Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1bb99555-9458-3ab3-883d-a5b2af0621de.roa
File:                     1bb99555-9458-3ab3-883d-a5b2af0621de.roa (raw, json)
Hash identifier:          TfnHaMqYd1wGMqlEl/RBMbdktLjjhGleGTdwICNVBfM=
Subject key identifier:   D5:D2:6F:2C:A2:6A:34:AE:89:59:12:8C:22:A9:5A:0D:D0:58:BC:EB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858483032A885D02401D7BA9A7A80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1bb99555-9458-3ab3-883d-a5b2af0621de.roa
Signing time:             Fri 13 Dec 2024 02:27:45 +0000
ROA not before:           Fri 13 Dec 2024 02:27:45 +0000
ROA not after:            Thu 13 Mar 2025 01:27:45 +0000
asID:                     13335
IP address blocks:        172.70.234.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:30:32:a8:85:d0:24:01:d7:ba:9a:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 13 02:27:45 2024 GMT
            Not After : Mar 13 01:27:45 2025 GMT
        Subject: CN=fec1b4f8-e54b-4c8e-9efd-5a47b7317303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2e:78:d3:bb:bb:03:b0:4d:70:b0:2f:b1:22:
                    e9:ff:44:ad:6a:88:e3:d9:df:64:bf:6b:f5:d2:ea:
                    b9:18:91:6b:b3:98:10:a5:db:5b:d3:36:e3:0e:62:
                    a0:00:6d:6e:ba:81:30:ba:0c:83:a6:c4:1d:38:b8:
                    20:35:95:3c:78:31:56:23:f9:83:74:d3:75:f5:73:
                    f8:6d:1f:e7:c0:5d:eb:c3:96:3b:6b:c5:4e:6d:fe:
                    bb:54:18:c7:94:12:d1:0a:e4:1d:57:69:66:53:70:
                    90:14:9c:07:94:78:83:c9:b1:9e:6e:24:5d:75:48:
                    e1:a6:62:fa:11:c8:95:40:99:b6:17:48:12:40:ed:
                    ab:67:cc:f6:0d:78:45:8c:0d:4b:be:8d:10:d5:2b:
                    b1:23:cc:52:9c:46:46:27:d1:4d:cd:69:13:1d:35:
                    69:98:85:31:3d:ee:60:a4:6e:ae:1d:a7:ef:0f:a7:
                    43:ed:fc:7d:e9:a7:62:fb:39:22:05:be:f7:f7:21:
                    69:77:57:fb:ce:1e:a8:e9:4e:b1:af:4a:d4:52:03:
                    46:bc:54:a0:da:5a:75:10:ca:d0:b4:58:1d:41:f3:
                    c7:22:97:99:0b:4e:f4:54:78:a2:a5:45:c1:13:84:
                    45:f0:5c:bd:3d:ac:ec:2e:b6:d6:bd:41:77:79:e4:
                    3e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D2:6F:2C:A2:6A:34:AE:89:59:12:8C:22:A9:5A:0D:D0:58:BC:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1bb99555-9458-3ab3-883d-a5b2af0621de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:19:ce:cd:32:7c:87:fe:84:ef:20:21:4b:c1:70:dd:52:cf:
         b2:ab:60:e6:6f:64:5d:28:df:6a:a2:f5:4a:5b:9e:71:f8:91:
         66:e4:e7:4e:37:72:23:09:aa:c5:4b:08:9c:62:21:70:12:93:
         a2:95:56:5f:5d:8d:f9:e4:9e:15:42:a2:eb:dd:8d:36:a8:c8:
         ed:4f:5e:ef:e2:1e:98:9f:c1:cc:ff:b4:1e:e5:ce:f8:68:75:
         6e:88:7f:7b:41:d7:4e:dd:92:f5:ad:51:4f:37:fd:14:80:22:
         6d:0a:16:15:28:29:43:b1:25:40:69:9b:05:16:87:db:96:25:
         a6:7a:a8:20:2c:6f:a0:15:21:fb:55:35:15:c8:fd:69:ed:c0:
         70:c3:17:25:b3:e4:0d:fd:82:c0:43:22:76:62:53:5b:29:ee:
         42:b3:a5:66:29:0b:be:62:fb:bc:9d:eb:0f:b8:27:6b:24:0c:
         05:20:d9:dc:2f:9e:fb:81:a2:4e:66:07:d8:52:3c:2b:7f:87:
         b0:29:5a:13:34:a7:37:fd:b0:59:8f:60:d8:4f:e9:6a:7a:ba:
         81:d2:a8:bc:39:2a:65:8b:38:8c:65:3b:3f:04:c4:9c:a2:16:
         f3:43:41:f5:f3:1e:86:b4:3d:47:85:f5:1d:72:4c:e9:0f:f1:
         24:43:f8:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgwMqiF0CQB17qaeoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMzAyMjc0NVoXDTI1MDMxMzAxMjc0NVowLzEtMCsGA1UEAxMk
ZmVjMWI0ZjgtZTU0Yi00YzhlLTllZmQtNWE0N2I3MzE3MzAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAii5407u7A7BNcLAvsSLp/0Staojj2d9kv2v1
0uq5GJFrs5gQpdtb0zbjDmKgAG1uuoEwugyDpsQdOLggNZU8eDFWI/mDdNN19XP4
bR/nwF3rw5Y7a8VObf67VBjHlBLRCuQdV2lmU3CQFJwHlHiDybGebiRddUjhpmL6
EciVQJm2F0gSQO2rZ8z2DXhFjA1Lvo0Q1SuxI8xSnEZGJ9FNzWkTHTVpmIUxPe5g
pG6uHafvD6dD7fx96adi+zkiBb739yFpd1f7zh6o6U6xr0rUUgNGvFSg2lp1EMrQ
tFgdQfPHIpeZC070VHiipUXBE4RF8Fy9PazsLrbWvUF3eeQ+kwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNXSbyyiajSuiVkSjCKpWg3QWLzrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWJiOTk1NTUtOTQ1OC0z
YWIzLTg4M2QtYTViMmFmMDYyMWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEIZzs0yfIf+hO8gIUvBcN1Sz7KrYOZvZF0o32qi9UpbnnH4kWbk5043
ciMJqsVLCJxiIXASk6KVVl9djfnknhVCouvdjTaoyO1PXu/iHpifwcz/tB7lzvho
dW6If3tB107dkvWtUU83/RSAIm0KFhUoKUOxJUBpmwUWh9uWJaZ6qCAsb6AVIftV
NRXI/WntwHDDFyWz5A39gsBDInZiU1sp7kKzpWYpC75i+7yd6w+4J2skDAUg2dwv
nvuBok5mB9hSPCt/h7ApWhM0pzf9sFmPYNhP6Wp6uoHSqLw5KmWLOIxlOz8ExJyi
FvNDQfXzHoa0PUeF9R1yTOkP8SRD+Bk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:09:15 2025 by rpki-client