Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e306d9d8-bc4f-3498-bc18-110d473acd1f.roa
File:                     e306d9d8-bc4f-3498-bc18-110d473acd1f.roa (raw, json)
Hash identifier:          HuBYvbYDjZdasQQ7pxpGgjcC+iB494Jwu4syHK/qOUo=
Subject key identifier:   A4:42:CB:B5:EC:C0:04:99:4B:AA:09:4C:DD:4D:71:2C:2F:9E:4F:57
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858482AAB090E95B7DD6D7975FFC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e306d9d8-bc4f-3498-bc18-110d473acd1f.roa
Signing time:             Wed 11 Dec 2024 02:55:27 +0000
ROA not before:           Wed 11 Dec 2024 02:55:27 +0000
ROA not after:            Tue 11 Mar 2025 01:55:27 +0000
asID:                     13335
IP address blocks:        172.69.173.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2a:ab:09:0e:95:b7:dd:6d:79:75:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 11 02:55:27 2024 GMT
            Not After : Mar 11 01:55:27 2025 GMT
        Subject: CN=fa9942c7-8e51-4d48-9df7-19a45dde95c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7b:69:d0:4d:27:73:a4:3a:31:49:e6:ce:91:
                    88:a1:72:8a:b4:83:bc:d1:ea:6c:30:5b:91:4b:d0:
                    c0:61:b5:64:63:25:2d:b4:c1:74:74:a5:cb:e5:19:
                    59:7a:2a:6b:09:cd:69:e4:5b:9a:a0:b8:1e:69:a6:
                    db:57:bb:8d:a2:52:e7:b5:aa:27:ce:da:cd:c4:c4:
                    c1:41:1e:1a:4d:db:8c:f0:25:e4:82:43:6b:75:23:
                    bf:a7:57:13:f1:19:7d:cb:1f:30:ad:4f:ef:9f:f9:
                    1b:31:74:91:03:71:ad:9d:d2:6e:fd:e0:6d:f4:5c:
                    6f:a1:24:6b:21:1a:a5:4a:94:5c:bc:85:1d:8f:45:
                    e5:b3:ca:26:21:ad:e3:cc:db:e4:ea:b0:ef:df:a9:
                    3c:8b:42:c8:47:da:11:da:f2:fe:06:09:cd:f3:1e:
                    fa:c1:2c:af:ab:d1:a5:5c:25:7f:0a:57:10:d7:03:
                    5e:df:b1:90:fb:33:79:70:e7:8b:01:40:29:b5:fa:
                    bd:b2:73:bf:e6:3e:20:66:b3:19:f1:37:bc:87:f1:
                    0b:dc:16:26:10:3a:7a:c2:18:76:68:3c:ab:2c:c1:
                    b8:5d:99:18:0d:14:28:bd:ac:93:d5:a1:f7:c1:88:
                    08:fd:b4:c0:0b:76:e6:c3:99:67:df:6a:65:c0:3e:
                    e5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:42:CB:B5:EC:C0:04:99:4B:AA:09:4C:DD:4D:71:2C:2F:9E:4F:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e306d9d8-bc4f-3498-bc18-110d473acd1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:8f:cb:36:8b:40:d8:c5:2b:e8:38:c3:61:c6:96:d1:41:62:
         85:03:22:9f:3a:1f:ca:ee:67:85:9a:cb:9f:db:33:52:2f:53:
         eb:61:22:a4:8f:1f:36:e7:27:b4:72:b1:0e:ed:a2:97:c9:a4:
         48:53:f9:e2:98:4d:3c:70:e5:d4:35:d2:ee:e9:8f:63:39:d3:
         02:d3:e3:4e:a1:09:77:b1:32:c4:68:b7:5a:35:d8:51:44:cb:
         c4:c5:82:01:85:e9:54:15:4d:d6:1e:7b:bb:20:f7:73:12:ea:
         bf:c6:6d:93:13:9c:21:d3:95:61:93:21:4c:94:89:b4:7b:b7:
         fd:42:77:4f:68:8d:70:14:a6:ab:b2:5e:c3:a1:cc:83:74:34:
         cd:6c:f8:7f:24:f0:ef:00:3f:c5:9c:51:bf:3c:59:58:be:79:
         49:ff:48:6d:c5:cf:4b:50:7c:49:d8:bc:ef:6d:e6:b6:89:93:
         21:95:fd:9d:3d:2a:dc:21:14:f5:fd:f8:e8:50:90:56:ef:f1:
         8e:36:2f:75:05:d8:fb:9a:08:dd:eb:c0:42:77:1e:b8:7a:6e:
         14:56:45:57:25:7d:01:55:86:20:71:84:c0:02:77:d2:ad:b5:
         a6:f6:a0:f8:1a:5a:24:9e:ff:8e:1a:d6:e6:8b:a3:3a:9a:20:
         12:43:c0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:26:20 2025 by rpki-client