Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2aeb11c1-2136-337b-8723-206d9a94a51d.roa
File:                     2aeb11c1-2136-337b-8723-206d9a94a51d.roa (raw, json)
Hash identifier:          jIx7woFEUCil8unhfWskjbuFqhChv5cMCT4gAMJesxY=
Subject key identifier:   DD:D4:C4:46:0E:71:3F:21:1B:02:26:66:FB:89:D8:D6:90:7A:93:DE
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858482565FA955697537D43D141A4
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2aeb11c1-2136-337b-8723-206d9a94a51d.roa
Signing time:             Mon 09 Dec 2024 05:37:16 +0000
ROA not before:           Mon 09 Dec 2024 05:37:16 +0000
ROA not after:            Sun 09 Mar 2025 05:37:16 +0000
asID:                     13335
IP address blocks:        172.71.165.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:25:65:fa:95:56:97:53:7d:43:d1:41:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec  9 05:37:16 2024 GMT
            Not After : Mar  9 05:37:16 2025 GMT
        Subject: CN=63d11d8c-e1cb-40f6-bc14-19117f0f9d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7f:0c:87:0e:0b:cf:0d:0c:c0:a4:49:b0:9b:
                    a7:85:6e:42:48:17:01:79:17:fd:70:da:6a:be:af:
                    86:85:cb:e8:98:e0:32:db:5f:7c:7c:64:9b:90:6c:
                    3f:d6:a5:57:e9:47:3e:5e:e9:0e:38:5b:0a:b0:ea:
                    bc:d6:01:47:6c:7c:8c:41:8b:30:fc:cc:e9:36:2b:
                    ac:71:ab:01:e2:35:10:78:a5:fb:e4:3b:e5:3f:9e:
                    58:2f:92:9b:ce:c9:86:bb:e3:78:cf:2b:0c:84:ab:
                    04:0e:47:b9:a2:f0:19:76:93:a6:95:ad:2d:44:61:
                    6e:3e:97:6a:ee:ae:b6:47:24:a2:2c:1b:05:3f:02:
                    3a:f2:9d:c0:96:0f:60:5f:e2:11:dc:be:0e:72:d4:
                    48:48:f9:80:74:9c:9e:cc:63:90:e0:a0:e4:cc:10:
                    0d:2c:ec:46:c5:f2:ef:d1:b8:52:a5:ef:5a:51:80:
                    45:05:80:6d:17:e8:54:a7:d9:bf:38:0b:05:95:cf:
                    5d:6d:a1:3c:1a:51:26:08:0d:04:32:63:b5:3d:c1:
                    e9:2b:0f:c7:29:e4:17:67:9a:9c:d0:6d:10:da:1b:
                    c7:16:63:7e:65:68:01:15:2e:de:98:64:f6:90:39:
                    4a:dd:0f:12:fc:64:f7:45:73:ae:cf:e5:6e:cc:90:
                    cb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D4:C4:46:0E:71:3F:21:1B:02:26:66:FB:89:D8:D6:90:7A:93:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2aeb11c1-2136-337b-8723-206d9a94a51d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:3d:3e:f7:da:c0:8c:bf:f7:4c:82:1b:9c:be:26:c6:c4:63:
         cc:18:25:94:85:11:12:f6:51:57:c2:ac:49:e3:a9:b7:5c:4a:
         52:88:e3:7f:b1:53:46:4a:49:24:6b:29:fb:b7:47:68:99:16:
         26:08:fc:2b:f6:29:ed:94:e2:e9:5a:c6:a6:b8:76:62:ac:96:
         32:4b:b7:cf:60:a6:8f:74:36:8c:bd:49:28:65:ad:1d:96:ce:
         a7:f4:d2:2f:bb:3c:a3:c2:24:a7:4d:85:cf:5a:a7:19:e4:23:
         80:68:2a:3e:7d:f5:2e:0e:a6:76:74:2a:06:2d:af:84:25:99:
         6f:13:40:3f:2d:c2:3e:27:b3:b1:34:cb:18:07:ba:ad:37:36:
         f7:ef:89:f5:0e:d4:e1:ec:a8:5c:30:79:c9:e9:14:fd:2e:f8:
         21:74:ef:f3:77:bf:6f:a2:cb:b6:5a:2d:0b:12:34:f5:d0:b3:
         1b:45:52:67:22:4c:61:2c:17:85:10:07:0d:d6:ec:f1:59:95:
         41:d5:84:9b:c4:1d:1c:2a:dc:dc:48:38:84:d4:ee:bd:fd:2c:
         6f:2b:c1:9e:1d:2f:fb:a2:7e:01:6c:42:fd:e0:ca:32:da:18:
         63:04:2f:5a:ce:d9:53:8e:10:3f:82:d6:c5:40:10:32:a6:8f:
         06:42:7a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:12:04 2025 by rpki-client