Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c92bb610-ad00-3fe7-a886-3bdc5129605d.roa
File:                     c92bb610-ad00-3fe7-a886-3bdc5129605d.roa (raw, json)
Hash identifier:          UedniX7a1bAxu+MTOU/4m6O1XpVLp1Bocb6WRqVwNOQ=
Subject key identifier:   90:01:97:A7:A5:53:5A:8E:2B:CA:34:64:7C:CD:4F:C0:AE:DA:CD:EA
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848281F7452EE819D06414A5CC4
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c92bb610-ad00-3fe7-a886-3bdc5129605d.roa
Signing time:             Tue 10 Dec 2024 05:02:36 +0000
ROA not before:           Tue 10 Dec 2024 05:02:36 +0000
ROA not after:            Mon 10 Mar 2025 04:02:36 +0000
asID:                     13335
IP address blocks:        172.66.208.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:28:1f:74:52:ee:81:9d:06:41:4a:5c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 05:02:36 2024 GMT
            Not After : Mar 10 04:02:36 2025 GMT
        Subject: CN=02081295-763f-40f8-a03e-6165884cf270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:92:44:9d:23:e4:ad:1d:d6:93:3c:0c:e4:10:
                    a1:58:a0:d9:1a:0b:e5:d0:b4:ac:7c:3e:a1:e2:60:
                    dc:4f:76:37:86:99:c9:c9:c3:5e:70:c1:f1:17:19:
                    b0:49:b3:0c:21:66:5f:35:3b:9b:61:fe:df:4d:98:
                    af:e4:0e:9f:63:6d:07:18:47:08:c5:2c:f5:8b:da:
                    fe:22:b6:a5:9f:ce:7c:94:50:68:90:ce:ce:b2:63:
                    86:a0:58:6b:91:e8:8d:35:a3:f1:1c:f0:83:5d:c4:
                    47:53:13:50:5c:6f:69:6d:a0:2f:6b:af:7f:cc:03:
                    fe:bf:a4:84:f2:57:76:fc:7f:ea:22:f0:53:cb:9e:
                    bf:a5:0a:89:8a:3b:e3:eb:a1:38:32:24:29:dd:56:
                    1b:5e:62:e4:07:00:aa:6c:96:f0:aa:1e:ea:2c:e9:
                    10:73:a1:b9:f0:19:4d:36:42:1e:d5:e8:09:2b:dd:
                    75:45:ad:43:ed:61:f9:89:a2:b2:5d:e2:c7:b2:ac:
                    9a:09:ec:10:c3:e8:65:3a:0f:a0:8f:5b:d4:2f:1f:
                    eb:1c:1b:d7:28:5a:81:2b:74:18:65:0f:31:76:73:
                    90:a4:40:c3:f9:bd:64:05:7d:8c:07:4f:f1:2d:31:
                    93:c5:29:27:8a:5f:3d:f3:31:91:16:aa:be:85:8f:
                    27:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:01:97:A7:A5:53:5A:8E:2B:CA:34:64:7C:CD:4F:C0:AE:DA:CD:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c92bb610-ad00-3fe7-a886-3bdc5129605d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.66.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:f7:8d:d1:bd:a7:d9:0d:f9:3e:13:e8:1f:f2:a6:d9:58:39:
         9e:bd:25:07:51:2f:16:22:d6:5d:23:db:77:4b:da:56:67:e3:
         54:22:ce:a4:66:54:0d:ba:fe:8b:13:96:52:e4:a8:12:d2:0a:
         9b:47:8a:42:1f:0f:7e:03:8a:79:b9:dc:19:5a:b4:e1:88:60:
         01:82:5e:b0:de:21:38:9c:23:7f:d6:46:88:5a:40:15:70:e2:
         31:f5:2a:ef:b8:38:3a:d6:40:9d:00:fa:ee:63:f9:89:76:38:
         40:48:b8:ad:43:de:36:08:20:b9:b5:b6:f6:6a:e2:5c:bc:68:
         d8:b4:86:a5:44:a2:a6:b5:be:fd:3d:b3:a7:20:c9:87:c3:cc:
         38:34:8f:5a:70:a3:28:8b:c5:7a:c5:73:a3:ff:1d:29:62:70:
         51:f1:fc:84:b0:83:19:77:fb:60:09:b9:a2:b4:23:19:f6:2c:
         9f:d6:0e:2b:7f:9a:fb:17:9e:7f:f9:b3:a0:ad:d7:eb:8c:fc:
         d9:1e:2b:b7:d9:ec:ca:90:55:8e:90:24:06:73:64:6e:94:da:
         42:17:c3:df:25:43:6c:c5:e6:f9:ed:a3:53:dd:07:18:b5:6f:
         26:1a:a1:37:49:16:09:f8:69:bb:d4:1a:f4:0d:60:7b:34:71:
         6b:e6:44:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:58:26 2025 by rpki-client