:20:c2:0a:11:9f:03:f2:60:eb:36:69:46:60:09:df:7a:bc:
         91:fc:8e:bb:b9:0c:c9:56:a7:a1:72:e9:af:d8:9f:cf:d0:02:
         87:c6:2c:19:4b:07:b1:95:25:2a:23:d0:ed:e7:b4:8e:dc:3f:
         9b:b0:17:8c:d4:f9:ce:5a:c7:6c:e6:f2:00:a3:b6:9c:3b:bf:
         8d:ce:9d:de:42:d9:03:ee:b1:b7:f5:7d:04:2d:04:5d:44:61:
         ee:30:12:60:1c:83:2f:88:f0:9e:a0:17:67:63:e4:82:e1:55:
         40:6b:58:d9:33:ff:64:49:d0:14:25:d7:f8:dc:ce:81:7f:c7:
         eb:af:c5:53:6c:34:e4:4d:35:57:4d:34:8a:40:be:9f:4b:f6:
         44:8c:d3:ff:db:6e:4a:82:79:24:a4:51:10:99:9d:57:b7:6d:
         1d:37:f8:c5:99:5a:81:b3:2a:3b:7b:d8:12:7d:4c:cc:c1:f3:
         da:ea:bc:ae:e9:d5:e4:d0:74:8a:17:78:64:94:b9:7e:c4:98:
         dc:67:cf:c9:d8:77:85:0e:94:4f:b7:db:08:f1:b3:10:33:0f:
         4e:bd:95:8f:55:31:bf:3b:92:54:bb:53:fc:52:b2:46:48:73:
         22:0d:6e:28:fd:95:a4:f9:fb:38:69:65:f8:8a:ca:f4:3a:f8:
         48:f0:21:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:10:13 2025 by rpki-client