Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb1bdcf7-3977-37f0-b652-a0f554ac7fe9.roa
File:                     bb1bdcf7-3977-37f0-b652-a0f554ac7fe9.roa (raw, json)
Hash identifier:          CXwAW8iUClTq9/7U1m+9DWU9Ik+HXL9ucDmiPLlFoXA=
Subject key identifier:   0E:6A:1D:71:72:EE:FF:1F:E8:FF:D1:5C:B2:70:EF:2C:76:F5:B8:AE
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858482A9AB9CB5A4BD9413BB33900
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb1bdcf7-3977-37f0-b652-a0f554ac7fe9.roa
Signing time:             Wed 11 Dec 2024 02:22:35 +0000
ROA not before:           Wed 11 Dec 2024 02:22:35 +0000
ROA not after:            Tue 11 Mar 2025 01:22:35 +0000
asID:                     13335
IP address blocks:        172.69.33.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2a:9a:b9:cb:5a:4b:d9:41:3b:b3:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 11 02:22:35 2024 GMT
            Not After : Mar 11 01:22:35 2025 GMT
        Subject: CN=cf3ce5f5-b527-42b0-b3e4-6bc44fa5a2cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7b:2d:65:3c:27:11:7f:21:3f:43:3c:36:10:
                    b9:0b:5f:e4:92:9d:f6:dd:5e:d6:05:50:37:f8:19:
                    69:f7:b9:e5:93:e0:51:84:3a:38:84:e4:85:3b:53:
                    2c:eb:70:81:15:01:a0:60:ef:1c:85:a4:c6:0b:ef:
                    65:8b:42:63:97:39:bb:cd:fc:5d:61:19:0c:23:fc:
                    fa:dd:a9:00:31:04:5f:27:85:cc:10:99:ec:49:f0:
                    ee:d0:39:6a:72:9a:58:bd:5f:ba:2e:0e:d9:ab:ba:
                    18:9b:f1:45:41:cd:1c:0d:cd:cd:90:dd:8b:34:5f:
                    86:0d:96:a5:95:83:34:18:eb:84:6e:9d:fb:60:c8:
                    c0:82:f9:e4:df:4b:b1:d4:e1:15:16:51:14:7a:27:
                    ef:69:0f:7d:9f:0f:c2:f2:d0:d1:e7:e3:dd:5b:ce:
                    a1:90:2e:f8:22:88:06:c0:0e:51:24:5f:8d:41:5a:
                    40:71:d5:b6:a4:6f:9c:90:3e:51:0e:4e:a5:63:b0:
                    11:09:6f:2f:f3:98:13:f6:ee:bd:1d:4f:a6:2f:b5:
                    fe:0d:f3:91:8b:3f:bc:e3:58:0b:1b:77:97:68:40:
                    fb:f1:2d:42:ef:d3:50:ce:7f:e0:04:0c:35:14:c0:
                    3a:97:ed:4d:cc:7c:ec:72:ec:6f:6e:2d:d5:65:de:
                    60:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6A:1D:71:72:EE:FF:1F:E8:FF:D1:5C:B2:70:EF:2C:76:F5:B8:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb1bdcf7-3977-37f0-b652-a0f554ac7fe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:36:05:64:1e:b8:85:25:0c:3b:e3:c5:88:de:af:1c:93:70:
         b9:ef:f4:3d:d4:14:11:51:36:27:ae:89:df:82:9d:7a:af:80:
         bd:02:9a:35:01:22:c0:bb:3e:a1:23:56:ab:e0:e6:40:cd:c6:
         0c:45:f0:e4:97:41:e6:f1:92:2b:40:34:78:9e:17:5d:d3:b9:
         62:ed:6e:62:50:ec:59:93:73:ad:77:1c:9a:82:11:0c:7e:44:
         cd:b3:c1:86:b5:31:27:01:5c:72:f8:ea:10:be:34:96:6b:ad:
         f6:e9:e2:c7:f9:16:c6:57:35:73:25:3c:93:3f:e9:53:2f:87:
         35:bf:c7:7f:3f:c4:c9:94:4f:b4:ed:5f:fc:29:2c:5b:31:bf:
         c2:27:93:13:0c:2b:08:0c:ad:af:c6:21:dd:f3:a1:d3:a6:3e:
         9b:f3:fb:80:3d:dd:72:9a:6c:73:b3:78:f2:8f:20:60:48:ef:
         6f:0e:28:39:64:05:14:4e:00:25:ff:71:27:69:14:b6:26:66:
         be:f2:c6:a9:9d:14:74:b4:85:0e:75:c1:be:d1:ca:a1:25:5f:
         7c:f1:62:5e:16:fe:77:e3:38:f9:0a:f5:b7:55:25:32:5a:f9:
         85:b2:4e:fb:c6:3b:8a:bf:bb:d9:39:08:42:a8:cb:16:6d:a4:
         5f:c0:64:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:55:18 2025 by rpki-client