Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43a081bb-cde3-3137-9e47-27d887425097.roa
File:                     43a081bb-cde3-3137-9e47-27d887425097.roa (raw, json)
Hash identifier:          ZgDN7x4B51al18tpRu13qPGNsdQPS8FUQJ2Zzcc8nSQ=
Subject key identifier:   A9:08:87:34:85:24:20:43:6E:BF:E5:48:55:9A:C8:CC:77:3B:AC:A2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858482A99D4F16B4844123A9886C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43a081bb-cde3-3137-9e47-27d887425097.roa
Signing time:             Wed 11 Dec 2024 02:20:47 +0000
ROA not before:           Wed 11 Dec 2024 02:20:47 +0000
ROA not after:            Tue 11 Mar 2025 01:20:47 +0000
asID:                     13335
IP address blocks:        172.69.8.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2a:99:d4:f1:6b:48:44:12:3a:98:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 11 02:20:47 2024 GMT
            Not After : Mar 11 01:20:47 2025 GMT
        Subject: CN=8934fafb-b978-4f4b-bcc0-4dc576e45a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b8:e2:80:e9:99:0c:00:0b:90:3e:9a:62:8d:
                    a2:03:44:51:20:34:b7:1d:0d:4a:0e:7f:a4:49:22:
                    3d:9c:ae:6c:36:69:65:59:a1:68:85:f4:54:6b:23:
                    8d:38:20:90:47:18:d1:b7:6a:a9:ef:4c:b7:f6:ce:
                    bc:ae:92:8a:87:e5:90:3b:34:60:ac:2b:d1:4e:4b:
                    ba:67:b3:57:1f:0f:e6:db:9d:ef:ee:e6:63:2a:69:
                    e8:7c:2d:16:4b:8c:70:81:62:25:07:0a:4a:cf:62:
                    07:ff:cc:b5:f1:97:f3:ba:6e:6a:ca:f3:26:a3:95:
                    75:6b:6b:ec:44:a2:c2:7f:50:16:d8:6e:79:a0:b7:
                    2e:d1:5d:d5:e9:6b:27:9b:8f:2a:fc:26:57:f9:43:
                    97:3a:d8:39:72:b1:a7:c7:05:30:e2:d2:2f:6d:c8:
                    4a:d1:45:d9:ff:b6:9f:32:4d:41:92:a9:b0:50:cf:
                    a5:51:ed:ba:40:23:2d:d9:20:6e:e1:e2:1a:64:08:
                    e0:5a:37:b9:a1:51:81:ab:fa:11:21:aa:2a:4d:f9:
                    fe:4a:73:78:fd:bf:21:3d:6e:b2:5b:b4:e3:5e:3d:
                    9f:bd:39:cb:2b:20:cf:d0:1d:ac:fc:f6:59:69:a4:
                    fa:22:5e:b0:8a:ca:2c:5f:85:05:5b:14:3b:26:87:
                    0d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:08:87:34:85:24:20:43:6E:BF:E5:48:55:9A:C8:CC:77:3B:AC:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43a081bb-cde3-3137-9e47-27d887425097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:75:f3:7f:8d:b6:23:85:5c:bb:33:05:8e:6b:dd:80:e8:14:
         94:01:2a:fb:03:ca:e6:32:15:f0:08:61:73:3a:1e:39:64:80:
         db:b5:e1:ad:45:86:32:ed:de:54:1b:53:55:d0:16:46:cf:d2:
         43:91:97:a2:ea:cb:fa:bd:2c:cb:c9:fc:89:77:96:2e:3f:00:
         29:63:f5:98:c6:bb:c3:ce:e5:b7:42:87:33:70:94:5d:16:16:
         54:cd:8d:e2:55:aa:dd:f2:23:78:71:b9:5b:b0:a0:a3:89:e3:
         0b:1c:36:af:81:c9:77:4b:dd:c6:51:52:28:3c:e1:e7:f1:62:
         8b:6f:1b:94:7c:56:d9:64:f3:29:a1:01:84:f2:66:dd:cf:b1:
         73:19:84:15:68:02:ed:43:38:ed:44:dd:22:5f:26:d1:3f:9f:
         7d:55:f5:2f:1f:42:c3:69:7d:b2:73:df:26:fd:28:d8:d6:d9:
         0d:d4:ed:ea:3e:97:64:44:9c:3f:8a:7c:b1:b8:f8:45:63:30:
         a3:ce:44:75:9a:86:b4:b2:84:b6:13:9d:57:a8:00:d8:d8:d2:
         11:15:e8:45:02:3d:2a:60:75:ed:6d:1d:e0:e3:36:49:e8:ee:
         df:b7:58:0f:ff:40:6e:e6:46:46:62:32:6b:5d:3c:59:5c:12:
         3e:dd:f0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:32:06 2025 by rpki-client