Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a5291920-5929-3f3f-9fb9-67d690e183c7.roa
File:                     a5291920-5929-3f3f-9fb9-67d690e183c7.roa (raw, json)
Hash identifier:          TauhdZ9uxSXo0uzfXQrqAwV8+cbcHjwPLjNWCqad5r8=
Subject key identifier:   5B:03:17:E5:86:6C:2C:84:D2:70:DE:7A:C3:55:83:80:89:6D:CE:91
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858482AACBD5FC941C1DCBA27C700
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a5291920-5929-3f3f-9fb9-67d690e183c7.roa
Signing time:             Wed 11 Dec 2024 02:58:53 +0000
ROA not before:           Wed 11 Dec 2024 02:58:53 +0000
ROA not after:            Tue 11 Mar 2025 01:58:53 +0000
asID:                     13335
IP address blocks:        172.69.200.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2a:ac:bd:5f:c9:41:c1:dc:ba:27:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 11 02:58:53 2024 GMT
            Not After : Mar 11 01:58:53 2025 GMT
        Subject: CN=1af068a5-43a2-4ecf-886f-f4ab43e34902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:57:79:de:21:56:24:70:da:b8:89:27:45:24:
                    41:bf:b3:86:0f:a2:d1:41:7a:30:40:ec:ba:82:7a:
                    c9:fe:1a:3d:ac:87:04:a0:44:74:4d:4d:fa:09:95:
                    1d:3c:d9:2f:60:4d:02:0f:35:32:9d:bc:4a:bd:b4:
                    77:11:f4:a7:54:87:f8:c6:69:dd:7c:01:45:9f:e8:
                    84:7a:1d:5f:39:26:51:c9:c2:10:c3:35:23:0d:dd:
                    a3:9e:73:20:84:ee:b2:e2:51:09:a6:8e:44:21:63:
                    7f:7f:01:f9:78:cc:af:4d:42:01:0a:02:a3:18:76:
                    9b:1a:3a:3d:7f:0c:bf:fc:00:4f:03:26:34:45:6d:
                    d6:60:86:dc:95:22:3f:36:28:c2:67:93:91:bf:c4:
                    0e:25:87:0e:44:de:a2:01:55:24:9b:13:15:65:82:
                    40:56:79:c2:74:36:8f:fb:ca:9e:ca:cc:06:67:da:
                    87:f7:e2:0d:d7:50:b5:71:c1:42:fe:c1:cd:42:b7:
                    6d:3e:06:6a:4a:cd:b5:59:89:8f:c4:b7:6d:0c:d6:
                    46:0d:00:c7:1c:9e:28:e0:5d:28:4e:b1:bf:8e:0a:
                    f1:9d:81:24:5f:6d:69:0c:ad:98:18:b4:99:ac:76:
                    de:3f:f4:61:dd:8c:b4:f1:94:43:06:c4:36:d4:09:
                    91:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:03:17:E5:86:6C:2C:84:D2:70:DE:7A:C3:55:83:80:89:6D:CE:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a5291920-5929-3f3f-9fb9-67d690e183c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:67:03:f6:b7:09:8e:d0:b0:95:56:27:e2:37:7f:e3:84:ae:
         be:a9:4b:ba:89:41:ce:a8:0e:a7:ba:9b:f3:d7:c7:4a:5f:0a:
         1b:c8:27:ec:0e:83:09:af:e9:5f:f7:fe:2f:a8:25:c1:29:2f:
         e1:bf:8b:cc:e6:72:26:88:95:89:19:02:4d:f2:2f:16:1e:df:
         28:cc:94:ac:b7:69:32:db:3a:b5:46:ed:3c:ce:42:16:6c:88:
         50:11:76:86:f5:86:aa:95:ab:2e:3c:33:2d:32:c1:e4:16:16:
         79:b5:75:a5:ea:6e:0e:0b:84:0a:14:db:c3:dc:4a:1f:54:b7:
         df:40:c2:51:0d:f8:6e:c2:de:50:e9:5e:bd:db:6c:9c:55:db:
         36:24:02:fe:69:13:84:80:97:93:0a:c4:4c:4e:65:d5:bc:d8:
         67:48:2d:fa:0c:5d:d9:a5:75:80:12:70:4e:2d:6d:ee:cd:40:
         b1:55:bd:c8:8a:64:a9:16:f3:fc:cb:38:48:29:f8:e9:9d:cc:
         cb:04:df:5a:61:98:e6:33:47:c3:c5:23:d1:c9:90:85:a2:8e:
         db:80:6d:d5:1c:b2:7c:e5:00:b8:7b:07:95:f0:8f:30:de:47:
         0f:32:ad:05:a8:8e:99:a9:69:05:da:5b:50:ae:cc:3b:a3:fb:
         04:4a:dc:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgqrL1fyUHB3LonxwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMTAyNTg1M1oXDTI1MDMxMTAxNTg1M1owLzEtMCsGA1UEAxMk
MWFmMDY4YTUtNDNhMi00ZWNmLTg4NmYtZjRhYjQzZTM0OTAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1d53iFWJHDauIknRSRBv7OGD6LRQXowQOy6
gnrJ/ho9rIcEoER0TU36CZUdPNkvYE0CDzUynbxKvbR3EfSnVIf4xmndfAFFn+iE
eh1fOSZRycIQwzUjDd2jnnMghO6y4lEJpo5EIWN/fwH5eMyvTUIBCgKjGHabGjo9
fwy//ABPAyY0RW3WYIbclSI/NijCZ5ORv8QOJYcORN6iAVUkmxMVZYJAVnnCdDaP
+8qeyswGZ9qH9+IN11C1ccFC/sHNQrdtPgZqSs21WYmPxLdtDNZGDQDHHJ4o4F0o
TrG/jgrxnYEkX21pDK2YGLSZrHbeP/Rh3Yy08ZRDBsQ21AmRxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFsDF+WGbCyE0nDeesNVg4CJbc6RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTUyOTE5MjAtNTkyOS0z
ZjNmLTlmYjktNjdkNjkwZTE4M2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMVnA/a3CY7QsJVWJ+I3f+OErr6pS7qJQc6oDqe6m/PXx0pfChvIJ+wO
gwmv6V/3/i+oJcEpL+G/i8zmciaIlYkZAk3yLxYe3yjMlKy3aTLbOrVG7TzOQhZs
iFARdob1hqqVqy48My0yweQWFnm1daXqbg4LhAoU28PcSh9Ut99AwlEN+G7C3lDp
Xr3bbJxV2zYkAv5pE4SAl5MKxExOZdW82GdILfoMXdmldYAScE4tbe7NQLFVvciK
ZKkW8/zLOEgp+OmdzMsE31phmOYzR8PFI9HJkIWijtuAbdUcsnzlALh7B5XwjzDe
Rw8yrQWojpmpaQXaW1CuzDuj+wRK3KM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:03:12 2025 by rpki-client