Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a6ef38b-7055-3d68-88d4-dd134de9d7c2.roa
File:                     2a6ef38b-7055-3d68-88d4-dd134de9d7c2.roa (raw, json)
Hash identifier:          iq/jNq7/8oE9AlF/IcyVE4SIHNIo+jafgfv6Qk8HFcI=
Subject key identifier:   52:57:9A:6C:04:DE:6C:4D:DD:C3:2E:71:23:00:13:CF:8A:7B:0B:00
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858483020442675FE67C2399F3680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a6ef38b-7055-3d68-88d4-dd134de9d7c2.roa
Signing time:             Fri 13 Dec 2024 01:50:42 +0000
ROA not before:           Fri 13 Dec 2024 01:50:42 +0000
ROA not after:            Thu 13 Mar 2025 00:50:42 +0000
asID:                     13335
IP address blocks:        172.69.251.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:30:20:44:26:75:fe:67:c2:39:9f:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 13 01:50:42 2024 GMT
            Not After : Mar 13 00:50:42 2025 GMT
        Subject: CN=85a3f3be-a6d7-468b-930c-6709476e105c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:49:0a:7b:36:45:f4:ad:7f:7f:4a:0e:49:5c:
                    8a:54:26:da:e3:74:48:e1:9b:67:6e:5c:35:a8:01:
                    c6:75:16:98:45:6b:ec:f5:ae:62:5e:39:e8:e1:35:
                    ba:35:8f:88:81:f4:d7:6b:62:ee:d6:b4:0a:7d:44:
                    cb:bc:6b:4f:95:1e:4b:40:1f:76:90:f7:de:33:27:
                    5b:3d:42:77:6d:b6:1f:d9:95:b2:34:76:67:ce:1e:
                    e1:8c:45:3b:c2:0c:48:13:63:a5:6e:95:de:e9:32:
                    23:9f:af:56:c5:c0:33:9a:c1:53:de:af:c5:52:7c:
                    24:13:fe:29:44:63:74:83:ef:d7:04:6d:a9:88:29:
                    39:59:4a:f5:67:43:9d:85:8d:7a:1e:7a:3b:96:48:
                    51:97:0a:48:c2:c7:49:21:2c:e3:47:3a:9e:9c:81:
                    ed:19:72:bd:86:c2:08:83:09:0f:c7:42:e7:01:43:
                    c5:d3:76:c9:a8:e4:e0:af:67:b8:e3:47:16:51:0f:
                    d6:a4:e1:40:a1:02:cc:8f:92:e0:12:d8:48:17:c5:
                    ea:7d:1f:53:59:af:ed:e6:ab:22:bf:bc:f8:42:6a:
                    24:96:21:f6:a9:be:61:8b:78:0a:4b:2d:f1:86:24:
                    5b:b8:9a:29:7b:b5:c8:a3:7d:8c:0d:82:db:a2:04:
                    74:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:57:9A:6C:04:DE:6C:4D:DD:C3:2E:71:23:00:13:CF:8A:7B:0B:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a6ef38b-7055-3d68-88d4-dd134de9d7c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:2b:e1:e9:cf:5f:d5:0c:54:90:2a:48:ff:df:03:ee:53:91:
         0d:33:c2:be:f1:75:75:09:f2:85:f0:77:a5:9a:eb:3a:94:7a:
         db:dc:8f:2d:ee:1a:0a:b2:08:00:18:f2:37:c9:4d:ed:aa:b6:
         d4:f4:4a:28:59:06:ab:54:9c:99:16:44:4c:0f:68:d3:2b:42:
         e8:52:62:45:83:52:7e:7a:51:bb:19:d4:f8:d1:14:68:05:8b:
         e1:81:65:8c:e3:82:09:92:98:24:b7:ca:d9:d6:83:95:19:e9:
         44:21:fa:34:1f:18:f5:f6:6b:4c:13:02:bb:6b:ab:eb:c0:b0:
         d1:35:62:77:a3:32:9b:42:68:44:3d:fa:8b:e6:04:f8:bd:db:
         de:28:61:3d:50:93:c3:ec:95:35:32:95:f6:da:20:67:9c:43:
         8e:71:e4:ba:11:91:50:22:82:13:a3:f8:88:51:40:0d:bf:33:
         e2:6f:d1:03:26:a1:86:8b:8d:6f:68:15:f0:24:42:70:44:d4:
         96:68:a9:14:0a:87:2d:ae:c7:d4:bb:ed:81:65:ae:e5:94:ba:
         9e:3a:fb:25:86:6c:bd:67:ff:b1:9e:19:c7:18:cd:4c:86:97:
         8d:7f:94:03:82:4d:d7:4e:ea:3b:49:b8:53:72:89:44:63:b1:
         99:e9:15:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgwIEQmdf5nwjmfNoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMzAxNTA0MloXDTI1MDMxMzAwNTA0MlowLzEtMCsGA1UEAxMk
ODVhM2YzYmUtYTZkNy00NjhiLTkzMGMtNjcwOTQ3NmUxMDVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkkKezZF9K1/f0oOSVyKVCba43RI4Ztnblw1
qAHGdRaYRWvs9a5iXjno4TW6NY+IgfTXa2Lu1rQKfUTLvGtPlR5LQB92kPfeMydb
PUJ3bbYf2ZWyNHZnzh7hjEU7wgxIE2OlbpXe6TIjn69WxcAzmsFT3q/FUnwkE/4p
RGN0g+/XBG2piCk5WUr1Z0OdhY16Hno7lkhRlwpIwsdJISzjRzqenIHtGXK9hsII
gwkPx0LnAUPF03bJqOTgr2e440cWUQ/WpOFAoQLMj5LgEthIF8XqfR9TWa/t5qsi
v7z4QmokliH2qb5hi3gKSy3xhiRbuJope7XIo32MDYLbogR0pQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFJXmmwE3mxN3cMucSMAE8+KewsAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmE2ZWYzOGItNzA1NS0z
ZDY4LTg4ZDQtZGQxMzRkZTlkN2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEX7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMgr4enPX9UMVJAqSP/fA+5TkQ0zwr7xdXUJ8oXwd6Wa6zqUetvcjy3u
GgqyCAAY8jfJTe2qttT0SihZBqtUnJkWREwPaNMrQuhSYkWDUn56UbsZ1PjRFGgF
i+GBZYzjggmSmCS3ytnWg5UZ6UQh+jQfGPX2a0wTArtrq+vAsNE1YnejMptCaEQ9
+ovmBPi9294oYT1Qk8PslTUylfbaIGecQ45x5LoRkVAighOj+IhRQA2/M+Jv0QMm
oYaLjW9oFfAkQnBE1JZoqRQKhy2ux9S77YFlruWUup46+yWGbL1n/7GeGccYzUyG
l41/lAOCTddO6jtJuFNyiURjsZnpFUc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:48:49 2025 by rpki-client