Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f5cc9135-e7d0-3032-9f18-6f8ea89813d5.roa
File:                     f5cc9135-e7d0-3032-9f18-6f8ea89813d5.roa (raw, json)
Hash identifier:          DhnryItf+RSjrfAP6jYrBV/a0N6CIrirR3tQKBNlVoE=
Subject key identifier:   20:E7:C4:0C:4F:BD:D2:61:54:31:76:C5:F9:84:FC:58:26:AB:28:17
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848280AFB08D3E7DEDCA19B9E00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f5cc9135-e7d0-3032-9f18-6f8ea89813d5.roa
Signing time:             Tue 10 Dec 2024 04:21:21 +0000
ROA not before:           Tue 10 Dec 2024 04:21:21 +0000
ROA not after:            Mon 10 Mar 2025 03:21:21 +0000
asID:                     13335
IP address blocks:        172.68.241.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:28:0a:fb:08:d3:e7:de:dc:a1:9b:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 04:21:21 2024 GMT
            Not After : Mar 10 03:21:21 2025 GMT
        Subject: CN=32145478-3c82-4e19-bfea-28ab6717bfd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d2:cb:ef:a2:ee:64:e2:22:e9:98:fa:a2:63:
                    2e:a8:20:a3:25:f2:06:3e:90:49:2b:13:36:13:c7:
                    44:5c:85:da:d7:d5:bb:bb:44:8c:3f:54:cf:27:13:
                    f8:2a:0e:18:e6:53:30:76:5d:38:c0:c0:e8:4b:51:
                    80:7d:41:47:9a:56:5a:65:a4:07:3a:0d:6d:98:33:
                    33:4c:f2:1b:3f:6b:bc:6a:56:62:62:7e:0d:09:4b:
                    bc:db:19:d1:72:c4:47:a3:c4:74:d2:e9:06:97:80:
                    bb:f4:ef:1f:83:84:69:29:0c:2b:aa:ff:84:ff:29:
                    b0:d3:99:f7:f0:78:51:d0:a2:97:99:62:e5:c1:4a:
                    77:65:24:4a:5d:2c:14:f5:96:77:fb:49:73:2c:a6:
                    f3:65:f8:87:91:ba:02:a1:e3:bc:af:c9:9d:ca:e6:
                    0d:68:dc:95:8a:7c:3f:1a:44:31:62:a0:46:92:b2:
                    6d:5d:47:3b:ab:8f:91:d3:c4:92:08:c2:8f:69:f5:
                    42:75:28:f2:0a:44:3f:2a:48:3b:ce:88:98:b6:42:
                    69:14:dd:46:02:24:ed:5d:81:d7:c7:ce:17:cb:af:
                    c7:f4:f0:70:ce:6c:08:f0:6e:42:0b:c5:7f:45:72:
                    51:8e:34:7f:b6:4e:f7:a0:c4:70:de:43:65:18:0f:
                    d6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E7:C4:0C:4F:BD:D2:61:54:31:76:C5:F9:84:FC:58:26:AB:28:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f5cc9135-e7d0-3032-9f18-6f8ea89813d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:c0:52:76:a4:d4:07:75:46:89:b0:2b:12:de:b1:09:ed:83:
         ba:9f:ad:63:9b:61:73:ca:5d:ac:06:cc:6b:4c:a0:00:83:89:
         78:6f:bd:3e:91:58:e0:03:c9:92:da:10:f7:d6:99:ff:6f:62:
         f6:33:43:aa:ba:4b:24:56:1b:77:f1:d2:f3:3c:f4:06:58:9c:
         a7:68:6c:c5:d1:7e:d4:7f:02:fd:67:47:89:2f:ab:59:04:2a:
         c5:95:85:5c:6f:06:41:54:55:d5:84:cf:bf:93:27:1c:ca:e1:
         94:37:59:55:0d:7d:3f:a2:b9:7a:96:bf:6e:38:7f:1d:83:b9:
         bf:67:17:74:88:a4:6e:2d:f3:da:bb:7e:40:62:69:b3:2a:3f:
         37:f4:ba:b2:ed:c6:65:41:43:e4:5b:f7:8f:4b:67:fd:b3:6f:
         a7:25:43:b5:95:34:ba:3b:ee:25:58:e8:c2:ad:fa:cc:e3:ca:
         f7:a9:68:44:d7:74:aa:41:22:53:b8:1a:23:07:24:e5:63:4e:
         76:c9:4c:63:de:82:82:0b:94:7c:2e:ad:9b:bb:92:e3:6a:e3:
         b4:d5:12:fa:14:7a:77:bb:98:06:2f:60:e0:64:8e:9f:2c:99:
         0b:e3:df:a8:78:dd:ed:4f:73:db:64:ae:a7:41:81:b3:51:cd:
         d0:db:1d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:48:55 2025 by rpki-client