Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/adb6b5c5-9f32-3fda-bf50-fa62db788566.roa
File:                     adb6b5c5-9f32-3fda-bf50-fa62db788566.roa (raw, json)
Hash identifier:          hZkKVsABYTd9+f7UPUSXUeneChY8cZY2xgyZNbk5V2I=
Subject key identifier:   B3:75:E6:3F:6C:8C:9D:3B:72:EB:F6:64:D1:60:B5:EC:A3:57:D1:C4
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584908818626E603B9E18D282380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/adb6b5c5-9f32-3fda-bf50-fa62db788566.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        162.158.252.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:86:26:e6:03:b9:e1:8d:28:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=9993009b-7627-42c0-a9ee-3b7d3d8d0d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b8:48:ba:7a:c7:7d:0f:e3:d2:d0:f6:93:d1:
                    a4:13:c4:9c:e0:00:b5:a3:8e:3a:37:06:60:0e:77:
                    47:4d:a8:a3:53:19:f3:b1:84:1b:5e:ed:c6:31:29:
                    5c:be:b8:c1:cc:6a:2b:96:07:dc:98:ab:e1:37:75:
                    df:1f:d4:ec:ea:2c:2d:d3:5a:09:d0:7a:a8:16:b0:
                    7d:90:c6:47:38:97:a0:37:7b:c4:5c:3d:8f:91:44:
                    89:2c:a9:28:26:23:11:a8:1d:12:e5:e6:1c:17:85:
                    1f:aa:40:97:a6:b2:1f:76:18:53:e6:ec:81:33:e7:
                    45:13:fe:21:bb:63:9a:3a:ca:50:bd:25:67:a6:24:
                    3a:7c:9a:79:4e:ef:5e:9e:cb:e4:35:8e:d6:92:ca:
                    6e:e7:4b:9c:17:9b:37:21:5a:a9:bb:a0:91:6d:dc:
                    59:e2:05:98:8c:2c:b9:44:7b:b0:61:75:61:52:81:
                    33:51:ba:63:b1:c2:ac:27:d3:58:0f:02:18:1f:2a:
                    f3:1d:df:16:39:e3:e2:55:26:9f:10:63:50:ea:e3:
                    9a:f7:91:80:3a:49:e4:e1:21:e5:19:47:e8:7a:c7:
                    71:c8:27:7f:08:d5:17:26:e1:39:79:0f:58:d2:32:
                    77:cd:e8:8b:72:4e:0e:1d:87:7f:83:f7:3c:cb:b9:
                    ed:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:75:E6:3F:6C:8C:9D:3B:72:EB:F6:64:D1:60:B5:EC:A3:57:D1:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/adb6b5c5-9f32-3fda-bf50-fa62db788566.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:45:99:a5:bb:6d:ca:37:2e:ee:80:f5:3f:56:80:49:07:09:
         12:24:07:2c:a8:a6:fd:cc:39:02:33:60:d5:44:b0:f6:41:8d:
         5e:8b:7b:d4:2c:eb:91:7b:0f:e1:1e:5b:11:6f:f9:d2:82:17:
         ce:53:a7:5f:cc:fc:47:b3:d3:52:b6:28:09:85:05:2a:6e:6f:
         ce:76:69:75:79:34:88:6d:30:6d:50:f5:77:8f:87:4b:9b:77:
         20:59:c9:2e:7e:cb:eb:15:63:ca:8d:d4:7b:ed:4f:09:5c:94:
         4b:f1:6c:74:5e:73:7a:c5:78:9b:da:38:b8:7e:84:62:d3:65:
         d7:8d:d6:7d:90:4c:ce:ac:a1:af:f6:08:f0:f3:88:ce:3c:1b:
         64:75:3b:45:9f:b2:36:11:79:00:81:cc:f5:ac:ec:66:c8:2b:
         3c:fc:6d:22:ba:ae:50:4b:70:70:67:74:39:ea:32:0f:28:c7:
         a0:bb:f4:34:1c:df:86:e4:31:bc:ef:95:f6:3d:25:a8:dd:d4:
         2b:f7:fd:45:4d:e6:d5:0d:47:13:18:de:17:ae:83:a6:0e:61:
         6d:6e:bc:8e:55:d5:98:b6:16:87:3f:38:95:24:57:83:2f:18:
         12:94:f4:69:5a:c9:d9:db:44:16:43:42:f0:9e:cf:23:fd:6b:
         e2:89:49:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:38:50 2025 by rpki-client