Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b69b5d5b-a987-314c-bffb-0eeb3d260be4.roa
File:                     b69b5d5b-a987-314c-bffb-0eeb3d260be4.roa (raw, json)
Hash identifier:          WvzyLdsRH7c7TLj8q1GjQeqHeqbIr9ystEZFnVDpfic=
Subject key identifier:   B8:DB:7B:80:8A:1D:A0:BF:3C:B9:C3:A5:4D:B2:F3:B1:97:1D:F8:6B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858482A8E993AF28339B5D335F200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b69b5d5b-a987-314c-bffb-0eeb3d260be4.roa
Signing time:             Wed 11 Dec 2024 01:58:09 +0000
ROA not before:           Wed 11 Dec 2024 01:58:09 +0000
ROA not after:            Tue 11 Mar 2025 00:58:09 +0000
asID:                     13335
IP address blocks:        172.69.224.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2a:8e:99:3a:f2:83:39:b5:d3:35:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 11 01:58:09 2024 GMT
            Not After : Mar 11 00:58:09 2025 GMT
        Subject: CN=be816e8e-d558-409b-a2dd-95c09648ea15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:02:3a:5e:c3:fa:b1:eb:33:2c:15:b8:36:5a:
                    cf:1a:e0:7c:27:49:69:f6:94:43:15:b6:37:5f:4a:
                    d3:d5:d3:bf:3d:9a:09:e2:02:96:b4:fc:06:cc:ae:
                    9b:85:60:25:d4:11:a9:a1:30:19:51:19:de:2e:1d:
                    35:63:60:ca:3f:fb:de:ac:1e:7b:96:94:72:69:df:
                    77:49:12:98:45:18:41:09:9b:e6:6f:0a:f2:43:3a:
                    10:24:de:cc:46:61:af:ce:3f:72:be:53:b4:d3:21:
                    38:0a:b0:cf:bd:b2:be:f4:95:92:38:e9:2c:12:d3:
                    14:a0:bf:75:4e:d9:ba:1a:d8:0a:24:37:aa:78:d4:
                    13:83:17:93:c1:17:dc:5e:f6:7e:3b:e9:2e:c9:08:
                    bb:e5:5d:fa:f0:8e:57:e2:69:16:72:de:58:28:5c:
                    7f:dd:9b:0d:5e:50:1c:3e:f3:1c:1c:9c:6b:32:ee:
                    b1:fa:46:99:89:b6:2d:81:88:ca:18:e2:3e:82:65:
                    d1:02:b3:71:a4:b8:ed:ff:a2:79:ad:20:9f:6c:cc:
                    f8:43:43:44:6e:27:4b:a9:a1:d7:db:a4:b9:55:f3:
                    8c:f5:30:59:5a:0c:d2:10:69:92:18:d5:d4:6b:05:
                    9c:5a:b6:f2:84:30:29:68:43:5b:78:83:41:55:3c:
                    f6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DB:7B:80:8A:1D:A0:BF:3C:B9:C3:A5:4D:B2:F3:B1:97:1D:F8:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b69b5d5b-a987-314c-bffb-0eeb3d260be4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:40:6f:2f:79:1f:55:24:96:32:c5:e9:ba:1f:84:eb:d7:a7:
         58:45:3d:69:88:96:b0:5f:ec:6e:bd:32:a6:2a:44:5d:40:a5:
         49:b3:2f:07:ed:7a:e9:ab:21:1d:52:b2:40:83:39:d1:b4:58:
         b5:30:e0:29:46:5e:69:e6:ae:75:b7:d4:2b:23:ca:5f:9a:da:
         b8:68:af:15:ee:75:2c:5e:b8:31:55:11:9d:7d:57:b3:1a:68:
         be:a4:9b:13:1f:1b:0b:60:31:14:9b:8e:0c:68:7c:02:27:d0:
         5d:55:8e:ce:67:0c:87:0f:95:74:b7:b4:9e:ba:4a:45:3f:31:
         a1:12:a2:fe:c9:34:c6:d3:e4:1f:dc:c9:87:4b:2b:85:c1:a9:
         5f:fe:d5:ab:68:11:1b:30:cd:b8:6b:c4:10:b0:10:76:ce:56:
         ad:f0:9a:dd:0b:b7:7e:df:eb:a1:15:26:f1:e4:a9:7d:80:0e:
         fe:30:a2:4f:4f:23:7b:7b:ca:61:08:6c:d7:2c:8d:bc:25:6a:
         6b:04:8f:03:35:eb:c7:ab:5e:c4:45:d0:67:4e:44:c3:12:6d:
         10:29:d4:66:05:c9:f3:02:ce:67:5d:80:ff:e2:b1:67:c4:1c:
         3d:68:27:cf:e2:ee:99:49:cd:94:00:ec:99:3b:ae:a1:6e:82:
         31:ec:61:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----