Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff051b77-8649-3e63-b832-0b399062a574.roa
File:                     ff051b77-8649-3e63-b832-0b399062a574.roa (raw, json)
Hash identifier:          WWzOugXov1lcmltQr9E0s1X6mAF1ruzNe9QM7KJ3GIE=
Subject key identifier:   B6:CE:07:E8:21:B2:23:AB:F1:EF:79:EA:60:55:35:9E:BD:AE:48:8B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584827AEA8A73DDF660ED7407380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff051b77-8649-3e63-b832-0b399062a574.roa
Signing time:             Tue 10 Dec 2024 01:15:20 +0000
ROA not before:           Tue 10 Dec 2024 01:15:20 +0000
ROA not after:            Mon 10 Mar 2025 00:15:20 +0000
asID:                     13335
IP address blocks:        162.158.105.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:ae:a8:a7:3d:df:66:0e:d7:40:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 01:15:20 2024 GMT
            Not After : Mar 10 00:15:20 2025 GMT
        Subject: CN=aa26b47b-f704-46ac-974a-49347e5836bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6c:49:d8:c0:92:e4:42:9a:41:3e:c7:77:41:
                    1b:b5:7e:a7:ad:dd:72:9a:86:4c:0d:ab:ed:a9:5e:
                    03:07:6a:58:27:08:fe:62:d7:53:c9:f9:b5:df:19:
                    de:fe:9e:a5:06:ad:36:33:4a:25:98:ba:92:1b:db:
                    c8:4f:de:0c:c9:35:64:31:3b:a2:cb:91:48:c7:36:
                    19:6c:ab:af:b0:3a:91:0d:07:6f:9e:87:f4:01:55:
                    65:26:7e:91:93:41:f5:83:55:66:ae:97:dc:f9:3d:
                    c7:22:df:34:34:e7:37:ee:0e:f8:55:b6:e5:e4:a5:
                    21:38:1a:18:23:42:c1:fc:df:11:64:41:91:d8:d2:
                    b4:a4:9a:9d:7b:a7:ef:51:da:f5:0d:b8:28:6c:a2:
                    3f:e5:ae:88:c8:48:e9:ed:ed:63:fe:af:2e:a5:30:
                    96:68:6e:b2:14:c9:5b:16:57:a1:20:70:8c:30:b0:
                    71:43:5b:af:3a:51:fb:5f:38:d8:95:2c:0d:6c:dc:
                    e3:18:89:c8:3f:d4:54:ee:e2:71:3f:34:5f:6c:e6:
                    20:fc:0d:51:51:37:5c:e3:da:df:52:c5:71:27:93:
                    e3:ca:b4:c1:e9:a6:bb:be:36:92:5d:74:b5:68:18:
                    55:2c:1a:b7:eb:bc:67:6d:87:80:83:06:c3:5c:9a:
                    48:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CE:07:E8:21:B2:23:AB:F1:EF:79:EA:60:55:35:9E:BD:AE:48:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff051b77-8649-3e63-b832-0b399062a574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:29:56:f5:59:96:bd:33:44:22:73:69:a5:7a:9b:b8:ca:6f:
         06:ea:68:33:6f:34:be:48:cc:1a:26:3f:c8:b3:e8:20:a2:9e:
         06:3a:05:9a:34:8a:35:ac:ae:7b:51:5d:48:b4:82:52:9b:f4:
         c2:b3:fa:cf:09:11:48:46:7e:00:1b:9b:3e:6f:b6:9d:26:a0:
         0a:b2:bb:21:7b:87:ca:fd:08:92:37:25:01:ea:75:64:bd:ea:
         bb:53:61:1b:6f:de:d1:a2:ff:1a:c0:77:60:3c:c5:66:f8:7d:
         ce:20:b5:37:60:d8:69:d8:31:88:55:65:df:a3:e7:14:3a:e1:
         6b:c1:ac:a9:12:c8:76:8c:e5:cb:8c:d5:93:e7:5e:47:2b:c7:
         55:b5:b7:78:65:8c:07:ed:b0:e7:e8:8e:70:1e:ac:54:16:70:
         a8:61:06:0f:aa:5f:2c:cc:fb:84:d6:3c:ec:37:eb:98:23:05:
         0a:b5:e6:11:42:5d:a0:ce:e3:ee:b4:9d:e6:70:fb:7e:31:50:
         4a:6b:2b:93:81:a0:35:82:84:97:b4:95:b4:e1:ae:f7:4e:8d:
         59:a7:12:54:71:17:1d:8e:a4:36:e7:b2:39:5b:e1:f8:b4:7c:
         24:2d:1b:67:cd:59:3d:f2:a1:f0:22:d3:5b:3e:66:9d:f8:3d:
         36:ac:6d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:35:05 2025 by rpki-client