Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/79877f29-3a60-3151-a535-a7fef5bf045c.roa
File:                     79877f29-3a60-3151-a535-a7fef5bf045c.roa (raw, json)
Hash identifier:          SyHlX0B6c5HvCnVEKWJY0vNGi9jKh/vHLMR3FgxF/T0=
Subject key identifier:   66:41:97:83:75:A1:FA:89:86:DD:AA:BB:99:B2:51:D4:95:AD:EA:89
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858490B4C0D342E87CA3F86206340
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/79877f29-3a60-3151-a535-a7fef5bf045c.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        172.69.194.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:0d:34:2e:87:ca:3f:86:20:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=e4383af7-2c31-479a-aecb-6e1947e32538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:68:39:7f:7b:57:bd:7b:4d:b2:64:ed:57:df:
                    c0:fc:bb:89:80:49:08:31:86:db:f0:c2:a0:bf:ac:
                    d2:73:f9:4f:76:c0:19:ae:4a:dd:f8:68:73:eb:2f:
                    03:42:d3:8c:fa:af:f2:13:4a:62:24:4d:26:7a:46:
                    ad:cf:40:89:d7:f9:54:ec:97:5b:4f:3f:af:90:96:
                    6d:46:a9:8a:4d:39:7e:24:ee:cd:b8:b1:72:5e:97:
                    f2:92:99:58:1b:17:d6:ba:39:6e:6c:84:44:6d:26:
                    18:d3:0e:ba:c1:58:d8:aa:dc:d3:b1:ee:68:63:cc:
                    a9:aa:c8:da:a3:ab:85:c8:91:bc:5e:85:3e:b7:a7:
                    f6:f3:c3:28:04:4b:14:b4:a2:32:82:26:b1:ad:be:
                    51:b0:72:9b:3b:63:f9:6a:96:39:3d:c4:04:ca:79:
                    eb:92:a1:8f:5d:44:ad:ec:3b:49:97:10:21:aa:bd:
                    95:10:27:e2:dc:90:e4:8e:72:4b:ef:b0:89:46:6a:
                    57:b0:50:9f:75:4f:3d:c9:d9:ba:82:84:7e:18:5a:
                    87:8c:19:b5:60:11:e4:99:ff:57:99:2e:30:a9:39:
                    8c:1f:9d:58:2b:f9:33:20:9c:f8:0c:b4:81:a4:80:
                    72:6e:e8:42:a8:91:57:7f:17:63:fb:d1:c8:32:2f:
                    3b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:41:97:83:75:A1:FA:89:86:DD:AA:BB:99:B2:51:D4:95:AD:EA:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/79877f29-3a60-3151-a535-a7fef5bf045c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:1c:ae:7f:a3:51:79:4b:8d:2b:35:a8:a1:05:09:d3:5c:7b:
         6f:e0:ab:22:70:73:45:48:d7:22:8b:e4:c2:2a:32:e8:2d:fd:
         d3:71:d0:d3:b6:e3:f5:8b:00:54:1f:07:c8:15:ce:9e:ba:a5:
         da:03:8c:7d:ac:af:7e:04:88:9d:b8:3f:d2:4d:df:b1:ba:c5:
         c4:ef:2b:92:e2:3c:26:c2:52:17:a2:a0:f2:0c:89:b5:78:3c:
         ad:3f:89:65:a6:76:c8:f2:ce:90:1c:76:0d:4d:2b:6b:0e:be:
         c7:c5:77:6d:a5:89:9d:c7:f7:5a:ae:1e:f2:62:21:98:e4:ab:
         b9:4c:1c:3d:4a:fd:a0:90:47:8d:db:d9:1c:9d:0c:89:b8:84:
         e6:f4:be:1a:d2:25:f9:fe:1b:8f:e6:43:e2:8d:37:89:81:ce:
         ff:83:75:23:a1:50:7a:33:4d:5d:1f:bd:83:cd:34:91:ec:ee:
         41:5d:43:3e:9b:d2:ce:57:78:c7:1e:14:ce:c6:ae:02:4b:bd:
         fd:26:44:5f:f0:c4:d1:1f:5e:86:a3:7d:1b:98:1b:4a:62:7b:
         e8:46:3f:a8:d9:c5:a8:b5:c1:cd:80:99:50:bd:c0:4f:0a:4f:
         25:df:90:9c:96:1f:06:eb:56:1f:e2:16:d3:9f:f2:35:ac:8b:
         84:c2:18:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:48 2025 by rpki-client