Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3af3e7b5-1acc-38ec-b667-14532b7b5e10.roa
File:                     3af3e7b5-1acc-38ec-b667-14532b7b5e10.roa (raw, json)
Hash identifier:          pBwhBscOmdODfkroCBIszJEpXNKJ/luSDguhwbB5Wv4=
Subject key identifier:   63:35:A3:84:F7:F3:03:30:95:EA:1E:C4:B0:F1:5E:93:54:8D:A4:DC
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848280A7002D7FCE2154284F000
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3af3e7b5-1acc-38ec-b667-14532b7b5e10.roa
Signing time:             Tue 10 Dec 2024 04:20:15 +0000
ROA not before:           Tue 10 Dec 2024 04:20:15 +0000
ROA not after:            Mon 10 Mar 2025 03:20:15 +0000
asID:                     13335
IP address blocks:        162.158.198.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:28:0a:70:02:d7:fc:e2:15:42:84:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 04:20:15 2024 GMT
            Not After : Mar 10 03:20:15 2025 GMT
        Subject: CN=b268ca34-cce3-449a-b438-08caece9c2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6e:52:5c:af:14:72:3d:38:ba:f0:35:f2:03:
                    e2:6b:13:c8:ab:88:7f:2e:00:9c:06:3f:80:07:fe:
                    57:f2:fd:67:d3:c6:8f:11:c7:b0:ce:12:86:ac:8a:
                    25:3c:07:cf:fc:79:6c:60:2d:e5:c8:ff:f2:97:c0:
                    e3:9e:56:c1:36:81:23:5c:26:ea:c8:11:eb:c4:71:
                    70:f5:be:5f:2b:fa:17:c3:25:46:d9:5c:a8:b8:cc:
                    42:e5:0e:08:db:24:13:e1:e1:27:e9:15:02:c6:f1:
                    d8:65:33:8a:08:7d:c8:08:40:f5:12:75:0f:9a:0f:
                    e6:38:92:a5:07:18:7b:e5:40:47:b8:10:e4:90:45:
                    ca:7f:ab:dc:ed:a5:12:6c:f5:70:0a:19:82:e4:08:
                    a5:04:28:c4:ca:44:f6:08:97:1d:e6:71:b1:c5:cb:
                    e4:4c:ea:3c:4a:25:eb:87:60:3d:83:a5:85:1d:0f:
                    05:a9:99:1e:67:bf:d3:f3:06:1d:6e:29:1d:84:13:
                    aa:ac:e1:9b:9b:94:27:cc:38:61:f0:48:a8:b9:88:
                    40:7c:0f:99:88:f6:23:56:5c:59:b1:fb:6c:1d:17:
                    38:5b:9c:7e:31:a6:0d:bd:a0:83:30:f7:18:a7:60:
                    21:82:2c:ed:18:e2:87:67:af:46:66:9a:f4:07:63:
                    98:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:35:A3:84:F7:F3:03:30:95:EA:1E:C4:B0:F1:5E:93:54:8D:A4:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3af3e7b5-1acc-38ec-b667-14532b7b5e10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:ae:8c:7d:0c:23:56:df:7d:d0:8b:49:ac:d2:26:d4:39:cf:
         90:59:91:a1:6b:3b:98:99:8f:73:65:be:4c:49:90:02:5d:4b:
         2f:5d:d5:2c:c3:1c:0d:04:e1:70:1b:de:1a:34:59:9a:d7:11:
         fa:24:53:3a:c0:52:e8:3d:ab:37:0f:97:2e:a4:01:1a:43:1e:
         c2:db:da:92:e3:6e:b1:27:2c:01:28:82:99:44:76:e9:c4:be:
         2b:e6:30:e1:77:ba:be:f8:66:63:74:24:ad:fa:fa:11:cf:be:
         9a:d6:ea:60:f7:54:cd:a2:a2:91:87:f5:c8:75:89:7f:32:38:
         18:67:11:65:c8:34:68:bc:5c:c0:53:67:b4:3f:cb:72:5c:a7:
         5a:7f:61:8f:ff:1d:7a:7e:e7:c6:06:91:ba:c5:8e:a2:f5:b5:
         86:cd:e9:a9:35:df:e2:a2:6a:8c:93:44:d5:19:21:11:c8:43:
         74:e6:17:3a:58:45:8c:74:19:cb:68:96:98:b2:8a:05:34:59:
         1f:ac:08:86:01:91:56:b7:88:69:cd:5a:2b:7d:27:60:75:87:
         18:60:72:9b:07:f3:ed:d8:84:d3:2f:6b:65:6d:df:c6:c7:7d:
         cb:96:6a:11:f1:a9:2c:b5:57:87:96:d5:32:77:7b:3d:a6:dc:
         c4:da:02:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:22 2025 by rpki-client