Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/edbf4013-6725-3d54-b571-639b9205ff3c.roa
File:                     edbf4013-6725-3d54-b571-639b9205ff3c.roa (raw, json)
Hash identifier:          JVG55qve9vSb7kAeq9RpHvuoxl2EC3sb2JDNZQz9ZMc=
Subject key identifier:   53:31:7D:D8:9D:24:C1:A3:4D:D9:2D:76:87:32:92:48:59:05:56:4C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848280913D714D2375BBA429DA0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/edbf4013-6725-3d54-b571-639b9205ff3c.roa
Signing time:             Tue 10 Dec 2024 04:17:31 +0000
ROA not before:           Tue 10 Dec 2024 04:17:31 +0000
ROA not after:            Mon 10 Mar 2025 03:17:31 +0000
asID:                     13335
IP address blocks:        162.158.152.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:28:09:13:d7:14:d2:37:5b:ba:42:9d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 04:17:31 2024 GMT
            Not After : Mar 10 03:17:31 2025 GMT
        Subject: CN=f41761df-84e9-4525-9413-78a16147f464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:66:1b:d2:ca:dc:df:34:47:4c:00:b3:2c:b7:
                    6f:db:47:b2:0b:81:53:76:58:e6:c0:db:58:1e:ae:
                    02:a3:77:79:a2:f6:49:6a:9e:77:38:28:76:b1:ae:
                    ae:91:ec:7a:c8:26:23:9b:21:ca:c4:38:1b:5d:13:
                    c5:fd:b9:bf:9e:7b:7c:14:66:a1:4b:8d:d3:cf:bf:
                    5f:b0:69:b2:68:24:36:b5:ba:53:52:8e:57:73:b8:
                    2c:f5:59:2f:f9:c5:44:0c:ed:70:95:77:52:8d:5a:
                    15:cc:ea:35:3e:74:e5:cc:75:3d:b7:29:eb:8d:44:
                    6a:40:8b:5e:87:3b:0f:c6:94:12:b9:35:25:bd:69:
                    d2:23:59:ec:ad:73:95:26:63:67:fa:09:a6:e1:d7:
                    cc:10:ef:09:27:fc:b8:15:d2:12:21:f0:ed:8d:cb:
                    36:85:a2:5e:4c:b7:a5:13:ec:57:55:b1:3e:6d:c8:
                    cc:9a:e6:cd:73:e9:4b:93:a7:43:a9:e5:e4:e6:2a:
                    a7:db:62:c0:f4:a2:cc:d4:8b:76:7f:a0:f8:ea:44:
                    f2:93:77:30:73:d3:08:33:33:29:f9:74:a6:b7:d5:
                    ff:cd:d9:20:bd:bc:7a:91:8e:51:a8:ed:53:62:33:
                    32:94:19:d3:33:63:fb:8c:1c:f6:90:a0:c8:e5:f9:
                    3e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:31:7D:D8:9D:24:C1:A3:4D:D9:2D:76:87:32:92:48:59:05:56:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/edbf4013-6725-3d54-b571-639b9205ff3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:22:03:2e:24:f2:01:01:bb:7a:1c:2a:68:50:77:15:48:31:
         26:5b:ce:76:09:8b:74:4c:1e:a3:42:da:c6:89:37:3d:d4:1f:
         91:54:74:1b:3c:58:cd:2d:72:90:e1:bc:d0:25:29:8b:23:0d:
         59:cc:01:99:d5:2b:b6:ea:80:71:50:7d:8b:d9:58:7a:04:dc:
         7b:44:8c:6d:13:4f:f4:1d:47:f7:e7:ef:70:e4:54:7d:15:17:
         6d:71:52:6c:c0:ba:b9:0b:8c:6e:91:11:c5:3d:c6:34:9c:dd:
         76:1a:39:e7:ef:65:cd:f5:c9:49:83:0c:15:3c:77:ab:40:06:
         67:f8:98:a3:1c:48:2f:6f:b1:71:5d:f9:ac:1d:80:d9:37:10:
         be:9c:4f:da:b1:da:4f:f4:15:b2:5c:5d:91:f4:0f:c0:35:69:
         6c:6f:f7:b9:ee:46:2f:d0:a3:ad:d7:16:04:6d:e5:10:05:6f:
         f6:9b:71:76:39:c3:9e:e3:23:1c:9a:86:79:4d:5d:0a:c2:af:
         a5:04:56:d6:a1:ad:45:a3:9b:cd:ec:95:3f:ad:97:5f:94:24:
         1f:01:6e:b6:bd:63:f0:db:dc:5a:73:cc:6f:28:0f:0a:72:53:
         04:da:1a:98:a3:f5:c7:13:5f:4f:e8:1c:44:14:8d:b9:a7:10:
         71:8a:03:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:07:48 2025 by rpki-client