Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/93dda1db-7582-367f-ad23-f3d4942085de.roa
File:                     93dda1db-7582-367f-ad23-f3d4942085de.roa (raw, json)
Hash identifier:          M82oYOty3vDS56RysMGsUBCxQSwv5u1ZVZ/bchS/JP4=
Subject key identifier:   91:22:9C:46:E0:13:53:74:DA:6F:9E:39:F3:AB:45:65:63:15:5C:1C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584910E16DCC58D0F78A2CBFD100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/93dda1db-7582-367f-ad23-f3d4942085de.roa
Signing time:             Mon 03 Mar 2025 14:00:53 +0000
ROA not before:           Mon 03 Mar 2025 14:00:53 +0000
ROA not after:            Sun 01 Jun 2025 13:00:53 +0000
asID:                     13335
IP address blocks:        172.70.236.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:10:e1:6d:cc:58:d0:f7:8a:2c:bf:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  3 14:00:53 2025 GMT
            Not After : Jun  1 13:00:53 2025 GMT
        Subject: CN=6fb31852-d8cc-4b90-9439-72acb5239c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ff:95:59:81:e1:96:fc:08:ff:c0:0a:27:92:
                    1b:06:46:76:98:c4:52:df:42:50:e6:77:54:75:54:
                    99:0a:47:bc:6d:65:16:c1:9f:c8:32:20:a4:2e:8a:
                    4d:4a:fd:ff:bb:4c:d0:24:09:a9:8e:0c:75:bf:1a:
                    62:f5:6a:26:76:2a:53:70:a0:b5:64:66:01:24:16:
                    52:06:00:e6:4e:35:2e:c6:1f:31:53:e5:a3:53:df:
                    6f:04:09:0c:8b:a5:2b:bb:34:d5:e7:6a:b6:29:5d:
                    7d:08:41:14:b8:26:84:71:3b:dc:90:73:1b:6f:4c:
                    da:80:49:3b:ad:1f:a0:2f:cb:42:78:a4:b3:53:5b:
                    fa:b4:a8:81:50:be:db:50:c5:8a:6a:01:65:1c:4c:
                    c4:af:06:38:47:ab:72:d5:97:55:a1:02:d9:12:fb:
                    6c:e6:84:d6:03:77:21:d6:d7:04:78:80:eb:fe:81:
                    e4:2b:33:16:06:7e:8b:b8:be:dc:ff:fe:4c:61:63:
                    bb:16:96:e1:0b:93:c7:e4:28:82:1f:14:07:1f:b0:
                    2e:b7:3a:d7:e0:f1:2c:97:5a:61:1e:bf:54:ad:79:
                    c8:38:d8:a6:99:11:b2:1b:f9:6b:66:8c:b6:be:da:
                    a4:c2:35:0f:00:64:e0:4b:b8:2e:bb:4a:a6:48:2c:
                    8d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:22:9C:46:E0:13:53:74:DA:6F:9E:39:F3:AB:45:65:63:15:5C:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/93dda1db-7582-367f-ad23-f3d4942085de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:36:a0:a0:96:89:dc:e1:cd:12:f8:a2:61:10:4b:02:d8:53:
         a8:9d:d1:76:99:29:24:0b:da:5c:b8:e2:73:f2:66:a0:b8:bf:
         20:8e:bd:7a:95:de:c3:0c:92:de:48:17:31:90:24:f6:3c:3a:
         58:a9:3d:28:82:62:e2:f8:a5:e7:55:32:b5:1f:34:75:a5:ba:
         07:f7:54:58:fe:86:e2:08:26:ff:90:da:b8:06:3b:47:4a:cb:
         51:35:bd:e7:bc:41:e0:9e:96:9e:2a:ed:26:0b:63:30:b3:be:
         48:64:42:91:e5:d8:da:02:ca:5e:59:f5:1b:35:96:b7:ee:d3:
         75:8e:8d:cb:eb:81:a6:97:81:48:f5:d0:20:91:e3:db:28:98:
         8c:64:62:b1:05:27:cc:d7:5e:cf:76:0b:46:7e:8a:47:29:c7:
         a9:3a:fa:af:30:95:43:3e:b3:6c:4d:0c:c3:b9:74:93:a7:44:
         09:1b:86:c2:c0:0c:f1:c6:ca:6d:79:7d:d3:e2:ab:ac:1d:1d:
         96:dd:73:a5:8e:44:ac:8c:03:5e:4a:c2:64:89:07:eb:d4:13:
         d3:f3:c9:8b:f8:94:7d:2c:3a:d7:61:71:a8:fb:b1:68:b6:b9:
         37:40:f8:38:04:4d:7e:e8:3e:98:31:bc:a2:0d:17:70:0c:4a:
         7d:82:94:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:05 2025 by rpki-client