Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/93387d12-85b4-3d2f-81d4-c73e2a03360b.roa
File:                     93387d12-85b4-3d2f-81d4-c73e2a03360b.roa (raw, json)
Hash identifier:          pEO2E0gNGLHrEwFzw5X97LJVl2htfbHGuHc8cDmiEXs=
Subject key identifier:   0C:DA:7F:D8:44:F0:CB:55:8B:D6:41:DC:82:87:37:24:84:EC:05:26
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584827B8C5536436B4F77A343600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/93387d12-85b4-3d2f-81d4-c73e2a03360b.roa
Signing time:             Tue 10 Dec 2024 01:35:42 +0000
ROA not before:           Tue 10 Dec 2024 01:35:42 +0000
ROA not after:            Mon 10 Mar 2025 00:35:42 +0000
asID:                     13335
IP address blocks:        172.69.123.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:b8:c5:53:64:36:b4:f7:7a:34:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 01:35:42 2024 GMT
            Not After : Mar 10 00:35:42 2025 GMT
        Subject: CN=34b71658-1dcc-4c93-89ff-c5c121286a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:31:e3:92:c1:26:23:98:bb:30:1c:d8:4c:c1:
                    e2:47:db:b9:d0:a4:53:20:33:b8:fd:95:a1:0a:77:
                    47:c5:ce:8a:11:91:0c:a9:50:71:4a:1f:82:74:4c:
                    6e:27:35:75:79:12:04:d7:b5:83:f2:63:75:be:af:
                    b4:25:a5:7a:48:30:85:98:90:31:cb:94:c8:7e:fa:
                    e7:c2:60:3e:66:7b:25:cb:79:24:c4:2e:87:de:95:
                    9c:4d:eb:74:4c:a4:7f:07:57:ce:d9:f7:9b:4c:c4:
                    be:c5:30:12:4f:25:83:5d:84:af:26:0a:29:d9:3f:
                    80:65:9a:58:89:43:21:b2:61:36:2a:a9:91:25:c1:
                    e7:4e:12:01:51:2c:ee:21:2e:ed:39:0e:08:4a:e0:
                    e4:d9:7c:7c:8b:5d:4b:65:d9:7d:01:5c:49:b6:fb:
                    d6:50:d5:04:7c:78:fd:bc:9e:1e:94:d7:a7:0e:78:
                    9f:2f:47:5b:e4:9f:bc:e1:c0:5b:3d:6e:1f:66:a4:
                    d5:2c:be:b9:d2:a6:ef:9f:e4:c7:2c:ad:4a:73:e5:
                    73:00:9c:43:a5:3f:f7:3c:60:e3:b6:a9:92:c6:61:
                    cd:9b:63:5a:89:df:34:f3:9c:b5:d0:4a:88:4f:20:
                    46:c5:dc:dd:39:a7:89:7c:6a:25:10:9b:80:e2:60:
                    f8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DA:7F:D8:44:F0:CB:55:8B:D6:41:DC:82:87:37:24:84:EC:05:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/93387d12-85b4-3d2f-81d4-c73e2a03360b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:c3:1c:f1:4c:d3:90:ed:86:b4:68:28:f6:ab:59:9a:97:b1:
         03:5a:40:37:55:0b:f3:f8:4e:61:bc:fb:0c:d5:7e:04:3d:41:
         1a:69:d5:2d:7f:d0:4e:e9:83:64:ca:f0:ca:b9:70:d2:5e:f4:
         df:8e:8c:3d:4a:3f:23:88:97:00:38:7a:d0:12:a0:c3:3d:70:
         23:57:8f:64:22:5e:7f:00:fc:26:17:94:3f:a9:ec:75:98:5c:
         7f:bb:74:a6:44:6c:c6:20:ff:16:79:2f:b7:5b:27:21:32:41:
         6c:d4:d1:72:a8:74:85:06:dd:22:cd:63:dd:1b:07:40:ce:d6:
         98:76:e2:55:33:2b:1c:51:03:ac:2d:9b:18:4b:88:d8:18:e4:
         ad:95:43:5a:c1:27:a4:64:e8:46:2b:29:bf:e3:bf:e3:cb:18:
         35:9d:d6:60:0b:f2:0a:46:f2:04:15:be:4a:7a:fc:6f:6f:2c:
         99:e9:d2:44:2e:b9:fa:ea:eb:94:3d:d5:73:c5:58:17:c3:1f:
         74:24:1e:5c:9b:26:28:6e:9c:0b:a6:c6:6f:12:b9:18:77:dd:
         94:f5:b2:fd:29:15:56:c1:22:77:68:41:7b:96:43:3e:df:c9:
         b7:48:ad:47:49:45:c4:02:f7:76:bf:be:f2:fb:6c:07:64:7c:
         a9:06:c3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:47 2025 by rpki-client