Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4bc0d8bb-3c3a-3bec-ac0d-175801eace5c.roa
File:                     4bc0d8bb-3c3a-3bec-ac0d-175801eace5c.roa (raw, json)
Hash identifier:          T4fE7O/2+FN8Hx50cRHws3gUd8YBectSGoL4E+kX0/I=
Subject key identifier:   7E:FF:6F:81:03:A8:E0:22:62:E0:35:ED:7F:E7:62:2A:52:89:CA:AD
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848280A1925D2F67411B05E0380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4bc0d8bb-3c3a-3bec-ac0d-175801eace5c.roa
Signing time:             Tue 10 Dec 2024 04:19:34 +0000
ROA not before:           Tue 10 Dec 2024 04:19:34 +0000
ROA not after:            Mon 10 Mar 2025 03:19:34 +0000
asID:                     13335
IP address blocks:        162.158.191.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:28:0a:19:25:d2:f6:74:11:b0:5e:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 04:19:34 2024 GMT
            Not After : Mar 10 03:19:34 2025 GMT
        Subject: CN=a15d1ea0-f19d-4bd8-a94f-3512bcac55c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:5a:4e:31:97:59:72:c4:8e:e3:08:63:da:
                    92:15:cc:fd:3d:dd:1e:18:fb:74:29:57:7e:c5:fc:
                    7f:2a:bc:09:a9:0a:b6:da:5b:95:a7:a0:2b:a0:33:
                    5b:43:58:8e:76:f1:0e:fd:06:6c:ff:8c:82:16:ed:
                    82:60:eb:9e:09:8f:32:29:0c:89:67:7c:55:a0:27:
                    1a:1b:09:00:d4:11:0a:30:8a:02:15:3f:e5:97:ed:
                    8a:07:08:1c:0c:e8:1e:0a:bf:8e:49:93:4a:d4:b9:
                    7e:f8:d0:58:c2:51:f9:68:1b:ce:81:03:59:84:31:
                    db:07:92:1e:18:e7:a6:52:98:6a:da:53:16:75:e3:
                    21:4d:7a:a9:82:b5:15:11:42:a8:6a:5f:07:1e:a0:
                    b1:11:63:e3:91:82:8e:4a:cc:dc:35:72:d1:4a:c4:
                    72:b6:33:f0:9c:3a:cd:8c:65:14:64:2c:48:69:29:
                    a0:f0:e4:7a:d4:9f:7f:b5:8f:9d:ce:4c:e7:c1:d6:
                    94:4f:14:0a:eb:65:15:2f:af:ce:b7:7c:82:76:49:
                    66:34:9c:3c:25:63:9e:b3:10:a0:2f:89:63:6f:36:
                    d0:e1:75:48:ab:f4:1e:6a:76:f9:6b:c6:c1:31:57:
                    a5:45:94:2b:b0:9a:bc:64:a5:95:97:eb:bf:c6:f5:
                    97:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FF:6F:81:03:A8:E0:22:62:E0:35:ED:7F:E7:62:2A:52:89:CA:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4bc0d8bb-3c3a-3bec-ac0d-175801eace5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:52:59:bf:4c:8a:e2:ca:e1:b6:4b:a0:40:71:e9:03:65:ba:
         43:61:25:84:5a:f7:75:c6:9e:eb:89:c0:85:8e:c2:1a:a9:c7:
         9b:f2:73:57:69:d4:81:a8:9e:e1:67:22:36:c5:30:7c:e2:46:
         21:df:db:94:03:35:c4:52:6d:95:dd:e1:f5:1a:d4:62:3b:d4:
         7b:06:05:a0:61:bd:81:6c:a2:61:71:49:b5:64:d9:61:53:36:
         8c:a2:b4:39:3e:00:ff:dd:9f:70:d5:c0:7e:e0:c9:0a:74:48:
         a5:60:9c:7b:88:e4:c5:e2:be:8c:69:09:58:75:f5:57:b0:ef:
         19:79:63:83:08:3f:d5:73:47:fa:1b:e5:34:fe:34:8d:a3:95:
         59:ee:69:33:dc:5c:7d:11:fb:13:81:62:62:d0:a6:6e:a6:83:
         d2:07:e5:52:90:26:52:cb:f9:4f:ed:34:dd:58:84:a7:d8:17:
         bc:d7:34:40:40:eb:b7:11:69:4c:f6:6d:97:df:4b:ba:8e:66:
         09:5f:54:2c:c2:37:47:b6:15:7c:02:5c:f4:db:3c:9c:7d:24:
         a6:d5:5a:59:91:58:0f:e1:e9:ac:f3:fa:bd:36:57:15:d6:df:
         e7:b5:e1:8f:bb:75:7a:d0:9d:55:6a:f5:c8:ab:62:eb:44:d0:
         2a:eb:43:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:34:54 2025 by rpki-client