Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49c0ac3a-99f4-31f9-a836-3bbab206f572.roa
File:                     49c0ac3a-99f4-31f9-a836-3bbab206f572.roa (raw, json)
Hash identifier:          BCT6GvUmcl6B8RVKM9Ar2LPPf3TnxXROMVVVD3GfUlU=
Subject key identifier:   29:FC:98:60:62:49:8A:0C:A3:8F:47:00:0D:80:04:4C:73:94:D0:FA
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848280B7541CE0E61368A7E4678
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49c0ac3a-99f4-31f9-a836-3bbab206f572.roa
Signing time:             Tue 10 Dec 2024 04:22:18 +0000
ROA not before:           Tue 10 Dec 2024 04:22:18 +0000
ROA not after:            Mon 10 Mar 2025 03:22:18 +0000
asID:                     13335
IP address blocks:        162.158.213.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:28:0b:75:41:ce:0e:61:36:8a:7e:46:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 04:22:18 2024 GMT
            Not After : Mar 10 03:22:18 2025 GMT
        Subject: CN=7608d0cd-6ae1-4fa6-abdf-eb9016ab7625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:46:3f:d0:f1:e4:f8:88:eb:fa:c6:21:ff:6d:
                    28:ab:04:13:79:0e:a3:7b:e5:3a:97:e1:dd:bd:63:
                    f6:7a:39:bc:ee:01:53:cd:0d:37:69:d5:25:45:68:
                    90:76:6d:47:12:ae:9b:66:2f:8d:7d:dc:5c:6a:64:
                    a4:47:54:8f:86:a5:e6:c4:a2:05:8a:71:14:bd:84:
                    dc:0f:3f:1e:ac:5c:13:89:00:58:1d:b0:f2:1b:7f:
                    c6:4c:b3:36:79:15:01:71:95:87:b9:e2:76:28:de:
                    d1:52:da:17:54:18:ff:6a:29:5c:22:c8:05:d2:18:
                    95:57:90:8e:e0:93:37:92:26:42:5a:2f:29:7b:aa:
                    c4:10:a6:aa:f1:14:a7:30:44:9c:07:e8:a9:01:e9:
                    d3:14:2f:bd:bc:d1:5c:60:7f:f5:59:ee:55:02:3b:
                    80:39:c8:3b:51:31:d8:0e:a0:9f:ac:0a:e1:54:c2:
                    fc:7b:93:22:5a:e6:a8:34:91:2c:27:64:76:ac:83:
                    8f:af:08:b5:bb:b6:fa:8b:f7:28:1c:ca:94:38:11:
                    ff:f7:61:2f:32:0c:0d:1a:d9:9a:27:8d:02:ae:c6:
                    1e:31:6d:4f:9c:70:1f:31:bb:33:fe:fb:9f:5d:bc:
                    f6:66:cf:6f:f2:cb:a0:00:b2:5a:93:9f:92:44:b7:
                    5a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FC:98:60:62:49:8A:0C:A3:8F:47:00:0D:80:04:4C:73:94:D0:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49c0ac3a-99f4-31f9-a836-3bbab206f572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:cd:30:dc:9b:1b:e1:a0:b8:a2:9e:18:00:d9:ab:20:3f:cd:
         41:a3:7e:dc:1e:f7:cd:aa:ab:50:50:37:cc:85:4d:95:bc:f0:
         71:f3:71:07:39:17:6f:03:6f:b3:12:63:b8:d2:4e:31:42:5b:
         9f:f0:6e:e8:89:df:21:fe:6d:c8:c2:b6:f2:dd:df:fe:92:ce:
         8f:2f:a1:10:41:27:51:5c:68:2e:af:af:1b:33:40:8f:0f:95:
         4c:de:b7:d2:a7:33:cb:82:60:f1:74:26:fa:94:78:27:17:b1:
         50:79:33:48:cf:9d:35:c9:bf:b7:cd:c7:bf:17:2b:0b:bf:00:
         eb:51:c3:c1:84:75:ee:4a:d7:46:ce:4f:29:91:cb:7e:29:b3:
         08:f8:6d:1d:65:29:af:47:3c:96:85:d0:d9:0d:cc:50:ac:9a:
         10:1d:e0:fa:a3:80:0e:fe:f6:4d:82:87:a2:38:9f:e9:e9:52:
         0d:97:b9:5c:c4:ae:af:e2:54:78:72:d9:7c:a9:83:53:96:2f:
         ec:f4:df:46:24:09:0b:be:49:ae:a0:58:44:0e:e8:10:8a:e7:
         35:5a:08:46:a8:93:fa:e9:ee:75:e1:d9:37:aa:32:eb:3b:03:
         f0:c3:f4:5a:95:37:05:2f:13:5f:5a:52:18:b4:ea:0f:7c:8d:
         d8:cd:64:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:56:26 2025 by rpki-client