Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7c0ae7b3-6114-33dd-b25a-15fdf626404c.roa
File:                     7c0ae7b3-6114-33dd-b25a-15fdf626404c.roa (raw, json)
Hash identifier:          45A6c2BC0jnWOs49Lc5IZthmryJqKXdHZwcoc0qirqI=
Subject key identifier:   97:77:20:92:58:A4:F7:CE:C3:C2:D3:D8:BB:C4:F3:AC:F4:D7:DA:DF
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858482AAC5509F375B8F7F7DE2980
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7c0ae7b3-6114-33dd-b25a-15fdf626404c.roa
Signing time:             Wed 11 Dec 2024 02:58:04 +0000
ROA not before:           Wed 11 Dec 2024 02:58:04 +0000
ROA not after:            Tue 11 Mar 2025 01:58:04 +0000
asID:                     13335
IP address blocks:        172.69.190.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2a:ac:55:09:f3:75:b8:f7:f7:de:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 11 02:58:04 2024 GMT
            Not After : Mar 11 01:58:04 2025 GMT
        Subject: CN=73344209-df51-49be-b7f0-78c2ab6301ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:72:31:9b:ce:e8:c3:51:96:d3:05:12:e2:e3:
                    44:24:64:8f:cc:ab:4b:2e:ae:9c:3a:fc:28:80:0f:
                    a2:fc:1b:05:3b:37:11:be:02:b6:85:9f:ec:60:a5:
                    67:3e:f6:b6:83:34:82:33:ca:af:74:a3:95:b3:5a:
                    21:8d:9d:f1:d7:95:25:0e:d5:4e:83:b2:a6:0d:fe:
                    bb:20:66:d2:8c:27:c6:1d:18:2a:da:57:bb:83:40:
                    61:af:c0:fa:4b:01:4c:18:d5:c5:80:f4:58:f4:6d:
                    37:31:d7:68:c7:62:6b:a8:af:97:61:d8:84:76:64:
                    da:fc:2c:b7:c8:45:89:e9:f8:80:dc:90:30:6e:b9:
                    ec:bb:40:e6:96:cf:84:99:c5:7b:30:2e:5d:74:dc:
                    29:c6:58:ec:1b:43:91:ff:5c:1b:61:73:29:06:9d:
                    fa:0f:93:aa:9f:a5:26:12:66:88:2f:d4:25:6a:62:
                    49:f8:76:68:93:84:47:f5:ff:59:d7:b2:0c:20:69:
                    c8:e9:2c:00:aa:ea:b5:5a:84:29:23:26:27:5f:53:
                    02:ae:e6:58:cc:0b:ef:bc:63:a2:51:93:24:e6:fd:
                    56:41:8b:c7:b6:ce:ab:53:97:42:55:a7:ee:f4:90:
                    72:e0:64:5d:51:14:6e:5d:c0:18:4d:5d:7b:34:bf:
                    42:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:77:20:92:58:A4:F7:CE:C3:C2:D3:D8:BB:C4:F3:AC:F4:D7:DA:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7c0ae7b3-6114-33dd-b25a-15fdf626404c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:58:bc:0e:23:1b:2d:b8:71:59:3f:66:eb:a8:d4:23:01:90:
         a7:b7:df:dc:f4:7c:bd:89:5b:ba:61:a9:77:d2:c8:ab:71:94:
         44:f4:38:0e:b1:1a:90:6a:40:c8:54:ae:3a:9f:5a:1c:c2:36:
         02:64:3a:bf:2d:46:c8:58:11:da:7d:3d:c9:61:e5:6d:78:20:
         48:4c:f5:2d:58:9d:67:53:98:f8:33:42:9c:17:ca:f3:00:b7:
         11:66:1d:68:94:80:94:3c:35:86:1e:09:b4:ab:6e:33:a0:bc:
         21:d4:60:9f:96:1c:07:c4:87:e7:5c:66:c5:2d:12:69:19:48:
         a1:cf:3f:12:55:05:d8:00:34:00:59:72:36:f3:a8:d3:93:91:
         19:70:74:ed:2b:ff:ab:a5:06:22:6f:6e:0c:37:28:78:d2:11:
         bc:f7:a8:3a:c0:45:45:95:a8:02:d1:9c:33:fd:40:75:34:44:
         b8:33:18:a7:4e:4e:2c:8f:51:55:f5:bc:e1:0c:65:28:ac:9e:
         f0:f2:bd:39:fd:05:a1:1e:b0:da:3d:ab:6c:e5:26:e1:be:23:
         d9:22:35:15:d4:cd:08:01:df:c9:d8:73:39:ea:41:34:33:dc:
         89:70:01:93:9d:8a:c8:61:fb:a6:1f:93:b2:58:32:13:33:07:
         ea:39:8d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:33:39 2025 by rpki-client