Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/48df2c26-8ee1-30e2-b8b8-08a3ec8f4e33.roa
File:                     48df2c26-8ee1-30e2-b8b8-08a3ec8f4e33.roa (raw, json)
Hash identifier:          6qfbp3Npb3HKKQAGSuzcE5O0GolR1fZg1JHSvQ7YndM=
Subject key identifier:   78:0E:A9:BE:F6:25:C5:B1:A2:BD:F1:F4:A0:04:C8:EF:A5:08:5F:30
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858482AAAA06D5AE372A4C9C42610
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/48df2c26-8ee1-30e2-b8b8-08a3ec8f4e33.roa
Signing time:             Wed 11 Dec 2024 02:54:38 +0000
ROA not before:           Wed 11 Dec 2024 02:54:38 +0000
ROA not after:            Tue 11 Mar 2025 01:54:38 +0000
asID:                     13335
IP address blocks:        172.69.168.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2a:aa:a0:6d:5a:e3:72:a4:c9:c4:26:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 11 02:54:38 2024 GMT
            Not After : Mar 11 01:54:38 2025 GMT
        Subject: CN=a91e9413-2842-4e29-a022-3c569f300e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:51:58:90:84:5b:be:11:96:68:e2:c8:66:f5:
                    31:43:a8:43:7e:7d:c9:36:f9:46:c0:57:ff:44:5a:
                    fd:a3:28:19:db:89:fd:63:86:ee:f7:82:f6:c7:d7:
                    bf:5a:ca:eb:57:78:c2:4d:0d:4b:f2:9a:4f:d2:70:
                    c8:e3:9a:29:cf:86:6a:76:11:12:07:4d:dc:9f:cb:
                    34:07:3f:d4:98:b7:ba:0b:21:c7:cd:95:c1:ea:a1:
                    ed:c6:28:60:7b:12:13:29:5a:5f:d8:c3:97:33:c1:
                    dc:9b:c6:dc:2e:5f:aa:e6:e1:ef:a5:39:8b:59:54:
                    8d:c7:b3:f0:15:55:54:03:a1:c7:e1:4d:86:8f:14:
                    4c:d8:8e:31:94:83:10:9f:14:b6:6a:ad:7d:8a:ca:
                    a0:ac:0e:cd:8e:0a:24:d8:b5:0f:20:2a:bb:f2:da:
                    cb:68:96:12:6f:4c:06:db:1d:63:af:c3:2a:52:9f:
                    73:8a:6a:a5:56:fe:f2:47:06:48:b1:60:c0:73:aa:
                    d6:6c:e2:58:2c:2e:34:57:6a:9a:90:ea:47:ae:ea:
                    39:ee:53:fe:58:ec:5a:a7:ea:08:7d:b3:9f:08:af:
                    e7:c1:41:14:00:47:47:41:03:21:2e:38:cd:8f:46:
                    5a:e4:ef:3b:ef:c2:e4:64:09:ec:dc:4c:bc:f0:f2:
                    dd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0E:A9:BE:F6:25:C5:B1:A2:BD:F1:F4:A0:04:C8:EF:A5:08:5F:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/48df2c26-8ee1-30e2-b8b8-08a3ec8f4e33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:92:1c:44:b2:ad:21:2e:25:4f:01:0b:c2:47:0e:7c:80:37:
         e0:67:d7:e3:7a:4d:35:ed:fb:72:07:6a:fc:df:e1:9c:9a:85:
         7e:74:f7:28:fa:43:6d:f5:ae:7e:d7:47:f4:9e:b6:5a:f9:06:
         c9:c2:ef:e7:67:c4:7b:61:21:1e:a2:2c:7e:f8:5f:80:dc:fe:
         04:0f:1c:df:18:f6:80:a7:7f:45:1f:a0:8b:64:3a:5f:09:13:
         b8:ce:39:72:d6:39:3d:ec:bb:ef:64:80:93:a0:aa:93:29:bd:
         1c:30:f9:1b:24:a4:11:2c:ba:1f:78:95:8a:36:9e:2e:ca:47:
         3f:49:69:b2:84:0c:34:06:7b:35:4e:e0:30:c8:8c:ff:34:28:
         af:f1:8d:fb:a6:9f:24:3d:1b:2c:54:6f:59:2d:18:99:96:28:
         36:4e:b5:3a:5b:f4:71:94:c8:27:86:1f:f2:92:9e:30:a0:a7:
         6d:c1:a4:67:f1:81:95:45:5c:b3:c3:12:b0:f7:64:a0:eb:72:
         4a:59:eb:3b:23:21:47:e8:50:47:47:ac:07:ab:5d:55:03:51:
         e1:f4:2a:93:4f:25:a7:a4:16:b2:16:9f:16:9b:3c:58:b0:cf:
         d3:fb:3e:91:1e:6e:2c:d9:ad:8c:6a:1d:37:82:7f:a1:85:bf:
         92:a1:94:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:10:11 2025 by rpki-client