Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d59e955a-b36b-344b-81cd-7f5b4670c997.roa
File:                     d59e955a-b36b-344b-81cd-7f5b4670c997.roa (raw, json)
Hash identifier:          rYE/LNBY0IUF/ADvBd+R7yesLwl9wA59vDAO6aZpTOs=
Subject key identifier:   4F:93:AF:84:94:9D:3F:20:DB:7E:DE:CB:E2:96:4D:E2:FA:12:A0:34
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858482A99E69E5B431006B958E800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d59e955a-b36b-344b-81cd-7f5b4670c997.roa
Signing time:             Wed 11 Dec 2024 02:20:56 +0000
ROA not before:           Wed 11 Dec 2024 02:20:56 +0000
ROA not after:            Tue 11 Mar 2025 01:20:56 +0000
asID:                     13335
IP address blocks:        172.69.9.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2a:99:e6:9e:5b:43:10:06:b9:58:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 11 02:20:56 2024 GMT
            Not After : Mar 11 01:20:56 2025 GMT
        Subject: CN=f8280e34-4419-49b9-9474-503bed6ebf6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cb:6e:54:76:bc:cd:2d:a3:6a:9d:c9:c8:aa:
                    29:30:b1:fe:9b:c9:0e:dd:c6:1a:37:f1:8f:22:5a:
                    6c:92:ee:78:39:be:f2:46:4e:83:02:c7:40:4f:b9:
                    0a:4d:3c:1c:91:d6:94:ac:60:ae:90:cf:26:c4:dc:
                    64:de:20:92:43:f5:f6:a3:f9:de:9b:38:7f:1e:e9:
                    d7:79:be:d3:db:12:60:fc:4b:f7:f1:0f:18:10:53:
                    0e:06:12:db:2b:81:7f:dc:99:ee:ff:25:cb:7c:a3:
                    a7:53:38:c0:aa:90:47:a5:f1:ff:8e:46:df:16:e2:
                    a1:a6:19:13:5d:bf:f0:9c:7a:27:e4:16:5c:a7:94:
                    e1:56:f4:ca:f4:b3:3d:44:3b:94:2e:4a:24:00:09:
                    de:3b:24:42:61:a4:74:41:4d:0b:25:67:c9:69:c7:
                    d7:77:13:59:87:8f:e3:69:79:d7:73:d2:b9:cc:68:
                    28:0f:c6:7e:f4:58:39:5b:88:cf:3e:73:b6:00:bb:
                    90:ee:82:38:d2:d5:fc:50:0a:4f:d0:8f:4d:ee:9c:
                    ae:96:b3:c9:06:92:83:ae:56:22:b6:7f:4e:cf:e0:
                    49:34:b5:eb:ba:5b:c4:9e:da:a2:20:74:09:1b:3b:
                    19:09:e9:78:36:ed:f7:1d:0e:84:ee:31:01:29:7c:
                    8d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:93:AF:84:94:9D:3F:20:DB:7E:DE:CB:E2:96:4D:E2:FA:12:A0:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d59e955a-b36b-344b-81cd-7f5b4670c997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:c2:71:e0:23:00:6b:6b:75:0f:dc:51:9d:90:ba:04:8b:0a:
         89:e0:6d:d6:c4:fe:71:3f:95:ad:63:49:35:f0:9e:d2:37:89:
         5f:a4:ee:29:86:18:7f:08:07:4c:ad:06:0e:bc:a7:1e:bb:e5:
         44:bf:6e:a6:cb:fc:2d:5f:fa:fa:7d:73:6c:74:f8:5f:89:e7:
         fa:69:32:ff:19:28:05:b4:3f:65:98:97:9a:51:e6:f3:da:df:
         d5:3c:53:f9:2e:ee:dc:95:5d:b0:d0:b7:ab:55:fc:1e:20:39:
         9b:56:c8:6d:81:e8:68:4d:74:ea:2a:c7:7c:d0:64:b7:99:7f:
         58:d0:5e:7c:22:ed:30:47:40:22:d2:b7:6c:94:61:7e:56:43:
         af:f2:3a:5c:98:81:92:42:28:2f:67:cd:1f:45:80:14:49:48:
         59:9f:a1:8c:7d:23:16:ec:21:9e:08:d4:d0:e0:d0:87:97:f6:
         18:19:f0:1b:21:6f:e7:77:a7:f1:4f:26:8b:13:e8:e0:90:58:
         5c:9c:5c:6d:9c:74:ba:05:93:b3:c4:8a:4c:d7:29:49:a8:3f:
         41:e1:eb:3a:64:65:29:c8:12:42:dc:46:8c:bd:f5:88:f8:b7:
         14:7c:82:8d:cb:fc:0d:52:43:20:aa:d0:c6:82:c7:4d:e9:c9:
         50:06:d1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:59:45 2025 by rpki-client