Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60ab30ac-c722-3c99-97cd-1e66a23bcef5.roa
File:                     60ab30ac-c722-3c99-97cd-1e66a23bcef5.roa (raw, json)
Hash identifier:          nMAeP+GChn2S/GGF6y7lHwU6Pq0V3XcmdKYeHohvAIE=
Subject key identifier:   67:2B:FF:CB:A8:C3:AB:19:4E:40:36:46:E0:B3:1F:BE:45:18:2B:72
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584825611FE5A773EAAFACDC71B0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60ab30ac-c722-3c99-97cd-1e66a23bcef5.roa
Signing time:             Mon 09 Dec 2024 05:27:29 +0000
ROA not before:           Mon 09 Dec 2024 05:27:29 +0000
ROA not after:            Sun 09 Mar 2025 05:27:29 +0000
asID:                     13335
IP address blocks:        172.71.110.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:25:61:1f:e5:a7:73:ea:af:ac:dc:71:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec  9 05:27:29 2024 GMT
            Not After : Mar  9 05:27:29 2025 GMT
        Subject: CN=15580515-70f1-4abc-ba50-05f8cd80dc74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:14:c5:98:39:34:6b:a5:81:c9:0c:c7:d5:85:
                    a1:eb:96:1c:f3:72:d6:77:0b:f1:d5:00:d1:4e:ec:
                    1b:a2:58:b1:79:5e:60:67:72:74:ff:48:28:93:7b:
                    61:67:7c:38:7f:4b:5f:ca:b3:ab:09:fc:34:a5:d9:
                    78:f7:0b:85:fe:93:5c:27:73:89:30:5f:34:19:b2:
                    cd:11:ad:6a:1d:7b:f4:a9:3f:e6:3f:3c:dd:3e:87:
                    91:a5:37:08:09:fb:dc:55:3d:66:33:5e:ce:1c:a3:
                    01:db:da:d8:98:38:71:01:9b:06:25:e9:97:4b:4a:
                    29:bf:dc:a9:0e:c5:58:14:43:d6:3f:58:98:b8:60:
                    96:80:67:10:a0:89:3d:c0:b3:81:07:62:70:96:34:
                    b7:e5:ed:33:1c:bb:db:49:b7:8b:bd:48:84:ff:4f:
                    d2:69:7f:22:92:04:2b:f2:d0:61:a9:26:96:a4:11:
                    c0:16:17:a1:93:6f:cf:1a:95:51:b5:d6:61:3b:63:
                    84:3f:97:15:5c:7d:f9:1c:06:a3:66:94:ee:5a:de:
                    36:a4:77:4a:52:4e:d8:eb:7d:c4:2a:25:a8:25:76:
                    d8:13:4b:35:7f:a7:db:fa:ed:ad:a2:9b:6f:d6:87:
                    7d:47:8c:75:a6:b2:62:43:ba:e6:ac:08:0e:db:b9:
                    25:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2B:FF:CB:A8:C3:AB:19:4E:40:36:46:E0:B3:1F:BE:45:18:2B:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60ab30ac-c722-3c99-97cd-1e66a23bcef5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:a8:22:80:09:65:ad:15:16:a8:30:22:42:db:0e:56:fd:1c:
         f1:a2:35:65:71:f4:16:ed:15:39:c5:5e:92:14:60:06:43:1b:
         f8:88:be:9c:b7:55:5e:63:93:28:99:9f:0c:b3:f6:c9:5f:f7:
         81:b5:fb:98:e4:74:9e:70:e0:80:f9:49:98:5b:22:95:30:9d:
         27:72:34:cc:5c:4c:5e:89:63:19:2a:85:d1:c8:f3:82:b6:99:
         82:6a:55:e7:3b:a4:f1:aa:10:b1:e7:c0:64:09:39:37:5c:21:
         e4:31:2f:b4:3b:d0:e5:aa:f6:fb:60:c2:f5:a1:f6:b3:e6:dc:
         ed:c5:25:38:21:95:e1:21:74:1a:3d:de:f1:28:7b:b6:37:2a:
         a7:fb:43:4b:4b:bd:91:c2:08:35:0e:7c:e3:0e:0c:ef:d5:67:
         36:27:cb:3a:4f:ce:2e:f8:36:c8:b6:a3:38:85:e6:d8:89:d4:
         8b:57:b5:fc:b5:4b:88:bd:59:1e:27:2a:42:12:93:0c:5d:b5:
         e0:f6:7c:98:06:ff:b7:91:20:c0:4d:66:cb:1b:df:e4:fa:3f:
         0e:ed:51:f9:8f:d9:58:89:2d:73:20:31:e9:1d:a4:80:38:c5:
         c1:d4:cd:4c:2e:b0:26:2a:ef:5e:84:c8:6f:3f:1b:31:85:a6:
         b1:5c:3d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:46 2025 by rpki-client