Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1bf473c4-5861-31bc-aba2-27b6deff53d2.roa
File:                     1bf473c4-5861-31bc-aba2-27b6deff53d2.roa (raw, json)
Hash identifier:          8ToT0+99U3lw9wmG8QJMQOB8z1dECBCD6o8CK96Nudk=
Subject key identifier:   2C:76:61:3D:AD:F5:73:E9:4A:0D:AF:B4:B7:9C:7B:07:3A:1A:B5:94
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584827B7E0AF1958D468EEE9E180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1bf473c4-5861-31bc-aba2-27b6deff53d2.roa
Signing time:             Tue 10 Dec 2024 01:33:54 +0000
ROA not before:           Tue 10 Dec 2024 01:33:54 +0000
ROA not after:            Mon 10 Mar 2025 00:33:54 +0000
asID:                     13335
IP address blocks:        162.158.46.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:b7:e0:af:19:58:d4:68:ee:e9:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 01:33:54 2024 GMT
            Not After : Mar 10 00:33:54 2025 GMT
        Subject: CN=e7f7e5e5-e57d-4279-b1d6-f0f40133c217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:df:8f:77:b4:3e:b6:f5:77:77:00:d9:b6:
                    a7:0d:02:69:04:58:da:20:fa:67:28:b5:f4:7d:96:
                    74:0b:51:57:d7:ad:7a:67:86:6f:fe:1d:64:23:dc:
                    26:6f:47:c1:f9:96:7a:ee:ab:dd:5b:4d:bf:2b:08:
                    ee:f2:1b:4a:9e:73:a0:b4:4a:f8:e3:db:21:6f:39:
                    2b:dd:c9:56:78:c1:d4:82:5d:da:0d:77:01:c0:ac:
                    53:35:4a:65:da:9e:8d:bf:6c:67:df:92:a7:7e:f2:
                    af:5b:41:cc:ac:a8:1f:fc:13:5c:8d:17:62:40:e5:
                    c0:49:84:c9:e4:29:4d:13:25:2f:85:a7:c8:58:89:
                    12:b3:99:6a:61:ad:5e:7a:7a:3c:4f:24:71:46:ba:
                    d4:86:7c:af:34:e7:c5:04:3d:54:eb:06:7e:0d:f1:
                    c9:17:b9:3a:24:01:8c:cc:f1:07:be:d4:2a:ee:42:
                    0c:db:00:a8:a5:e8:7f:15:bd:b7:45:dc:c1:25:e5:
                    b2:3d:c6:2b:14:37:3a:e5:8f:06:b9:00:12:b3:fa:
                    e2:b0:ef:5e:05:46:7b:e5:77:d5:e4:6d:18:94:55:
                    93:aa:3b:bb:c7:74:fb:a9:54:39:95:4c:ba:7c:0a:
                    23:a6:a5:9e:e5:25:1e:78:be:74:d2:f9:80:7e:c1:
                    fc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:76:61:3D:AD:F5:73:E9:4A:0D:AF:B4:B7:9C:7B:07:3A:1A:B5:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1bf473c4-5861-31bc-aba2-27b6deff53d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:5e:8c:0c:29:37:2b:41:6e:3c:78:c7:c7:04:4f:63:ab:92:
         35:b3:13:91:8f:39:86:7a:33:3c:90:89:c7:0e:ec:4f:14:56:
         23:c0:27:d2:ed:e3:58:c5:09:a0:d8:9c:3c:06:d6:66:15:69:
         2a:d6:ab:8c:14:af:fd:f9:19:91:71:ec:da:85:03:39:21:33:
         16:f4:4f:ef:85:31:3b:02:c8:d5:b5:6e:be:02:ff:2f:34:27:
         bc:3f:05:8f:20:5e:49:d8:2d:21:fe:8b:9b:d0:2c:6c:da:88:
         88:a3:ad:a4:56:f4:73:bf:7a:73:6e:85:8a:2b:c0:93:44:b1:
         fd:8d:63:e6:f3:13:54:f8:f5:94:44:5c:ae:ea:1b:68:83:6e:
         5f:23:ec:97:2c:0c:c6:01:47:b2:56:53:c0:46:68:22:d3:a3:
         52:09:cf:23:29:58:f1:5b:00:96:c4:12:be:e3:38:a7:3e:78:
         2b:c5:55:4e:2c:de:b8:06:1b:29:99:d4:c9:21:b3:de:c5:80:
         30:6d:74:e8:2a:6a:3e:96:45:09:11:bf:f8:aa:09:7a:c3:20:
         ab:28:20:34:ea:6b:94:3c:d7:0e:c8:49:75:89:8c:de:e5:70:
         12:1c:4e:2e:da:2a:90:7f:ab:14:71:02:87:b0:e2:05:2e:0d:
         ec:28:68:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgnt+CvGVjUaO7p4YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDAxMzM1NFoXDTI1MDMxMDAwMzM1NFowLzEtMCsGA1UEAxMk
ZTdmN2U1ZTUtZTU3ZC00Mjc5LWIxZDYtZjBmNDAxMzNjMjE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp7fj3e0Prb1d3cA2banDQJpBFjaIPpnKLX0
fZZ0C1FX1616Z4Zv/h1kI9wmb0fB+ZZ67qvdW02/Kwju8htKnnOgtEr449shbzkr
3clWeMHUgl3aDXcBwKxTNUpl2p6Nv2xn35KnfvKvW0HMrKgf/BNcjRdiQOXASYTJ
5ClNEyUvhafIWIkSs5lqYa1eeno8TyRxRrrUhnyvNOfFBD1U6wZ+DfHJF7k6JAGM
zPEHvtQq7kIM2wCopeh/Fb23RdzBJeWyPcYrFDc65Y8GuQASs/risO9eBUZ75XfV
5G0YlFWTqju7x3T7qVQ5lUy6fAojpqWe5SUeeL500vmAfsH8tQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCx2YT2t9XPpSg2vtLecewc6GrWUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWJmNDczYzQtNTg2MS0z
MWJjLWFiYTItMjdiNmRlZmY1M2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop4uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGhejAwpNytBbjx4x8cET2OrkjWzE5GPOYZ6MzyQiccO7E8UViPAJ9Lt
41jFCaDYnDwG1mYVaSrWq4wUr/35GZFx7NqFAzkhMxb0T++FMTsCyNW1br4C/y80
J7w/BY8gXknYLSH+i5vQLGzaiIijraRW9HO/enNuhYorwJNEsf2NY+bzE1T49ZRE
XK7qG2iDbl8j7JcsDMYBR7JWU8BGaCLTo1IJzyMpWPFbAJbEEr7jOKc+eCvFVU4s
3rgGGymZ1Mkhs97FgDBtdOgqaj6WRQkRv/iqCXrDIKsoIDTqa5Q81w7ISXWJjN7l
cBIcTi7aKpB/qxRxAoew4gUuDewoaIs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:33:41 2025 by rpki-client