Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2610cb2e-339b-36b1-afc7-4687cbaecd42.roa
File:                     2610cb2e-339b-36b1-afc7-4687cbaecd42.roa (raw, json)
Hash identifier:          VuUseO8D+sxNiaAuGtAoammOgtKw271RCzBeQL0bS2s=
Subject key identifier:   30:39:03:86:51:BB:E6:43:43:2A:21:10:3A:7B:69:0E:B0:70:FD:59
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584830426AB75017039748E9CC80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2610cb2e-339b-36b1-afc7-4687cbaecd42.roa
Signing time:             Fri 13 Dec 2024 02:59:31 +0000
ROA not before:           Fri 13 Dec 2024 02:59:31 +0000
ROA not after:            Thu 13 Mar 2025 01:59:31 +0000
asID:                     13335
IP address blocks:        172.71.29.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:30:42:6a:b7:50:17:03:97:48:e9:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 13 02:59:31 2024 GMT
            Not After : Mar 13 01:59:31 2025 GMT
        Subject: CN=84ff41e0-cfbe-495e-9aef-8e5964a386d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c2:27:e6:34:0f:be:e2:65:2b:cc:b5:da:3f:
                    90:85:ea:79:fd:8f:1c:23:bc:8b:20:33:6f:68:15:
                    96:a1:10:c0:a4:97:71:33:cd:33:1e:5b:8e:ef:0d:
                    b2:65:ee:5d:08:4f:e4:cc:df:4c:cf:97:8c:7a:23:
                    1e:ab:6f:9a:77:96:b2:e4:99:eb:51:0d:ac:69:1d:
                    10:1d:2b:e8:9e:1c:0a:f2:a6:11:0f:8b:1e:5f:d5:
                    a3:2b:90:0a:bc:f7:76:80:fa:a8:ce:0a:1c:b1:5f:
                    24:31:30:df:f2:e4:12:43:d4:40:cf:92:08:8e:54:
                    23:80:ea:b2:03:22:b3:1c:94:e5:b3:bb:c6:c3:17:
                    27:65:c7:1b:ba:d3:77:c7:5a:62:c7:25:8a:f1:30:
                    d6:ca:f3:40:b6:5f:ae:f1:a3:b3:4d:10:cb:03:9c:
                    cc:e8:a2:1a:02:73:36:4f:00:84:e7:b6:34:4e:98:
                    0a:4c:88:e3:28:ab:ad:ec:6a:fc:15:44:9e:5f:46:
                    03:4b:66:b5:11:f9:1a:cc:13:6e:23:1f:d0:54:99:
                    d6:fc:dd:60:89:9e:e9:93:c7:70:7a:45:54:4e:42:
                    41:54:6f:49:07:c3:42:53:f2:ef:6b:27:24:25:eb:
                    f7:77:84:e6:00:28:3e:89:23:63:bd:07:db:ab:95:
                    58:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:39:03:86:51:BB:E6:43:43:2A:21:10:3A:7B:69:0E:B0:70:FD:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2610cb2e-339b-36b1-afc7-4687cbaecd42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:87:76:b3:61:b4:fc:c8:48:ae:14:b9:0b:09:6e:c5:2b:63:
         09:93:d7:bc:7c:df:46:26:9e:28:c4:2e:e4:4d:e4:9a:74:82:
         ec:d2:a5:7e:1f:a9:b5:e9:e0:53:d4:ca:9c:1f:85:f7:70:1a:
         bd:f2:d9:c7:a7:21:53:82:c9:85:b2:b6:68:bc:2f:90:d6:da:
         96:54:5b:c9:91:29:89:69:88:7f:08:90:1b:31:b4:3e:3c:95:
         b2:b7:f5:83:31:aa:9e:6e:48:04:d3:a7:8b:84:fc:fb:77:8f:
         f6:d9:10:57:d4:ca:2d:be:a3:58:b4:6a:a9:74:73:94:57:38:
         a6:5f:51:d8:ee:96:6a:b2:5a:0a:97:74:4e:c7:97:52:50:73:
         b2:49:7a:6f:2a:50:3f:ca:14:ab:f8:b8:aa:9b:e6:ff:68:4e:
         57:da:2c:4c:95:6b:f3:b0:31:3f:2c:1a:56:4e:ec:82:e1:20:
         f2:23:91:c4:51:0f:86:4b:55:d0:43:16:ba:ba:c1:bd:b7:4e:
         c7:50:cc:87:32:d6:68:ef:85:57:9c:06:6b:b2:af:5a:1f:ae:
         6a:02:85:00:f3:2e:82:1a:e0:d5:c1:c1:5e:c6:60:29:e7:c3:
         af:8c:d1:87:e2:b9:84:70:78:fe:ea:2d:fa:8d:17:40:f1:e3:
         34:03:63:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:25:20 2025 by rpki-client