Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/67924863-8bc0-3cc7-bcdf-4242a863fbc1.roa
File:                     67924863-8bc0-3cc7-bcdf-4242a863fbc1.roa (raw, json)
Hash identifier:          gJ24L4tOX8SH5tdFTCgUEVvwk6hLrQsv8JCO7ivH14I=
Subject key identifier:   98:FE:B1:51:91:47:03:9A:E2:D7:FC:7E:30:2C:46:66:20:66:2E:A1
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858482AAA7CCC00B6306295473A00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/67924863-8bc0-3cc7-bcdf-4242a863fbc1.roa
Signing time:             Wed 11 Dec 2024 02:54:21 +0000
ROA not before:           Wed 11 Dec 2024 02:54:21 +0000
ROA not after:            Tue 11 Mar 2025 01:54:21 +0000
asID:                     13335
IP address blocks:        172.69.164.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2a:aa:7c:cc:00:b6:30:62:95:47:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 11 02:54:21 2024 GMT
            Not After : Mar 11 01:54:21 2025 GMT
        Subject: CN=f5e8984e-4bbc-4aa6-8cc7-a154837c42a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:31:f4:e2:16:dd:64:c6:1b:9d:74:b5:27:1f:
                    00:fb:3f:e4:29:b0:ea:ab:2f:c9:35:2f:b3:dd:28:
                    7c:57:13:c3:64:fb:d4:07:c0:89:e3:bb:9e:1c:de:
                    a4:a5:49:71:f6:95:e4:97:6c:1d:98:a6:27:c0:9b:
                    e8:c6:5a:c7:03:d3:36:e5:da:b5:5c:c3:72:b5:57:
                    46:6a:18:ef:33:a8:18:74:16:70:0b:28:54:41:4b:
                    99:94:ca:bb:fc:67:c1:c5:9d:f7:33:75:7d:56:d0:
                    5e:e7:0b:5f:a5:03:9f:3d:ee:d4:79:59:25:62:12:
                    6e:74:db:67:d1:18:76:e5:7d:62:72:ef:89:4f:91:
                    a2:b4:fb:09:72:0b:2b:0c:af:37:f7:f5:ee:f5:bb:
                    d3:fb:26:26:5f:b4:23:34:46:fe:10:7a:23:d4:63:
                    fd:57:0a:c3:76:10:bc:08:ad:f0:8c:d1:2c:a1:f2:
                    34:ed:90:f1:aa:de:89:e9:bc:4d:f4:84:ff:52:dc:
                    f8:c5:0b:cb:9b:9c:0b:ab:11:76:9b:e3:b6:6c:ef:
                    af:d9:97:01:e3:05:6a:6e:90:93:cf:ea:8d:28:32:
                    71:c9:49:b7:77:14:91:08:94:47:82:cd:05:c3:21:
                    59:53:0d:10:a4:eb:52:68:db:bc:a3:43:f0:22:32:
                    92:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FE:B1:51:91:47:03:9A:E2:D7:FC:7E:30:2C:46:66:20:66:2E:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/67924863-8bc0-3cc7-bcdf-4242a863fbc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:2e:4d:53:5b:68:41:de:00:7f:48:07:f6:8a:24:c1:87:13:
         01:5e:d6:f1:08:94:f9:1b:de:36:ef:1f:f3:9b:5d:2e:9a:b4:
         9d:66:7d:e3:6b:75:13:28:cd:d8:ff:a5:65:ae:88:a1:b7:6f:
         00:cb:1c:12:21:8a:a2:8c:ec:25:f5:e9:bb:68:82:a1:09:60:
         df:5b:49:b2:9e:77:1e:e1:e7:06:67:0b:aa:0a:37:c0:8b:19:
         a5:c1:a3:e3:8e:03:cc:e2:70:90:1b:14:50:99:5c:ee:7c:d4:
         2f:30:e5:08:c7:31:da:ee:4d:8e:fb:e0:17:33:48:e1:fb:34:
         8a:c5:23:7a:95:a7:61:75:4d:3f:84:23:a7:55:be:b0:67:5a:
         ac:bd:d9:df:c4:95:5d:95:fb:64:5e:52:b3:9f:fd:30:08:b6:
         96:7c:0f:9c:a4:84:1e:20:c4:10:2a:ba:ca:8e:dd:aa:4c:48:
         85:e1:00:33:3d:1d:dc:07:6b:9b:d7:7b:88:8c:40:1a:47:78:
         6c:61:28:6f:35:74:35:30:ae:92:61:f3:1c:60:65:0e:cc:e7:
         67:9a:89:4d:77:98:fd:35:6d:1b:d3:4a:aa:33:48:03:5c:b1:
         a0:fa:19:8d:82:13:06:33:b0:4e:36:32:d9:b2:f8:11:ee:e3:
         8a:ff:35:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgqqnzMALYwYpVHOgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMTAyNTQyMVoXDTI1MDMxMTAxNTQyMVowLzEtMCsGA1UEAxMk
ZjVlODk4NGUtNGJiYy00YWE2LThjYzctYTE1NDgzN2M0MmE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzH04hbdZMYbnXS1Jx8A+z/kKbDqqy/JNS+z
3Sh8VxPDZPvUB8CJ47ueHN6kpUlx9pXkl2wdmKYnwJvoxlrHA9M25dq1XMNytVdG
ahjvM6gYdBZwCyhUQUuZlMq7/GfBxZ33M3V9VtBe5wtfpQOfPe7UeVklYhJudNtn
0Rh25X1icu+JT5GitPsJcgsrDK839/Xu9bvT+yYmX7QjNEb+EHoj1GP9VwrDdhC8
CK3wjNEsofI07ZDxqt6J6bxN9IT/Utz4xQvLm5wLqxF2m+O2bO+v2ZcB4wVqbpCT
z+qNKDJxyUm3dxSRCJRHgs0FwyFZUw0QpOtSaNu8o0PwIjKSNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJj+sVGRRwOa4tf8fjAsRmYgZi6hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjc5MjQ4NjMtOGJjMC0z
Y2M3LWJjZGYtNDI0MmE4NjNmYmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGkuTVNbaEHeAH9IB/aKJMGHEwFe1vEIlPkb3jbvH/ObXS6atJ1mfeNr
dRMozdj/pWWuiKG3bwDLHBIhiqKM7CX16btogqEJYN9bSbKedx7h5wZnC6oKN8CL
GaXBo+OOA8zicJAbFFCZXO581C8w5QjHMdruTY774BczSOH7NIrFI3qVp2F1TT+E
I6dVvrBnWqy92d/ElV2V+2ReUrOf/TAItpZ8D5ykhB4gxBAqusqO3apMSIXhADM9
HdwHa5vXe4iMQBpHeGxhKG81dDUwrpJh8xxgZQ7M52eaiU13mP01bRvTSqozSANc
saD6GY2CEwYzsE42Mtmy+BHu44r/NVo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:58:38 2025 by rpki-client