Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a48c95ed-dcc9-3bc1-910f-33a9aed1040a.roa
File:                     a48c95ed-dcc9-3bc1-910f-33a9aed1040a.roa (raw, json)
Hash identifier:          Ugn7BjjoBxXq8YiR6bixg1dtS9emQzXMEDkzQ35Z1X8=
Subject key identifier:   DC:33:91:EE:C8:6A:43:3B:12:D9:E0:A1:F0:25:79:D7:9D:86:51:F2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848280F9A2F5F6F89C37F09EB00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a48c95ed-dcc9-3bc1-910f-33a9aed1040a.roa
Signing time:             Tue 10 Dec 2024 04:30:39 +0000
ROA not before:           Tue 10 Dec 2024 04:30:39 +0000
ROA not after:            Mon 10 Mar 2025 03:30:39 +0000
asID:                     13335
IP address blocks:        162.159.1.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:28:0f:9a:2f:5f:6f:89:c3:7f:09:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 04:30:39 2024 GMT
            Not After : Mar 10 03:30:39 2025 GMT
        Subject: CN=5f4af27b-c937-4a03-8945-14447c84ba10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:63:26:1e:fb:18:83:86:bb:2e:99:c8:1a:74:
                    c7:a4:a1:0e:8f:15:ff:c9:f4:97:95:6d:1a:f1:24:
                    2c:b9:d6:08:6e:a5:82:ab:de:32:a1:6d:26:ba:5d:
                    a3:1a:58:56:8f:4e:2e:be:63:aa:d3:6e:ed:be:54:
                    c5:01:78:9b:92:3e:ac:17:01:68:b5:8a:17:91:53:
                    a7:9d:94:34:e1:26:1f:ed:f9:37:ac:4f:f3:f7:c6:
                    96:57:86:6c:13:00:05:79:e7:75:1a:6b:58:f2:ed:
                    a1:f0:4c:fd:16:00:2f:ce:81:3b:96:7d:f9:3c:d7:
                    ca:1e:4e:cf:9c:b1:6b:c6:d7:e0:ea:db:52:e0:c6:
                    1b:8f:ae:92:10:cd:79:ab:7a:12:69:44:2c:f8:b7:
                    75:1c:32:e0:8f:e8:ce:61:b6:b9:bd:b1:90:9d:1f:
                    2c:44:1c:81:c6:4c:dc:66:7c:7f:3a:13:bd:8c:f4:
                    2b:2c:e3:0f:8c:1c:1f:8f:38:74:bd:e8:77:7b:8d:
                    ea:6b:4c:20:fd:92:b1:ae:ac:b5:f7:70:59:e0:5a:
                    9a:04:4f:1a:c0:0f:a6:a6:40:57:fd:53:41:f9:b7:
                    1d:d2:44:81:9c:b4:c3:2f:d0:98:51:5a:72:64:17:
                    9d:bf:62:69:80:e8:cc:f6:88:b6:5e:50:53:cb:dd:
                    2c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:33:91:EE:C8:6A:43:3B:12:D9:E0:A1:F0:25:79:D7:9D:86:51:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a48c95ed-dcc9-3bc1-910f-33a9aed1040a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:b4:6a:69:63:6c:18:fe:9f:30:76:04:99:29:e3:46:ae:0d:
         ba:cf:14:ef:ec:f5:c2:84:9b:93:04:a6:b5:cc:3b:98:58:59:
         c8:00:6a:37:bf:f0:48:bb:61:c0:3e:d7:2d:f1:da:5f:4c:8d:
         59:b9:95:8f:64:a2:ce:2f:ba:be:b3:47:a8:15:f5:43:0e:d3:
         24:77:87:09:fc:10:1d:bb:52:f1:c9:68:bb:10:7b:ff:24:c3:
         83:25:95:b6:4d:80:ec:7b:52:44:19:8a:73:e8:73:f9:7c:3b:
         60:c3:db:4c:55:27:87:54:4a:91:10:03:1b:ac:41:13:32:10:
         97:27:c5:dc:a4:11:c5:b1:9a:cc:4d:93:81:c8:85:04:03:5d:
         6c:5d:ff:87:ed:8a:99:84:11:f4:89:df:6d:1c:04:19:26:82:
         35:75:27:b3:37:1d:68:f8:b8:b2:b3:8f:4e:59:b6:76:60:96:
         3b:74:39:dc:25:3e:fc:7a:dd:22:51:ed:b2:78:32:07:84:a5:
         33:d8:8e:69:c5:4b:70:14:55:1c:45:4c:09:7b:34:c2:2e:72:
         5f:80:5e:0b:cb:16:81:64:00:e8:bd:eb:84:0d:43:3e:a9:cd:
         25:aa:3f:71:6d:a7:f4:ab:ce:20:b6:d8:fa:2f:2a:69:85:cf:
         f7:3b:8d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:02:45 2025 by rpki-client