Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ad2d4ff-7f20-34db-b13f-6ae8fb9b5b83.roa
File:                     9ad2d4ff-7f20-34db-b13f-6ae8fb9b5b83.roa (raw, json)
Hash identifier:          WPEGvuydk/VTTCvYvyxm23/OzZvhei5yXatjhmkAb7c=
Subject key identifier:   BD:26:96:9C:E9:5E:AF:A8:20:DB:4B:85:54:4B:86:69:9D:CC:03:0B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848A1FD97AA10A8E5CD00682480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ad2d4ff-7f20-34db-b13f-6ae8fb9b5b83.roa
Signing time:             Wed 22 Jan 2025 20:42:59 +0000
ROA not before:           Wed 22 Jan 2025 20:42:59 +0000
ROA not after:            Tue 22 Apr 2025 19:42:59 +0000
asID:                     14789
IP address blocks:        172.69.85.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:fd:97:aa:10:a8:e5:cd:00:68:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jan 22 20:42:59 2025 GMT
            Not After : Apr 22 19:42:59 2025 GMT
        Subject: CN=0126d312-70b2-4745-950a-157f0627f9a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b1:ec:d5:27:6a:5f:35:df:f5:b4:3e:79:1f:
                    08:4f:5c:f6:c7:bc:d0:60:90:19:d1:77:90:dd:f2:
                    41:90:a2:e2:2b:5e:47:89:89:76:39:b7:1a:9c:5d:
                    05:a1:8f:80:45:40:ec:fb:e3:0f:79:48:cd:c1:24:
                    b8:81:8b:bd:b1:d6:61:08:36:81:09:4b:3e:6a:19:
                    b6:e6:84:b8:22:71:f7:2b:1f:be:2a:42:a5:66:6a:
                    af:cd:2c:f9:64:af:4c:47:10:cd:91:63:4e:16:e8:
                    e5:27:76:09:7f:24:03:e0:1f:3a:7c:6a:c8:4e:b5:
                    22:0b:4a:80:be:e7:80:d9:12:1b:1b:21:dd:12:b5:
                    6c:b3:ec:5a:03:97:fe:fe:7e:ab:7c:19:15:1b:0f:
                    b9:1e:85:bf:05:f1:a2:fd:87:31:a7:24:69:96:42:
                    77:63:7e:e3:4c:27:e2:34:1b:5e:48:b4:d4:cd:36:
                    c4:8b:0b:6c:1d:47:c1:54:e2:54:4e:da:93:5c:44:
                    5d:e7:89:03:bb:58:e1:e5:2f:72:b8:65:46:45:0d:
                    b5:a9:fd:ac:37:f8:47:45:96:19:f4:75:d8:67:46:
                    22:f1:b3:b9:30:21:b1:63:32:08:82:7c:9d:11:cf:
                    e4:81:2a:11:52:f0:b5:a8:7c:79:85:c1:c0:ae:9d:
                    41:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:26:96:9C:E9:5E:AF:A8:20:DB:4B:85:54:4B:86:69:9D:CC:03:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ad2d4ff-7f20-34db-b13f-6ae8fb9b5b83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:57:19:05:cb:10:f1:7b:e5:1a:77:db:fe:12:14:ab:0f:b0:
         c1:0e:38:50:c5:0d:6f:5d:a4:2e:25:10:69:e7:a0:ce:ef:a9:
         04:20:b3:f9:48:37:6a:25:05:67:2e:26:2d:22:a9:da:b1:2c:
         45:ac:38:b1:b5:67:77:7e:f5:68:b8:1e:5a:90:a8:3f:b9:33:
         f4:6c:7e:da:ad:2d:da:51:62:62:df:99:be:06:8e:b1:c1:d5:
         9f:e3:ef:c9:05:03:90:ba:b3:33:e9:48:74:4a:b8:16:19:55:
         2e:e5:35:dd:72:eb:b5:09:11:50:eb:06:cf:52:c5:7a:8f:bb:
         ec:89:c2:a8:26:1a:1b:50:ee:0a:a2:18:5a:b8:75:50:ba:89:
         cd:87:31:aa:8e:4e:92:24:cf:6f:d5:21:01:66:d0:2a:52:8f:
         a0:b2:09:b4:04:ac:86:6e:d6:fb:5d:b9:2c:00:d0:88:7e:aa:
         97:08:d9:c6:bc:4c:58:5c:27:6a:11:5c:f1:62:1c:b4:7b:ab:
         2c:98:40:18:1d:e6:59:7c:76:ad:30:c8:7a:e0:c1:5d:b6:a4:
         29:d2:91:0a:54:6b:96:c5:0d:38:b5:cd:ea:cc:08:f7:d3:00:
         ee:72:9b:90:f8:37:35:9a:f0:07:d5:45:26:6f:f3:af:e4:5f:
         4f:03:62:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:04 2025 by rpki-client