Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29ec81e0-564d-3cdc-8052-ee7ec81d40bc.roa
File:                     29ec81e0-564d-3cdc-8052-ee7ec81d40bc.roa (raw, json)
Hash identifier:          AOaU9ymWGUDU146Ycej9+FE8Rs2pU4hZ/ljGd3Ry6dY=
Subject key identifier:   88:18:97:13:F7:DE:10:C5:BC:64:C9:A6:4C:92:A3:F5:3C:5C:EF:85
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848278E8DFB4972069F9EC8CC00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29ec81e0-564d-3cdc-8052-ee7ec81d40bc.roa
Signing time:             Tue 10 Dec 2024 00:10:39 +0000
ROA not before:           Tue 10 Dec 2024 00:10:39 +0000
ROA not after:            Sun 09 Mar 2025 23:10:39 +0000
asID:                     13335
IP address blocks:        172.71.194.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:8e:8d:fb:49:72:06:9f:9e:c8:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 00:10:39 2024 GMT
            Not After : Mar  9 23:10:39 2025 GMT
        Subject: CN=653f54d8-8d31-448f-b619-faabe4935a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6c:aa:07:23:08:26:28:6c:c2:6c:a6:b5:a1:
                    e0:bc:8b:20:71:a8:65:7e:ae:20:92:cb:43:30:98:
                    39:51:b4:f4:ae:31:aa:e9:86:a5:e3:ae:09:89:27:
                    21:68:9c:92:ad:f9:cf:ce:52:c6:34:af:14:df:61:
                    de:65:2c:21:0e:4a:1c:c5:c5:30:fe:5a:ce:11:b8:
                    d7:fb:4a:d4:12:50:ce:c4:bf:92:df:9f:c7:84:f3:
                    41:32:22:49:1a:02:dd:2a:0a:47:b0:41:21:d3:37:
                    13:45:31:c3:cf:85:2c:f0:59:b3:d5:bb:17:70:b4:
                    14:53:2a:bf:fe:10:c4:29:3b:74:90:9f:3a:75:0a:
                    5f:7c:14:61:92:f7:cb:0f:2b:a8:18:6d:d8:85:98:
                    b9:3a:f6:a1:7e:d1:bc:86:f7:59:29:09:29:bb:0c:
                    c0:5c:c5:53:21:4e:2f:7b:65:fd:b5:bb:3f:ca:62:
                    11:51:d2:a3:ff:23:84:8a:54:ba:30:97:e9:a6:39:
                    89:b8:ed:f5:fe:9b:a0:f7:d4:b5:11:61:cb:b4:4a:
                    66:7f:7c:b4:db:1f:de:03:77:8b:59:f2:85:da:e1:
                    7a:a0:a5:e1:29:6b:99:ea:b5:d0:0b:78:06:78:ff:
                    c0:e5:03:90:16:dc:6d:36:54:49:19:64:b4:2e:56:
                    02:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:18:97:13:F7:DE:10:C5:BC:64:C9:A6:4C:92:A3:F5:3C:5C:EF:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29ec81e0-564d-3cdc-8052-ee7ec81d40bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:99:9c:ce:44:d0:2e:54:3f:40:87:04:89:57:b3:e3:30:8d:
         59:8a:38:e3:9c:93:d2:f2:d5:2c:b1:83:26:dd:54:6d:d7:b6:
         9c:06:c4:a6:ca:ba:70:cf:cc:df:e0:53:b4:30:2b:2c:08:da:
         d4:12:6d:12:be:bb:94:57:c2:92:60:cd:de:66:ff:b3:6b:ce:
         15:e8:d6:6b:b2:e1:a0:68:55:07:aa:13:16:57:ef:f1:68:7f:
         4d:da:a8:78:c0:1b:2b:58:8d:cc:8a:f1:19:3b:ee:d5:8d:f4:
         75:de:be:ed:2a:76:2b:21:c2:7c:2a:92:69:cd:9f:82:83:9e:
         19:49:e1:0c:20:12:45:16:08:ba:dc:4c:9d:f6:1a:d2:43:30:
         c9:ce:32:f5:14:d4:9f:88:c3:cc:b4:f0:4e:c7:38:79:a5:22:
         66:c7:01:2a:b3:44:4c:c0:96:89:b8:41:ba:63:fe:95:35:c9:
         69:eb:6e:a7:a5:4a:5c:68:6f:79:d8:f8:7c:1e:9d:86:3c:45:
         5b:07:97:20:e3:55:62:10:24:7f:d7:61:f7:ca:ba:38:db:8c:
         9f:d4:6e:29:e8:2a:19:54:43:df:27:8e:d4:63:2f:7d:8d:a7:
         ac:8a:fb:1e:9f:ea:d7:7f:32:61:ba:d2:fb:cf:6a:7c:cd:ec:
         6e:d5:4e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:59:44 2025 by rpki-client