Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71ae16c5-d31e-3798-a172-6d1d107c2749.roa
File:                     71ae16c5-d31e-3798-a172-6d1d107c2749.roa (raw, json)
Hash identifier:          E8Ltip4K5P33tWeyDoXMymMCWV3oC7eE90HcwvAXQ0U=
Subject key identifier:   26:6D:FF:7A:AE:F4:AC:D5:A8:40:A9:35:D5:15:36:64:EE:66:FE:64
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847E62AB6FF39C44D76E8B5A660
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71ae16c5-d31e-3798-a172-6d1d107c2749.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     15169
IP address blocks:        172.217.13.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:b6:ff:39:c4:4d:76:e8:b5:a6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=ee64f00a-27d3-4e1a-a5d5-c2ece57a3056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e7:44:4e:9e:b5:2d:ae:12:ff:8d:58:0a:06:
                    6a:68:f2:13:62:df:63:f3:4a:2c:93:6c:6a:7d:68:
                    a5:b1:f7:4a:25:10:82:eb:d3:b3:5a:a8:32:f7:46:
                    8f:2d:82:34:67:a8:75:a0:07:0e:66:56:14:bc:95:
                    7a:f7:66:0a:b8:46:86:84:2c:c4:75:10:cf:f1:ac:
                    89:78:fa:0f:57:2c:6a:49:94:6c:93:99:ff:fb:32:
                    20:98:8c:f0:95:44:eb:57:96:0b:46:36:3c:0d:13:
                    e2:76:56:ac:9a:d7:3d:97:d7:9e:18:f2:7d:e5:28:
                    9c:73:6e:73:8f:4e:71:d1:e1:4b:20:2f:33:31:ee:
                    f1:2e:3a:87:9d:f5:09:a9:9f:19:09:7b:11:43:c5:
                    be:5a:d0:75:90:5b:84:dc:d7:ec:9b:29:21:cf:0c:
                    81:35:32:1e:de:c0:10:03:48:e5:66:24:2e:4c:04:
                    06:a6:a0:03:fc:30:3e:35:fa:75:12:16:06:2f:8c:
                    67:d9:e1:88:25:73:64:b0:c8:fe:ca:f0:7e:58:69:
                    06:66:af:36:df:48:4f:85:2a:43:2d:75:8b:4d:64:
                    de:26:1f:4e:f6:b0:73:aa:2f:f3:e8:5a:95:01:a3:
                    64:fe:ea:f3:eb:a8:3e:62:88:16:c6:74:d0:44:87:
                    76:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6D:FF:7A:AE:F4:AC:D5:A8:40:A9:35:D5:15:36:64:EE:66:FE:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71ae16c5-d31e-3798-a172-6d1d107c2749.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:b7:72:68:ca:d2:c9:ef:57:9a:b7:c7:ac:55:e1:66:be:07:
         89:40:b5:78:5f:cb:55:5c:e4:e6:1c:bb:39:9d:4c:69:a5:a6:
         ae:64:5b:de:83:c3:0b:eb:1a:51:94:65:d6:57:34:3d:69:06:
         27:f4:54:43:77:88:7a:1c:f3:ab:c4:51:b9:9a:cd:33:ca:c7:
         7a:62:1a:fd:88:bd:d6:65:b4:1c:2f:41:31:9a:ac:11:35:47:
         6a:7a:c2:f2:f2:e5:f1:39:1c:6e:c1:9d:f9:4d:69:c4:32:54:
         33:de:4c:1a:86:9c:bd:9c:1c:30:20:41:bb:a0:d6:65:51:9a:
         71:8f:dc:bf:f3:69:d7:66:a9:6d:bd:9e:e7:22:6e:53:08:ff:
         c2:d3:17:2e:c1:5a:dd:19:8e:d0:85:f0:60:e0:4c:3b:5f:05:
         30:a9:9a:1e:98:23:8e:e7:0b:ce:c1:c5:f9:0f:f0:e6:cc:73:
         9a:d5:5e:21:0b:74:27:e5:dc:7a:fd:56:4f:5e:82:6d:5a:e3:
         d0:68:cf:c4:cc:7a:47:5f:92:8d:6b:76:a7:1f:f7:91:fe:cc:
         72:78:0b:c5:05:a5:36:12:f0:c8:c9:ad:57:b3:8f:cc:94:ab:
         d2:6c:ff:d7:19:c9:75:0a:07:7f:88:15:b9:92:10:a0:df:fd:
         ba:0e:ec:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:36:17 2025 by rpki-client