Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/604a6fac-2d19-3247-b089-eada9799dc4b.roa
File:                     604a6fac-2d19-3247-b089-eada9799dc4b.roa (raw, json)
Hash identifier:          1XNsqckmWocmH5BD535q9BTlDzD+dTpmwfyoecXo5u4=
Subject key identifier:   48:43:97:25:57:24:3C:B8:52:1A:61:07:41:FC:53:8F:E9:B8:19:FC
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848280742688744ABFAA8942300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/604a6fac-2d19-3247-b089-eada9799dc4b.roa
Signing time:             Tue 10 Dec 2024 04:13:51 +0000
ROA not before:           Tue 10 Dec 2024 04:13:51 +0000
ROA not after:            Mon 10 Mar 2025 03:13:51 +0000
asID:                     13335
IP address blocks:        162.158.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:28:07:42:68:87:44:ab:fa:a8:94:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 04:13:51 2024 GMT
            Not After : Mar 10 03:13:51 2025 GMT
        Subject: CN=a383726a-899b-4fa6-a21b-a97df20862f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:67:68:37:ee:e9:23:df:78:9c:41:29:24:3d:
                    49:c8:f4:8c:e0:45:6b:2e:0e:98:5e:92:92:52:b9:
                    e2:d0:c0:7b:e4:22:6a:b2:60:da:f2:76:ab:81:6c:
                    eb:bd:1c:14:2d:e7:2d:f9:d2:e4:9e:b4:e7:0d:aa:
                    53:eb:77:9b:32:ff:4f:2e:68:b0:c6:27:aa:88:55:
                    ed:7e:5b:7e:c4:1c:06:2a:3d:32:7b:66:e9:44:7f:
                    ce:33:5d:4f:a3:76:ea:5e:79:df:60:43:56:b8:af:
                    db:b0:e8:f8:1f:75:60:8e:69:19:01:c9:8e:53:6a:
                    d2:c7:01:85:73:0b:f8:d7:82:3c:c7:f4:78:23:cd:
                    ad:84:70:95:76:a6:bc:be:4c:e2:bf:1d:8e:ad:d6:
                    72:ad:7c:ab:f0:2e:83:16:a4:a2:f0:9f:c0:87:4c:
                    43:bc:38:c5:68:6f:66:8f:a8:72:aa:01:8f:81:66:
                    63:ef:10:86:dd:4a:d2:44:6f:01:c1:89:df:2a:a6:
                    a1:52:1a:5d:bb:90:79:92:d3:80:77:7b:80:c3:b1:
                    c1:84:75:18:39:67:e5:d1:e4:e7:76:cf:bf:a9:42:
                    8f:b3:b5:ef:c9:73:b3:b3:b1:73:d9:79:76:cb:dc:
                    7d:5b:be:da:ca:59:4f:47:c6:85:2f:72:15:fd:f8:
                    f0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:43:97:25:57:24:3C:B8:52:1A:61:07:41:FC:53:8F:E9:B8:19:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/604a6fac-2d19-3247-b089-eada9799dc4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:77:43:68:47:76:79:42:ae:e7:59:97:a3:77:f2:45:00:d2:
         a6:cd:1b:7e:15:dd:77:04:a9:cb:45:1c:b9:36:2a:4f:85:4f:
         4b:44:21:c7:18:ae:7e:bf:43:f3:0e:a2:b8:93:e5:4c:6a:bf:
         44:70:5d:26:8a:e6:90:53:85:54:4e:65:b3:d6:b3:d7:7d:9a:
         42:02:13:3d:8d:34:2a:96:b3:af:73:aa:c0:36:21:8e:8b:dc:
         03:c4:45:56:8c:7b:7a:54:96:60:1e:fc:d7:0f:72:b9:ce:e6:
         83:40:4a:5c:b7:66:4c:78:a1:72:00:69:4f:a8:62:d4:b9:2f:
         4b:e5:03:0d:fe:7d:14:26:2f:77:cd:1d:db:bd:55:f3:c3:81:
         0a:3b:2e:fc:86:c4:34:dc:b7:2c:0a:05:35:e0:be:13:79:72:
         4f:10:dd:48:46:36:1a:80:06:ee:09:ad:80:e5:a7:55:7c:d2:
         70:f9:6e:42:52:96:48:6c:46:2d:4c:90:74:70:37:ff:2e:0d:
         34:13:28:45:a4:d6:30:99:5a:29:5e:fe:4d:f1:15:3b:bb:40:
         49:b5:78:d9:68:7e:45:30:c5:15:40:ae:5e:5a:8e:2e:b6:bb:
         89:c2:71:52:80:35:5e:18:33:cc:7d:a9:68:33:24:23:0c:e7:
         27:d1:79:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:18:57 2025 by rpki-client