Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc2dc789-3aaf-3694-9090-4f4c006937fe.roa
File:                     dc2dc789-3aaf-3694-9090-4f4c006937fe.roa (raw, json)
Hash identifier:          sTvP3WV2tvCJ/bAm2YJM+M4Iwx+MrN4nU4cPXlL2mqg=
Subject key identifier:   36:4F:2C:D0:91:6F:20:9D:0C:D3:D0:FF:D9:CB:6C:CC:28:2D:2D:EB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858483023A250320A7FD7CE07E1C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc2dc789-3aaf-3694-9090-4f4c006937fe.roa
Signing time:             Fri 13 Dec 2024 01:57:29 +0000
ROA not before:           Fri 13 Dec 2024 01:57:29 +0000
ROA not after:            Thu 13 Mar 2025 00:57:29 +0000
asID:                     13335
IP address blocks:        172.70.96.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:30:23:a2:50:32:0a:7f:d7:ce:07:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 13 01:57:29 2024 GMT
            Not After : Mar 13 00:57:29 2025 GMT
        Subject: CN=1c881b9a-1c64-4e37-a788-25e611908e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:01:71:e9:35:99:0b:f5:b8:fc:4e:93:35:87:
                    2d:4b:2e:e6:ba:e0:bf:e0:c6:b1:48:2a:69:c4:cb:
                    29:a4:49:03:85:16:35:42:12:33:00:d9:20:a9:5c:
                    87:8f:ed:91:f3:5c:44:e0:b6:b3:f0:79:e9:03:41:
                    05:41:4b:30:b4:5f:09:ab:6b:08:9e:81:8f:c6:ce:
                    f8:6d:b0:f7:a1:2e:70:38:b6:ad:7a:35:bb:21:b3:
                    1b:ff:8b:8f:e9:4a:e8:7f:80:24:a8:7a:42:ad:e9:
                    45:40:94:32:c8:eb:56:49:bf:c2:97:63:0d:7d:b3:
                    b0:ce:69:f4:a2:7b:3f:75:9a:42:57:e8:60:60:99:
                    7c:79:68:d1:49:49:b2:9a:97:af:a8:de:c3:51:3e:
                    bf:f7:f7:52:06:ba:f2:f7:64:3e:27:c4:33:59:0b:
                    5e:34:9e:03:5a:05:6b:4d:0c:3d:fb:6a:db:4a:a4:
                    0a:66:f9:56:15:c0:bf:8c:44:bc:a7:86:a2:78:1b:
                    17:0c:71:53:2d:2b:28:9d:19:66:e9:6e:b5:e2:a2:
                    c3:a3:e3:9f:2a:11:56:72:88:73:87:1b:f3:bb:d6:
                    20:6b:60:db:f4:34:7a:12:de:83:a3:8c:a5:79:f8:
                    e8:48:8c:d0:02:1e:a4:5c:40:ea:08:46:4b:bc:77:
                    3b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4F:2C:D0:91:6F:20:9D:0C:D3:D0:FF:D9:CB:6C:CC:28:2D:2D:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc2dc789-3aaf-3694-9090-4f4c006937fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:7e:5c:7f:d8:c6:3a:65:37:ea:6a:f3:6c:3f:70:d1:1b:48:
         09:0a:1b:bb:fc:ad:b4:fc:8f:d7:ba:9c:26:00:21:0a:a3:43:
         bf:b2:10:5e:aa:a4:d6:f2:a8:71:c6:b6:ef:e6:c3:ca:20:24:
         bb:10:81:09:ab:66:45:8a:fe:99:33:88:88:78:fe:d7:19:8b:
         a1:3f:ad:9d:55:98:69:d1:3e:3d:63:a5:45:78:c4:6c:42:1c:
         9f:a1:df:d7:bb:3e:8b:a3:39:7b:6e:af:9e:ab:71:31:ac:48:
         c9:cd:6a:1c:71:16:66:b7:b5:6a:b6:8a:37:e9:05:ef:53:63:
         69:b5:c4:93:88:0a:cc:83:47:9e:55:c9:0d:12:2e:e5:dd:91:
         c9:a5:c5:b9:1f:b9:75:ac:11:11:06:59:5e:2d:55:78:ac:29:
         c6:fe:c5:49:3f:72:10:79:b5:1b:c7:61:de:b9:31:5c:46:09:
         f5:97:52:bc:c7:d9:8e:4e:5f:1b:54:47:47:89:68:ec:8d:35:
         63:83:70:3c:4a:70:f2:f3:f2:15:32:f5:55:35:2a:22:38:c1:
         f8:96:71:ca:5b:fe:94:36:7e:7b:2f:71:9c:57:d8:a8:1a:10:
         73:b5:16:38:d4:bd:0c:94:bc:87:fb:c3:d8:7b:af:68:e8:4f:
         bb:ea:f0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:28:45 2025 by rpki-client