Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b74f5713-0a96-3395-960f-93394e99cc6e.roa
File:                     b74f5713-0a96-3395-960f-93394e99cc6e.roa (raw, json)
Hash identifier:          LvcE+TXIxfexYOMbjkkMChK26RdEd9wz2vfDvEXdfco=
Subject key identifier:   C4:CC:C5:F7:3D:02:11:6B:76:29:C6:6B:A1:86:55:28:A5:ED:4F:93
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848281DB07B9489EFD4CEE46200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b74f5713-0a96-3395-960f-93394e99cc6e.roa
Signing time:             Tue 10 Dec 2024 04:59:02 +0000
ROA not before:           Tue 10 Dec 2024 04:59:02 +0000
ROA not after:            Mon 10 Mar 2025 03:59:02 +0000
asID:                     13335
IP address blocks:        172.65.64.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:28:1d:b0:7b:94:89:ef:d4:ce:e4:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 04:59:02 2024 GMT
            Not After : Mar 10 03:59:02 2025 GMT
        Subject: CN=bc2bd365-de47-43ee-b060-8fd873954717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e9:b7:5f:91:41:a5:62:12:c6:be:dc:44:a0:
                    0d:94:3c:ec:47:b2:4c:90:97:6c:f3:f2:29:ea:51:
                    54:4d:ce:bc:5a:34:f1:a6:0c:32:4a:f4:3f:ba:56:
                    7a:43:d9:f3:2a:f9:33:ab:84:94:c5:43:ae:bb:20:
                    30:07:0f:97:54:fb:ca:55:1d:b0:0c:a3:c9:e4:f3:
                    45:bb:06:93:4c:ff:51:15:c3:9a:81:2d:77:4e:90:
                    3c:7c:dd:dc:82:1b:0c:2d:a7:95:26:03:eb:30:ba:
                    74:1f:c2:20:71:ea:f9:fc:17:ad:e1:98:29:c5:5c:
                    2b:33:32:7b:c3:87:ed:4c:98:d5:f0:dc:bf:e7:ea:
                    e5:bd:cf:2f:09:59:d7:c5:dd:98:ae:83:13:db:b4:
                    f9:27:d9:08:b2:11:80:11:2c:41:d7:65:b7:77:69:
                    76:0f:bf:41:04:b5:a6:48:5e:a1:9c:7a:bf:d1:36:
                    ce:39:2b:44:4f:0a:d9:c4:94:57:87:63:6e:b7:62:
                    68:30:df:42:1d:e0:c9:81:00:99:d0:15:39:d9:8b:
                    72:bf:05:22:9f:99:cd:ea:c3:4e:6a:4f:26:4f:4f:
                    d8:af:29:dd:45:88:1c:79:d0:ab:94:e5:ca:84:87:
                    ee:b1:54:2d:c3:05:18:ae:5a:f4:ff:c3:c2:04:7a:
                    95:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CC:C5:F7:3D:02:11:6B:76:29:C6:6B:A1:86:55:28:A5:ED:4F:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b74f5713-0a96-3395-960f-93394e99cc6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.65.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:4a:00:70:2c:7a:5b:58:6a:7a:44:d1:f5:22:73:0e:f1:9f:
         b2:74:49:0b:47:d0:2e:71:66:d7:02:a0:98:49:f2:75:91:0b:
         b5:25:69:33:a1:53:07:49:8d:b6:87:fd:63:12:08:3f:e0:e4:
         a5:82:ca:81:a9:62:64:3f:b9:5c:5a:15:99:10:68:ff:4b:9e:
         36:1c:7c:3f:8a:79:42:32:42:63:56:26:af:89:30:a4:2c:92:
         b6:0f:93:d2:44:57:c2:8b:72:ab:c9:d5:6e:ba:28:46:9d:a6:
         77:90:f7:e6:df:63:47:49:b2:72:69:0a:ec:e9:67:fa:e2:0c:
         43:51:38:87:15:38:1a:ad:56:1a:57:e1:b1:2b:78:80:1e:48:
         1b:94:a3:6f:ce:0e:52:12:72:5c:8d:38:65:c6:87:66:4f:ad:
         36:63:1a:12:82:0b:06:05:76:02:09:9f:ae:ec:ea:1c:ae:7a:
         3b:53:80:7c:8b:7d:f6:35:41:8f:bc:29:88:23:9a:bc:81:f2:
         83:82:c8:db:da:dc:07:00:ba:99:70:e2:1a:70:56:4d:66:77:
         a4:bc:e9:5f:03:c8:21:27:13:fb:e9:f5:4c:d5:d7:ec:80:76:
         7d:32:03:59:c3:c0:a8:67:fd:20:61:df:a4:13:f6:28:1d:69:
         32:d4:60:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:01:16 2025 by rpki-client