Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/47bbe290-2c1c-3f40-8efd-63f9e3ff5299.roa
File:                     47bbe290-2c1c-3f40-8efd-63f9e3ff5299.roa (raw, json)
Hash identifier:          PlfrZ7OHEmW/zc3YVGdugqVqWc38Bhnm0av3NNPCncU=
Subject key identifier:   15:C6:77:EB:2B:9B:51:41:0F:5B:B5:4F:61:51:A7:E3:A5:7E:81:3B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858482804EB42FE95E60215E39640
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/47bbe290-2c1c-3f40-8efd-63f9e3ff5299.roa
Signing time:             Tue 10 Dec 2024 04:09:08 +0000
ROA not before:           Tue 10 Dec 2024 04:09:08 +0000
ROA not after:            Mon 10 Mar 2025 03:09:08 +0000
asID:                     13335
IP address blocks:        162.158.122.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:28:04:eb:42:fe:95:e6:02:15:e3:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 04:09:08 2024 GMT
            Not After : Mar 10 03:09:08 2025 GMT
        Subject: CN=3b1f0838-bb85-466d-85c2-9ac3b6c75867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:36:58:5f:19:3a:21:a4:d7:52:ac:29:63:b1:
                    20:7a:3e:5b:4e:8f:44:24:50:c3:ae:af:92:bb:9d:
                    64:8f:86:e4:18:0d:c1:6d:62:a8:6e:71:c7:41:eb:
                    43:6f:20:20:7b:57:4b:e1:8b:f1:09:00:99:a7:8d:
                    12:6c:b1:6d:34:f4:18:45:25:ed:cb:4d:1b:44:34:
                    f3:76:c7:d7:9b:71:20:e4:52:e6:ce:74:ed:b1:46:
                    0d:38:03:f8:18:4e:9a:7e:aa:7c:6e:fb:8e:3b:24:
                    a7:c8:48:a8:22:78:f3:3b:cd:be:ca:f5:1e:6e:5f:
                    e0:17:16:9e:e5:b4:9a:d6:09:96:90:d3:18:16:c5:
                    94:e7:68:89:78:cd:84:75:de:b5:10:02:0b:b9:3f:
                    6f:05:76:17:b8:43:99:d8:26:dd:1d:77:94:0e:ab:
                    a0:56:d5:de:a9:b5:05:b1:a1:7f:8d:2e:fd:b3:53:
                    0d:ea:ec:0f:ba:61:c1:6f:6f:70:05:0a:84:fd:e9:
                    a8:76:8c:85:79:fa:00:c8:a9:7f:0a:90:20:a7:57:
                    da:a1:85:e4:e7:97:15:51:57:b1:91:20:28:41:7d:
                    61:fe:10:7c:9f:8e:bd:e2:77:68:eb:62:64:0f:32:
                    5d:0b:24:5b:91:77:80:b1:88:a7:90:0f:9e:42:46:
                    89:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C6:77:EB:2B:9B:51:41:0F:5B:B5:4F:61:51:A7:E3:A5:7E:81:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/47bbe290-2c1c-3f40-8efd-63f9e3ff5299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:e0:cd:ca:2b:50:ce:3a:ed:fd:85:32:44:e0:fc:f0:d5:9d:
         96:28:91:91:b8:da:76:86:b0:00:6e:89:2e:fe:44:e0:66:30:
         69:2b:bd:22:04:00:59:90:89:d9:61:c7:17:43:a1:8c:25:e4:
         72:64:40:bc:7d:2d:e3:1c:60:52:e0:09:00:62:5e:47:42:4c:
         41:b0:41:b4:7e:6e:d9:ca:5b:af:64:41:1e:e6:9c:a2:79:cd:
         26:19:26:31:02:2d:bd:76:76:cd:cb:42:a6:95:f1:2c:8c:98:
         34:10:11:0a:ae:c8:27:e3:43:a4:3f:1b:85:10:11:a6:ca:09:
         8c:61:06:5c:57:11:47:a4:3f:bc:99:86:16:e7:05:a3:00:7d:
         2e:24:4d:87:24:bf:bb:8a:9a:c2:6a:13:71:46:7e:4a:9f:ef:
         cd:b1:77:ac:d9:61:6a:71:b4:11:04:40:0d:5a:50:59:3d:11:
         8b:66:c9:b6:ae:24:76:1b:0d:a6:55:0a:0a:98:45:81:d6:2d:
         29:7e:d2:a9:a1:d9:0a:a4:52:50:59:93:73:85:ae:fb:8a:08:
         9f:f7:1d:cc:33:52:82:66:91:22:47:48:f7:2c:b8:49:80:06:
         ef:95:9d:78:b6:3f:37:4a:e1:09:a2:f9:10:4f:7b:80:bd:fb:
         f2:c6:a6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:09:41 2025 by rpki-client