Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/47a008e5-d2c9-309b-a69c-5ceb169d394a.roa
File:                     47a008e5-d2c9-309b-a69c-5ceb169d394a.roa (raw, json)
Hash identifier:          7lVVXfkIMi3p0hGX8Xf3d0ccmLQPLbMZodQ+0RFkR5c=
Subject key identifier:   56:7C:F7:06:03:3B:DE:A4:27:20:63:C6:1C:C0:81:D4:5D:B3:81:08
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848280B2E998DB64B39D36EAD00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/47a008e5-d2c9-309b-a69c-5ceb169d394a.roa
Signing time:             Tue 10 Dec 2024 04:21:45 +0000
ROA not before:           Tue 10 Dec 2024 04:21:45 +0000
ROA not after:            Mon 10 Mar 2025 03:21:45 +0000
asID:                     13335
IP address blocks:        162.158.205.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:28:0b:2e:99:8d:b6:4b:39:d3:6e:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 04:21:45 2024 GMT
            Not After : Mar 10 03:21:45 2025 GMT
        Subject: CN=0360b15c-d989-40b4-ba8c-be3550e58e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ba:7b:64:0c:28:5a:69:af:5b:ae:bc:5d:fd:
                    7c:60:c3:24:f3:d8:56:c3:1f:c3:b9:b3:f8:58:71:
                    0e:5b:af:32:ed:d6:bd:c7:32:a3:c5:af:0c:fc:62:
                    b4:b7:1b:1a:ab:6a:3e:8e:61:50:8f:2d:30:6b:54:
                    81:db:13:8d:d3:24:48:03:12:6a:df:b0:f5:0d:bf:
                    a6:42:84:a6:74:7c:7e:cc:31:a5:6a:31:ca:af:91:
                    6c:3b:4c:1f:7c:b9:a5:9f:fe:b5:06:ea:a1:f3:5b:
                    09:a9:52:3b:61:0a:d4:c8:cc:42:6e:7c:00:50:de:
                    ab:06:3a:45:07:37:26:99:24:b5:50:7e:3b:9a:41:
                    e0:82:20:8d:11:1f:b0:04:17:aa:08:3c:0c:30:a3:
                    ac:f9:a1:c7:44:11:e9:46:0f:38:bb:f8:7a:ab:12:
                    44:e2:f0:f4:2b:68:77:63:ab:0e:06:27:c2:d5:a5:
                    f5:2a:ac:38:22:9b:07:69:e8:4a:7b:62:a7:0e:79:
                    70:90:cf:5a:04:7f:f2:65:dd:b2:71:1c:f0:29:f9:
                    58:89:e1:55:76:2e:c9:7b:8e:f0:ba:a0:06:4b:b4:
                    46:b3:23:3f:ff:66:3c:92:09:a1:65:50:2c:86:a5:
                    76:3e:c5:d1:3c:2b:5a:77:39:bc:af:08:d6:0d:6f:
                    3d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7C:F7:06:03:3B:DE:A4:27:20:63:C6:1C:C0:81:D4:5D:B3:81:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/47a008e5-d2c9-309b-a69c-5ceb169d394a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:1b:9c:23:8e:93:fa:ef:6d:98:e6:1a:cc:28:cc:02:a1:fe:
         ac:7f:2a:25:2d:94:62:b6:54:db:b2:54:8f:1f:2a:4a:f8:3f:
         9a:5a:4f:76:48:70:fc:91:a4:8a:5f:48:7e:79:ec:71:f7:3e:
         f4:82:0a:f2:01:0a:c8:1b:16:2c:10:9d:49:4c:51:b7:d7:d8:
         83:30:98:c7:3f:33:02:98:56:98:40:b8:68:41:97:23:ff:02:
         ec:3d:cc:5c:58:a1:04:bc:2e:78:23:ef:f3:70:b0:0d:3f:af:
         21:c2:62:9b:dd:01:92:ca:36:84:2c:e9:32:1a:fa:01:40:9c:
         e9:21:ce:5f:6b:06:56:bf:75:20:2d:c8:2e:91:e0:a7:10:04:
         c2:7b:76:25:00:e6:12:cc:d1:1b:a7:89:06:62:71:f3:9e:fd:
         9a:75:35:b9:ab:45:54:7b:51:19:f4:6d:9a:14:0d:5e:2c:54:
         f6:81:ff:98:e4:32:2d:78:46:35:24:b6:d0:7f:b7:55:c8:41:
         95:43:61:ac:0c:42:80:be:01:3b:83:05:62:ab:7c:60:e9:ef:
         2f:f0:8e:6f:92:25:4f:6b:c6:a4:66:24:c6:35:57:67:5f:6e:
         e7:07:57:3d:60:f8:ca:31:33:2a:85:7a:ad:28:7b:cc:b7:fe:
         e0:db:2a:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgoCy6ZjbZLOdNurQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDA0MjE0NVoXDTI1MDMxMDAzMjE0NVowLzEtMCsGA1UEAxMk
MDM2MGIxNWMtZDk4OS00MGI0LWJhOGMtYmUzNTUwZTU4ZTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubp7ZAwoWmmvW668Xf18YMMk89hWwx/DubP4
WHEOW68y7da9xzKjxa8M/GK0txsaq2o+jmFQjy0wa1SB2xON0yRIAxJq37D1Db+m
QoSmdHx+zDGlajHKr5FsO0wffLmln/61Buqh81sJqVI7YQrUyMxCbnwAUN6rBjpF
BzcmmSS1UH47mkHggiCNER+wBBeqCDwMMKOs+aHHRBHpRg84u/h6qxJE4vD0K2h3
Y6sOBifC1aX1Kqw4IpsHaehKe2KnDnlwkM9aBH/yZd2ycRzwKflYieFVdi7Je47w
uqAGS7RGsyM//2Y8kgmhZVAshqV2PsXRPCtadzm8rwjWDW89AQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFZ89wYDO96kJyBjxhzAgdRds4EIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDdhMDA4ZTUtZDJjOS0z
MDliLWE2OWMtNWNlYjE2OWQzOTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop7NMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHIbnCOOk/rvbZjmGswozAKh/qx/KiUtlGK2VNuyVI8fKkr4P5paT3ZI
cPyRpIpfSH557HH3PvSCCvIBCsgbFiwQnUlMUbfX2IMwmMc/MwKYVphAuGhBlyP/
Auw9zFxYoQS8Lngj7/NwsA0/ryHCYpvdAZLKNoQs6TIa+gFAnOkhzl9rBla/dSAt
yC6R4KcQBMJ7diUA5hLM0RuniQZicfOe/Zp1NbmrRVR7URn0bZoUDV4sVPaB/5jk
Mi14RjUkttB/t1XIQZVDYawMQoC+ATuDBWKrfGDp7y/wjm+SJU9rxqRmJMY1V2df
bucHVz1g+MoxMyqFeq0oe8y3/uDbKns=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:19:14 2025 by rpki-client