Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e08992f-cc23-316b-85b2-db8822bdf9cb.roa
File:                     9e08992f-cc23-316b-85b2-db8822bdf9cb.roa (raw, json)
Hash identifier:          0dgiA5gmFmq+yejETsb6QDbfMQpTtAJkomgABFdGFxQ=
Subject key identifier:   F4:AF:B0:55:DD:15:1F:73:26:47:DD:C1:85:80:E3:7A:68:D9:74:7D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848278D040EE684419FF6018F40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e08992f-cc23-316b-85b2-db8822bdf9cb.roa
Signing time:             Tue 10 Dec 2024 00:07:33 +0000
ROA not before:           Tue 10 Dec 2024 00:07:33 +0000
ROA not after:            Sun 09 Mar 2025 23:07:33 +0000
asID:                     13335
IP address blocks:        172.70.42.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:8d:04:0e:e6:84:41:9f:f6:01:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 00:07:33 2024 GMT
            Not After : Mar  9 23:07:33 2025 GMT
        Subject: CN=b5e60fb9-38fe-4533-80ba-512b0322ae38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:95:ea:24:3d:8e:eb:6d:ed:a0:d4:85:24:1d:
                    10:b2:4e:16:3a:9e:d7:35:a5:e6:d5:58:b3:78:45:
                    bb:14:60:8f:99:01:8a:d7:f4:ca:a3:aa:64:23:a2:
                    08:e6:56:ac:73:31:d9:28:1c:0f:67:87:32:72:ff:
                    3f:c6:9e:1b:7f:ee:b7:c9:6b:1b:23:b1:d3:6e:35:
                    15:76:e8:a5:3a:76:33:f8:a9:ea:cd:ea:db:7e:5e:
                    5c:a2:5f:36:95:fb:1f:10:f7:21:88:cc:d1:a2:8c:
                    20:5d:2e:b0:61:97:3a:b3:43:87:6b:d4:43:6d:ef:
                    6d:28:96:47:01:4c:75:d0:af:97:33:11:ff:b4:c4:
                    db:f2:b2:df:10:fb:a0:c9:8e:d7:ae:75:ea:91:3e:
                    ec:cf:48:65:92:b1:91:80:e6:0f:fb:3f:c2:69:b9:
                    91:c6:8e:00:7b:67:de:ad:03:91:70:9a:07:2d:80:
                    b5:f8:2e:9e:2d:63:a6:71:3f:f9:e4:8d:78:7b:dd:
                    2e:40:66:e7:1e:ea:ec:29:7e:5b:84:83:28:70:30:
                    19:68:49:5d:44:f0:88:7e:67:12:17:7c:f5:2b:c2:
                    e7:c1:0e:26:5a:61:2b:d4:99:c8:30:9a:f4:74:91:
                    b6:cf:d8:57:ae:d0:b4:27:10:59:65:65:bd:42:85:
                    d9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AF:B0:55:DD:15:1F:73:26:47:DD:C1:85:80:E3:7A:68:D9:74:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e08992f-cc23-316b-85b2-db8822bdf9cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:a2:65:0d:b6:5c:1b:60:31:89:19:b1:9d:05:79:86:19:ff:
         05:ca:4b:e6:58:23:28:70:19:9c:3a:c5:24:75:10:2c:2d:3d:
         1e:a3:bf:b0:2f:9f:9e:3f:7e:d8:73:5d:7b:c1:c6:1c:1d:2f:
         2a:e3:9a:b0:88:54:c4:45:93:1a:54:75:fa:ec:2d:07:31:84:
         84:04:b0:09:61:55:ff:04:ba:f7:6a:d1:ca:a9:8b:60:e4:cd:
         bf:a7:24:80:7d:cb:00:f6:3c:50:3d:a4:8d:44:30:cc:47:e2:
         16:14:b1:9b:44:93:eb:43:fa:b5:67:c7:7f:9d:d0:5b:00:51:
         82:80:f9:86:1b:7b:d7:3c:a2:4b:10:5a:30:40:6e:65:5a:de:
         2e:f0:c9:1d:74:4f:3c:50:98:bb:fa:01:4f:37:b8:10:06:1f:
         a5:cc:a6:c9:dc:bd:f4:bc:36:4b:81:5f:60:14:db:fa:73:40:
         ea:b9:2c:39:8d:a1:3a:96:58:13:97:ca:de:2b:78:02:0a:d2:
         19:59:d3:53:00:ff:29:63:af:28:5e:93:f7:d6:c7:e1:15:77:
         5f:f9:50:45:e8:16:5f:05:03:74:41:45:93:b4:13:7d:c2:9b:
         17:54:2f:0e:69:ce:c9:41:2f:95:4e:c1:2b:0b:8d:9e:0e:8c:
         85:78:75:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:26:45 2025 by rpki-client