Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/555d125d-f376-3387-ab81-1586334e83a8.roa
File:                     555d125d-f376-3387-ab81-1586334e83a8.roa (raw, json)
Hash identifier:          7ltiKo3KqpH6fIFFrvOJ5euksGNWjbNnfNKsTn2H8Y0=
Subject key identifier:   BF:75:39:B2:99:4C:75:7E:A1:C5:07:C2:1F:19:F4:90:C2:E9:37:1A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858490881918E1E1CC9DBE381B080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/555d125d-f376-3387-ab81-1586334e83a8.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        172.68.60.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:91:8e:1e:1c:c9:db:e3:81:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=addb9d6c-928a-46cb-8f5a-7e19e578a928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d4:ea:38:14:fc:26:ec:2a:a2:d1:44:ea:5d:
                    5c:5f:6b:db:84:68:df:5a:28:c3:64:9b:d5:a8:fc:
                    2b:6b:24:bf:da:ca:ef:3a:bd:c3:7f:23:16:fc:d2:
                    1d:a0:26:c3:a4:50:ab:d5:61:78:b3:56:45:d1:79:
                    69:79:6d:e9:cc:91:bf:34:02:91:fa:ed:43:90:1e:
                    4d:ee:99:be:a9:de:b0:63:c2:ef:9a:70:63:74:c2:
                    99:f2:e1:14:8a:66:8f:0a:a3:16:69:cc:c6:fc:df:
                    a8:b1:11:fb:bb:cc:d7:ba:4d:96:f0:0a:18:c0:33:
                    66:a9:43:82:d3:04:08:1f:87:e1:5b:bc:5b:ba:fc:
                    1f:a0:3b:cc:e6:b5:0a:fe:da:99:00:ce:42:a4:ec:
                    6e:ca:7e:96:80:20:67:fb:c7:a9:47:73:6a:6d:03:
                    83:a9:e4:89:ad:d5:82:63:92:ec:7f:75:4e:b3:2e:
                    ab:9b:62:9e:3b:5f:20:b4:dd:eb:9a:a2:d3:1f:7e:
                    3a:5e:a5:b9:6d:a3:ce:7e:58:d3:bd:89:f2:24:12:
                    92:ce:da:71:a0:bb:64:d9:8a:02:df:29:d8:72:c5:
                    93:f0:a9:c0:91:e9:47:bb:9c:50:af:3a:ff:b1:30:
                    01:ed:21:d8:d7:f6:39:37:0d:b3:85:b0:6b:5f:1a:
                    6a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:75:39:B2:99:4C:75:7E:A1:C5:07:C2:1F:19:F4:90:C2:E9:37:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/555d125d-f376-3387-ab81-1586334e83a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ed:a3:bc:aa:d8:5a:07:f5:e1:52:22:56:e0:46:a4:1b:97:
         f5:a2:93:be:1f:e8:5b:3c:d1:d7:ec:63:48:29:aa:6b:21:72:
         44:24:9e:63:06:4c:0a:d3:26:95:5a:e1:b0:b0:0e:e7:3b:20:
         10:4c:e2:8a:04:f1:5f:84:63:ec:27:10:1b:f6:af:2f:50:2c:
         8d:c2:5a:e2:68:c1:71:dc:55:6c:7b:f8:27:7a:fb:79:9a:92:
         40:f3:2c:b8:2b:df:de:05:f4:6f:9b:cc:74:66:16:c3:f7:9d:
         37:5e:f9:09:08:a8:40:0f:a5:b6:56:97:3b:a9:15:97:c6:37:
         08:14:ad:61:09:00:ef:e7:de:a4:cd:82:db:6d:03:d1:65:4c:
         ed:d5:56:eb:c7:2e:be:5d:25:e4:81:c9:da:47:91:46:e4:52:
         30:2e:16:dc:e7:18:25:4c:a0:c0:88:b1:01:91:e8:c4:f9:ab:
         03:5f:6e:47:5d:7d:8c:32:72:f4:21:22:ef:63:51:7f:bc:35:
         2b:e8:f5:11:f9:d6:29:5f:e9:2e:85:ac:67:68:65:97:8d:b7:
         99:5e:30:06:e1:4a:17:41:c3:31:65:26:c2:39:46:0b:0c:3e:
         dd:5a:ce:c0:2a:f0:e4:62:e0:3e:6e:96:27:ce:e1:c4:f4:64:
         12:86:df:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgZGOHhzJ2+OBsIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk
YWRkYjlkNmMtOTI4YS00NmNiLThmNWEtN2UxOWU1NzhhOTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9TqOBT8JuwqotFE6l1cX2vbhGjfWijDZJvV
qPwrayS/2srvOr3DfyMW/NIdoCbDpFCr1WF4s1ZF0XlpeW3pzJG/NAKR+u1DkB5N
7pm+qd6wY8LvmnBjdMKZ8uEUimaPCqMWaczG/N+osRH7u8zXuk2W8AoYwDNmqUOC
0wQIH4fhW7xbuvwfoDvM5rUK/tqZAM5CpOxuyn6WgCBn+8epR3NqbQODqeSJrdWC
Y5Lsf3VOsy6rm2KeO18gtN3rmqLTH346XqW5baPOfljTvYnyJBKSztpxoLtk2YoC
3ynYcsWT8KnAkelHu5xQrzr/sTAB7SHY1/Y5Nw2zhbBrXxpqpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL91ObKZTHV+ocUHwh8Z9JDC6TcaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTU1ZDEyNWQtZjM3Ni0z
Mzg3LWFiODEtMTU4NjMzNGU4M2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEQ8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA7to7yq2FoH9eFSIlbgRqQbl/Wik74f6Fs80dfsY0gpqmshckQknmMG
TArTJpVa4bCwDuc7IBBM4ooE8V+EY+wnEBv2ry9QLI3CWuJowXHcVWx7+Cd6+3ma
kkDzLLgr394F9G+bzHRmFsP3nTde+QkIqEAPpbZWlzupFZfGNwgUrWEJAO/n3qTN
gtttA9FlTO3VVuvHLr5dJeSBydpHkUbkUjAuFtznGCVMoMCIsQGR6MT5qwNfbkdd
fYwycvQhIu9jUX+8NSvo9RH51ilf6S6FrGdoZZeNt5leMAbhShdBwzFlJsI5RgsM
Pt1azsAq8ORi4D5ulifO4cT0ZBKG3+I=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:09:25 2025 by rpki-client