Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/b72371d5-0193-3c24-ba87-0c8deffa2219.roa
File:                     b72371d5-0193-3c24-ba87-0c8deffa2219.roa (raw, json)
Hash identifier:          uzRbvQajncvaZcTvLF234mVURvuDx8lnIbCwxQqlWYk=
Subject key identifier:   BB:91:C6:58:96:28:80:1F:5C:07:90:4A:BA:44:5B:18:76:7B:7E:DE
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F432858483F8026C9E474868F5A497E00
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/b72371d5-0193-3c24-ba87-0c8deffa2219.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     13414
IP address blocks:        199.16.158.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:26:c9:e4:74:86:8f:5a:49:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=2a87af08-8b4f-48e0-98f2-19d30f04d9e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:09:51:6b:41:94:26:95:cd:ac:7c:28:3c:55:
                    38:2b:85:01:fb:7e:3d:ea:5e:61:ca:c9:22:fb:68:
                    3a:fb:a7:08:2e:a3:21:51:6f:ff:ed:83:ac:c3:9c:
                    e2:37:6a:fe:43:af:8b:5a:a9:0d:c1:25:7a:ab:7f:
                    27:fc:f7:2c:5b:8f:77:22:65:8c:10:dc:27:3b:5e:
                    8d:4b:fc:3f:da:f2:5d:0c:7e:77:91:0f:6f:ba:e6:
                    0d:16:64:2d:f4:83:78:aa:41:e5:74:f8:76:8a:6e:
                    92:b0:a1:bb:99:78:0f:c4:17:9a:6e:26:ca:f0:4d:
                    54:9e:42:4d:ed:79:a6:b1:b1:2a:79:c8:9c:12:e6:
                    4a:d7:d9:84:eb:3e:9b:71:b5:ca:31:e6:61:4e:d2:
                    9b:c1:9d:22:15:7b:9e:d1:b0:31:bd:c3:5d:6e:a5:
                    f8:90:b5:67:1c:4f:48:42:78:35:79:4d:be:ae:16:
                    c9:3d:14:25:f4:b2:14:b5:ac:67:f5:b6:b2:06:6a:
                    58:41:8a:2f:cd:77:17:18:55:d7:b9:3e:b2:54:04:
                    f9:46:6b:bd:74:51:94:e3:0b:79:88:6b:b2:95:b8:
                    86:e5:8b:48:65:6d:f0:8a:54:6c:9a:7a:b7:ed:16:
                    64:6c:37:f5:1c:87:e8:c4:02:4c:f8:29:8a:a3:b6:
                    e5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:91:C6:58:96:28:80:1F:5C:07:90:4A:BA:44:5B:18:76:7B:7E:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/b72371d5-0193-3c24-ba87-0c8deffa2219.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.16.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:76:e0:18:2d:07:01:dd:bc:7e:a8:59:cf:c3:38:af:ce:1e:
         f4:e1:70:7a:6b:bb:41:18:c4:d6:1d:a3:44:78:e7:cd:50:06:
         d9:f0:d1:2e:fc:d2:eb:fe:00:ce:1e:96:e2:41:72:f8:ec:76:
         f3:6c:ce:93:d5:12:c6:ce:cb:16:56:66:8a:28:25:7d:4f:36:
         20:be:69:e6:a8:24:64:ee:1e:0a:82:d8:49:60:5e:11:50:29:
         12:b2:4a:af:fb:61:1b:76:ba:1f:e3:a8:41:fa:80:ea:24:fe:
         e3:3d:78:6d:f5:4f:7d:ce:5d:92:32:14:e3:87:4a:2e:1a:e7:
         64:28:dc:a9:76:a0:23:d9:01:9c:a5:dc:97:16:78:15:9a:8e:
         57:7c:3a:31:69:9d:2d:3b:74:03:21:fa:21:93:6e:26:6f:55:
         6b:a6:1e:84:ea:cd:be:b4:a0:a9:da:94:9a:79:4e:d4:9f:0b:
         9b:56:ef:1a:27:d8:ec:e1:db:42:e9:16:10:9a:c2:82:61:65:
         69:d5:6e:6b:1c:fb:32:b8:34:02:8d:66:70:80:f4:51:77:db:
         65:9d:52:7b:10:58:c9:c0:bb:e9:dc:12:4c:de:85:d2:3c:8b:
         23:a6:9c:fa:d5:d4:43:dc:72:7d:24:ef:16:2d:df:32:d1:d9:
         e3:17:66:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:16:48 2025 by rpki-client