Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dcc0b0cb-f1da-3294-9bbc-4527393914d1.roa
File:                     dcc0b0cb-f1da-3294-9bbc-4527393914d1.roa (raw, json)
Hash identifier:          vc5knequzXdgQ1kdZPjCSer1hDXvKpwHKBbbTU1j3RY=
Subject key identifier:   57:7F:B1:F4:6A:6B:07:1A:23:DE:17:1A:86:26:44:24:C1:03:82:20
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858482A8F5936565C4FFA5300B8C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dcc0b0cb-f1da-3294-9bbc-4527393914d1.roa
Signing time:             Wed 11 Dec 2024 01:59:40 +0000
ROA not before:           Wed 11 Dec 2024 01:59:40 +0000
ROA not after:            Tue 11 Mar 2025 00:59:40 +0000
asID:                     13335
IP address blocks:        172.68.179.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2a:8f:59:36:56:5c:4f:fa:53:00:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 11 01:59:40 2024 GMT
            Not After : Mar 11 00:59:40 2025 GMT
        Subject: CN=d438a894-87d9-45dd-8eb7-0ab07d8ba07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9f:70:f8:a2:46:94:9a:41:e2:f0:51:69:1f:
                    6d:c8:5b:54:d9:cb:a3:fb:a3:6b:46:ad:53:95:31:
                    6a:da:8c:e0:86:a1:24:54:88:76:19:e2:9c:04:ca:
                    38:01:32:42:d1:dd:c7:a9:3f:9c:2f:f7:08:4f:46:
                    af:a5:df:b3:d7:0f:d1:06:f7:43:36:aa:13:46:f9:
                    2e:47:54:87:68:fc:c9:ca:61:9d:25:9e:36:93:8d:
                    37:f4:5a:24:17:b0:be:b7:66:36:bf:22:c4:1c:f8:
                    91:b1:64:bf:fa:bc:f9:b3:31:1d:0b:5e:dd:50:dd:
                    05:21:95:00:b1:a4:15:f7:12:67:74:89:3e:9c:97:
                    39:a8:53:80:04:83:08:f5:c1:69:83:92:6f:47:ea:
                    ff:9a:a4:c9:df:c8:13:ee:43:ba:21:c7:8a:a0:53:
                    7a:a0:ab:83:78:6a:6c:91:3c:ed:39:9f:01:b7:90:
                    bf:89:40:f8:66:1b:0c:de:06:71:b7:c4:17:3f:70:
                    0e:21:99:c4:58:15:31:62:22:7a:e9:7e:0f:4c:02:
                    b2:dc:b8:8f:ab:fe:18:c9:0f:ac:09:d3:09:68:85:
                    7f:b4:6c:b5:2d:f6:95:d6:f2:c7:ef:3e:4c:d8:b9:
                    a8:c4:ae:4e:e7:b0:44:27:10:2c:e1:4f:dd:4c:3a:
                    3e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7F:B1:F4:6A:6B:07:1A:23:DE:17:1A:86:26:44:24:C1:03:82:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dcc0b0cb-f1da-3294-9bbc-4527393914d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:54:25:ce:83:43:fe:d3:46:98:a2:00:88:20:6f:94:28:53:
         46:35:50:9b:16:d4:5f:8b:fb:fd:64:2d:5a:1a:0f:eb:57:08:
         6d:66:33:6a:9c:ce:99:0f:4f:f7:1d:81:61:f1:88:9c:5f:db:
         d8:f3:ae:49:ae:9c:f4:ad:1d:73:7b:2b:10:71:6c:32:5b:a4:
         14:9a:2a:74:5e:2f:4d:f4:11:87:ac:77:b1:83:1c:79:77:1f:
         45:ab:37:bd:46:21:b2:ee:9a:8f:c3:03:ec:ad:fc:de:2f:11:
         d7:4b:cc:ce:2b:d8:85:10:8f:03:26:d1:d3:9e:ec:1a:4a:83:
         ba:82:3d:4c:4a:00:e9:e2:a8:cb:21:f8:1c:40:47:27:d3:91:
         e1:fe:1c:42:85:f8:6e:ce:ac:23:08:75:10:99:74:5e:3f:98:
         f3:34:ab:60:92:b9:93:9b:a6:14:1a:7d:96:27:31:2f:99:7c:
         7b:d0:f9:5d:84:76:cd:65:a0:86:93:13:24:5d:b4:78:90:e7:
         d7:1c:7c:5a:60:70:c9:09:94:d9:6b:b3:4c:33:09:a3:22:47:
         6b:74:e9:63:a4:6e:e6:ee:da:ac:dd:79:a5:b1:5b:1f:67:ff:
         4f:a5:90:5b:59:75:4d:92:32:9f:7e:ca:32:13:b1:58:f8:9f:
         5e:7c:a9:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgqj1k2VlxP+lMAuMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMTAxNTk0MFoXDTI1MDMxMTAwNTk0MFowLzEtMCsGA1UEAxMk
ZDQzOGE4OTQtODdkOS00NWRkLThlYjctMGFiMDdkOGJhMDdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk59w+KJGlJpB4vBRaR9tyFtU2cuj+6NrRq1T
lTFq2ozghqEkVIh2GeKcBMo4ATJC0d3HqT+cL/cIT0avpd+z1w/RBvdDNqoTRvku
R1SHaPzJymGdJZ42k4039FokF7C+t2Y2vyLEHPiRsWS/+rz5szEdC17dUN0FIZUA
saQV9xJndIk+nJc5qFOABIMI9cFpg5JvR+r/mqTJ38gT7kO6IceKoFN6oKuDeGps
kTztOZ8Bt5C/iUD4ZhsM3gZxt8QXP3AOIZnEWBUxYiJ66X4PTAKy3LiPq/4YyQ+s
CdMJaIV/tGy1LfaV1vLH7z5M2LmoxK5O57BEJxAs4U/dTDo+iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFd/sfRqawcaI94XGoYmRCTBA4IgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGNjMGIwY2ItZjFkYS0z
Mjk0LTliYmMtNDUyNzM5MzkxNGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIVUJc6DQ/7TRpiiAIggb5QoU0Y1UJsW1F+L+/1kLVoaD+tXCG1mM2qc
zpkPT/cdgWHxiJxf29jzrkmunPStHXN7KxBxbDJbpBSaKnReL030EYesd7GDHHl3
H0WrN71GIbLumo/DA+yt/N4vEddLzM4r2IUQjwMm0dOe7BpKg7qCPUxKAOniqMsh
+BxARyfTkeH+HEKF+G7OrCMIdRCZdF4/mPM0q2CSuZObphQafZYnMS+ZfHvQ+V2E
ds1loIaTEyRdtHiQ59ccfFpgcMkJlNlrs0wzCaMiR2t06WOkbubu2qzdeaWxWx9n
/0+lkFtZdU2SMp9+yjITsVj4n158qQ8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:18:50 2025 by rpki-client