Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f24d8c47-ba33-3522-ace8-45745b2433ee.roa
File:                     f24d8c47-ba33-3522-ace8-45745b2433ee.roa (raw, json)
Hash identifier:          y7jJFOUblqbt1+gVHwqJ9iPYqMWtFQwwgSH4YlwHHn4=
Subject key identifier:   EE:64:22:08:D2:15:12:43:D0:E0:A5:C9:81:8A:A4:24:AC:D6:45:D2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858482A8F7BFE5EFC1F13E0480100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f24d8c47-ba33-3522-ace8-45745b2433ee.roa
Signing time:             Wed 11 Dec 2024 01:59:56 +0000
ROA not before:           Wed 11 Dec 2024 01:59:56 +0000
ROA not after:            Tue 11 Mar 2025 00:59:56 +0000
asID:                     13335
IP address blocks:        172.68.184.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2a:8f:7b:fe:5e:fc:1f:13:e0:48:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 11 01:59:56 2024 GMT
            Not After : Mar 11 00:59:56 2025 GMT
        Subject: CN=1576f5e9-3332-4287-955e-22352104a340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:4d:cf:6d:9f:0b:10:01:32:4e:90:ad:58:
                    84:c1:00:13:d5:b7:2d:11:76:eb:83:fa:75:58:11:
                    f6:f8:54:8d:97:07:44:1a:dc:9b:9d:0f:7e:09:fd:
                    46:58:52:83:c9:60:cd:ec:d9:95:52:29:12:08:71:
                    c5:8c:23:8d:25:8e:88:ca:5a:fa:4c:de:ba:9a:0d:
                    66:7e:71:08:d5:b0:92:62:2e:f0:93:55:e2:65:82:
                    bf:7c:8c:a5:9f:3c:6a:6b:2b:bc:cd:ce:c3:4a:f8:
                    2c:df:4c:bc:08:09:e2:dc:e4:0d:64:5c:4f:2c:71:
                    88:d9:c9:60:f6:1a:6b:30:2e:3d:03:4b:ea:a3:e6:
                    78:5c:94:75:37:15:77:5e:d5:4d:ac:57:ea:a2:af:
                    2a:96:55:7f:49:88:fd:42:ec:f4:b3:ac:87:d4:10:
                    00:56:bd:42:c4:63:ad:6c:1c:46:5b:a7:61:2b:99:
                    9a:6b:d8:3a:db:f3:81:5e:5c:8e:8a:7c:52:4a:f2:
                    a1:a9:40:09:d4:38:ec:13:c0:d5:59:93:e9:02:a2:
                    24:4e:1a:3c:b2:01:53:f2:df:e6:4e:4c:a1:aa:7c:
                    68:0c:d1:9e:2f:c2:2d:a2:87:6a:39:67:db:3d:83:
                    cd:0f:6d:05:4e:0f:2f:a2:1e:f8:f7:d8:1b:a1:e6:
                    20:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:64:22:08:D2:15:12:43:D0:E0:A5:C9:81:8A:A4:24:AC:D6:45:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f24d8c47-ba33-3522-ace8-45745b2433ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:ca:62:64:ea:cc:52:b4:43:ec:88:8b:31:fc:ce:c7:76:a1:
         dc:38:45:bd:f9:94:51:5e:83:18:c9:32:40:9f:fd:0f:5e:2e:
         03:95:fe:90:0f:df:e1:28:12:3a:f8:40:fc:a1:b4:85:8a:84:
         6d:6d:cd:a4:86:27:6b:21:71:22:cc:d4:6a:a4:51:be:a7:57:
         03:b5:55:44:dd:f9:d8:13:4f:4b:10:21:34:61:11:9f:0d:49:
         5b:b5:54:3d:39:18:05:4e:92:d7:f3:6b:b1:91:09:86:e0:8e:
         c9:bb:f3:5b:21:d6:9c:f9:12:af:52:07:42:23:30:19:43:e3:
         a0:1e:af:25:8a:4a:70:6f:a5:e0:8d:be:f2:ef:76:6c:67:49:
         4e:f0:b4:b2:46:37:30:6b:fd:74:17:f1:8d:f3:ae:01:2f:41:
         4e:c9:17:ac:94:95:5f:2c:9e:fc:9e:ae:5a:ca:8a:74:30:f7:
         66:ba:d3:83:24:77:f8:cd:6f:c2:9c:32:25:d2:1c:72:08:8e:
         b3:ef:55:a1:1b:21:c5:ab:87:3a:c0:07:fc:b3:16:aa:da:2e:
         15:ed:ac:91:23:75:f2:09:67:61:6c:f1:fd:84:71:39:ea:8c:
         47:0c:1d:26:38:26:79:83:2d:62:62:74:1b:29:8e:c1:1c:80:
         f0:6a:89:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:12:10 2025 by rpki-client