Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f5c7a966-6c0e-3845-ac51-511252568ffa.roa
File:                     f5c7a966-6c0e-3845-ac51-511252568ffa.roa (raw, json)
Hash identifier:          VqFwSIx3N8zXS73Cn/dwsxcV1U5/B3Y+e9ytYBNMm0c=
Subject key identifier:   50:63:C5:19:8F:F5:1B:F0:FA:C2:4F:73:B3:26:76:6F:75:CD:DD:0F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858482A9AFECB2FCC1720C2DE5080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f5c7a966-6c0e-3845-ac51-511252568ffa.roa
Signing time:             Wed 11 Dec 2024 02:23:08 +0000
ROA not before:           Wed 11 Dec 2024 02:23:08 +0000
ROA not after:            Tue 11 Mar 2025 01:23:08 +0000
asID:                     13335
IP address blocks:        172.69.36.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2a:9a:fe:cb:2f:cc:17:20:c2:de:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 11 02:23:08 2024 GMT
            Not After : Mar 11 01:23:08 2025 GMT
        Subject: CN=016d2777-a3df-4f56-b0bd-6c18a581e6d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:33:bc:a7:2e:ed:07:f1:71:bb:c4:30:aa:d2:
                    0d:1e:2f:f0:53:f0:6e:76:fa:04:0e:dd:f8:65:4f:
                    c9:72:c6:52:af:d1:7a:71:3a:3c:10:ac:68:9f:6d:
                    f3:a1:c7:60:52:d1:4a:13:2b:f4:4f:74:98:cb:cf:
                    64:1b:4d:4c:54:c4:5b:42:e8:d5:94:ab:00:11:d0:
                    f4:42:ea:2b:cd:c1:92:cd:d7:c3:e4:da:0a:06:8d:
                    0d:26:16:aa:5b:33:60:0b:23:f6:46:40:ca:29:80:
                    ad:81:32:d1:5a:40:bd:a6:60:65:ef:e6:4b:88:f1:
                    17:cb:72:d8:c5:ed:94:f4:dd:bb:0f:12:03:06:63:
                    67:ab:9c:25:21:78:af:06:8f:6e:e6:0c:a4:93:ce:
                    dd:58:f7:72:6f:c8:c7:fe:d5:8e:56:b8:15:d6:b5:
                    10:e1:90:0d:17:ce:e1:c2:9d:b8:4f:d4:3e:6a:43:
                    95:5b:40:f7:5f:49:31:1b:47:d7:8c:ce:c2:d2:04:
                    c2:9e:6e:fa:ce:d5:74:bf:cb:c6:31:6d:f0:7c:b6:
                    1f:7e:7c:03:33:fb:8e:dc:f7:0e:fe:81:e5:e4:0b:
                    c8:f8:b8:76:b6:da:a9:53:26:91:df:6f:0c:cb:d6:
                    c3:41:52:8e:32:3f:bc:36:62:79:8b:1f:54:6e:ec:
                    87:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:63:C5:19:8F:F5:1B:F0:FA:C2:4F:73:B3:26:76:6F:75:CD:DD:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f5c7a966-6c0e-3845-ac51-511252568ffa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:33:42:5e:49:bc:8a:9f:5d:c0:b9:98:de:e6:81:72:31:09:
         e8:aa:47:b9:72:2e:9e:12:ec:7f:d9:f0:2f:d5:59:bc:45:f2:
         a9:db:1e:9e:1c:ce:cf:d9:89:35:12:16:50:c2:0e:be:11:17:
         8b:fa:ef:3a:53:8f:8c:26:e7:a3:4d:30:4e:ce:98:c2:4a:ec:
         d8:a3:fe:9d:ef:25:7c:d1:f1:4e:97:83:0a:6f:6b:75:f9:3e:
         8d:3f:dc:9f:d2:78:52:50:be:86:a8:ff:f9:62:1f:7c:86:b7:
         16:e7:5b:25:e7:f2:ff:f8:54:57:0b:32:5c:a5:3c:e0:5d:78:
         2f:8b:df:e5:06:60:40:ac:17:96:ce:7f:94:1d:d5:ea:5c:38:
         cc:f2:9b:52:1c:98:dd:2c:42:21:0b:67:13:31:70:ac:a1:0e:
         fc:25:d3:e4:e9:63:c9:b2:47:fb:de:82:2e:f6:42:27:50:75:
         7b:39:7a:5b:32:1a:5b:be:37:fe:35:43:e9:ce:2c:fc:5a:50:
         48:2a:5a:6f:a4:c8:5b:05:cb:77:0e:24:ae:d6:d4:04:bf:0e:
         69:3c:f0:a2:5a:d7:0c:b8:5e:a7:ff:3f:44:15:1f:69:29:f0:
         c2:cb:df:ba:fa:c6:17:94:26:59:3e:8a:ac:50:70:9d:71:4c:
         eb:66:dd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:55:53 2025 by rpki-client