Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/27822e64-c2b3-36a0-ae8b-ce1130a700db.roa
File:                     27822e64-c2b3-36a0-ae8b-ce1130a700db.roa (raw, json)
Hash identifier:          f5U8WMvMEihQkaNHATBSpXkTmhgsh46yltexTgxs53M=
Subject key identifier:   82:70:A8:5E:0E:C9:CA:54:6E:5D:DF:2A:3A:E4:DE:38:F9:61:00:04
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584908817F9B47556A6EB896C800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/27822e64-c2b3-36a0-ae8b-ce1130a700db.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        162.158.128.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:7f:9b:47:55:6a:6e:b8:96:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=ed72a021-7ca5-49e6-9096-515c64144f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9a:1b:91:e5:24:fd:36:e0:6f:5f:31:f8:75:
                    07:bd:cc:ef:e3:61:6b:25:58:49:cb:d7:df:e8:44:
                    a1:83:d4:8a:ad:fc:24:0c:47:fd:56:05:52:9a:1d:
                    56:7a:fe:fc:c4:43:be:29:32:f2:c2:64:3f:5c:57:
                    f5:50:ee:21:e5:16:25:5c:c7:41:d8:ee:e3:19:24:
                    a1:8f:b6:54:d3:61:1d:98:2d:f8:7c:4c:64:81:16:
                    eb:04:e8:c9:84:d1:a0:dd:20:83:5a:ab:2a:90:cc:
                    b7:95:c9:5d:f1:ac:2d:07:f1:2e:57:4c:de:71:ec:
                    a1:35:5c:2c:76:94:ca:a4:e7:d4:d1:21:16:d8:ba:
                    8d:c8:06:77:80:ca:37:ba:f6:1f:49:3e:db:2b:72:
                    e0:e3:45:26:ab:98:44:4f:ba:02:07:3e:b3:4e:95:
                    05:57:32:72:f3:5c:df:86:22:36:4d:c5:79:43:4b:
                    40:cc:66:c2:37:37:d7:b5:7e:f8:8c:4d:33:5b:9e:
                    1d:a0:8d:93:16:62:fd:bb:b7:3f:21:f1:c8:65:c7:
                    a8:29:71:67:76:64:55:ed:eb:f2:0c:94:dc:08:66:
                    92:56:de:63:a4:a0:18:06:5a:ae:b5:e5:cc:e8:ff:
                    3a:1b:a0:6d:42:ee:cb:d6:6a:5f:26:31:c6:85:d9:
                    c5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:70:A8:5E:0E:C9:CA:54:6E:5D:DF:2A:3A:E4:DE:38:F9:61:00:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/27822e64-c2b3-36a0-ae8b-ce1130a700db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:35:85:cb:b9:7c:68:4e:4a:a0:41:79:a0:3f:40:d9:df:da:
         20:2f:6d:78:55:55:35:1f:d5:6c:d7:90:de:b3:62:7d:02:18:
         4e:44:64:0e:4d:0c:c1:da:24:09:56:e7:7e:9b:e2:a5:a9:21:
         2c:1c:ee:4f:f5:ea:06:6a:8f:0f:cd:af:4a:c1:bd:b7:53:35:
         00:6b:2d:82:5c:68:9c:5a:a5:aa:1e:af:a7:51:4d:54:9c:c7:
         2a:ca:61:89:d4:90:49:d0:a6:6b:d3:e6:4b:68:9d:0c:5a:4b:
         ed:06:74:35:40:05:b8:6c:45:ac:ed:f0:3e:40:fa:8a:ab:5c:
         f3:e0:41:ff:cd:fc:32:e4:37:bb:f9:6a:a7:48:1f:bc:ea:d0:
         20:4a:06:5f:92:aa:66:bf:91:b3:1c:9a:bd:c3:a9:b3:4a:71:
         61:7b:48:72:64:63:b8:e5:a0:7a:7a:c8:a3:70:87:5c:24:ac:
         da:9c:2b:f3:ff:c0:2c:9e:f5:39:94:f7:e6:9b:4e:97:64:9f:
         8f:2f:55:eb:30:22:08:78:66:94:b6:cd:0d:ea:7d:00:04:1b:
         0d:2d:70:7d:1f:29:55:94:d3:d7:f9:1d:d0:7f:d1:42:2a:a9:
         72:a6:59:9e:b0:1e:e7:a4:41:c6:1d:31:96:08:78:54:27:55:
         fb:0d:3c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:54:31 2025 by rpki-client