Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/739cb2eb-ca24-399c-85db-18d70631fa3f.roa
File:                     739cb2eb-ca24-399c-85db-18d70631fa3f.roa (raw, json)
Hash identifier:          MzWU96O4lL+dX9llC6rzZBJ5vH8JzzhBI0suIiyH05E=
Subject key identifier:   99:AF:E0:08:9B:7D:75:12:52:5B:43:DC:F7:91:2D:25:41:70:46:A1
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584908818F7BEC63CBA36B1934C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/739cb2eb-ca24-399c-85db-18d70631fa3f.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        172.68.13.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:8f:7b:ec:63:cb:a3:6b:19:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=7419f8f7-3010-4752-ba70-e0cd4cf56774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:af:1f:b0:93:e4:3d:3c:ef:82:79:71:b1:82:
                    60:52:cd:04:6e:8c:60:58:c8:e9:b8:43:40:4c:5c:
                    97:ff:f9:7d:f0:03:eb:b9:94:3a:7f:50:39:af:ea:
                    fd:29:19:29:e3:08:56:71:1c:40:12:cc:62:4a:61:
                    bb:b0:7d:d3:56:08:14:56:84:a5:c2:a5:e8:97:a7:
                    8d:55:90:31:73:cc:ff:84:f9:d6:9c:bc:c7:9a:1f:
                    ce:93:8d:52:bd:8f:0a:2e:fd:62:10:85:3a:30:bd:
                    37:7b:d2:6b:88:12:4d:ec:4c:ac:b2:9c:16:3f:2c:
                    26:aa:12:cf:42:5e:b5:06:a5:58:36:b5:a9:c5:2e:
                    97:c8:27:1f:7c:17:a5:72:5b:2c:2d:4e:9c:42:0e:
                    fb:1e:89:6b:94:18:d4:51:21:d0:b5:33:a9:e5:80:
                    71:c1:8a:83:e3:ce:0e:85:4a:8f:c0:c6:58:bd:45:
                    5c:86:33:12:53:dc:36:0a:78:5c:d7:2c:13:0f:59:
                    19:70:65:e9:5b:f1:7a:19:ff:67:25:b2:30:de:58:
                    c7:6e:0c:b7:67:6f:1f:fe:a8:c9:c7:75:76:f1:33:
                    86:c1:98:f5:73:c4:37:c4:e8:80:ce:6d:22:df:97:
                    31:ef:82:3f:f4:ef:49:93:10:d1:c6:c6:2b:16:96:
                    4f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AF:E0:08:9B:7D:75:12:52:5B:43:DC:F7:91:2D:25:41:70:46:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/739cb2eb-ca24-399c-85db-18d70631fa3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ad:ab:cc:d8:42:47:8f:49:bf:40:78:45:ca:77:80:78:b4:
         56:af:ea:53:e3:ec:15:fd:e5:5e:4a:b9:9b:1b:98:23:2f:e5:
         70:e5:b4:81:d7:13:1b:d8:a0:af:d5:5a:21:42:39:2a:18:a0:
         a1:72:0a:7b:58:12:43:83:96:21:5d:ef:2f:54:0d:18:23:df:
         71:4c:a4:cb:72:89:f8:b2:18:64:35:77:7f:42:d0:72:52:2c:
         9a:48:ae:f9:b2:1b:bf:fc:fc:1a:9b:94:db:48:04:4c:20:f3:
         8c:d6:d0:6b:e1:d3:02:8f:25:3e:27:87:7e:84:e1:94:6c:d8:
         75:ac:0f:32:60:85:59:3c:b7:3b:c2:f5:03:55:c6:8e:57:80:
         08:5c:d7:ac:79:24:08:17:1f:c2:cd:05:6d:66:dd:86:31:7b:
         09:7d:3d:5c:7d:71:96:58:41:09:e2:be:80:74:62:bc:fe:56:
         fb:a1:32:20:59:5c:dc:c0:a1:20:bf:e5:13:4f:33:ee:f2:07:
         b2:11:9d:07:c2:3a:4e:6c:83:c8:c4:ec:2d:cc:fd:e3:dd:38:
         08:8c:bf:46:e0:1b:3c:e9:1f:d5:9a:6b:db:ca:a5:aa:7a:e7:
         7d:75:63:cb:dc:ad:2a:73:b3:e3:0e:1d:d6:f7:d4:37:48:46:
         29:5f:1a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:05 2025 by rpki-client