Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9346992-f358-3044-b41e-e5b433a129f8.roa
File:                     c9346992-f358-3044-b41e-e5b433a129f8.roa (raw, json)
Hash identifier:          O6serOMwwZ/zQWbn3vu3hayHhRJs7BvuZwknQpcr2uE=
Subject key identifier:   BF:8F:62:C7:94:EE:65:D9:5E:DF:D0:E3:11:C0:94:9A:01:61:AF:A4
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849071BF7728B425D9BE2BBB9A8
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9346992-f358-3044-b41e-e5b433a129f8.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        172.71.222.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:f7:72:8b:42:5d:9b:e2:bb:b9:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=ad47794d-ee7d-4760-803d-feea4ee8e98a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:26:bc:64:0f:05:ff:e3:12:f5:7a:50:aa:9e:
                    a1:f0:1e:44:b5:75:48:d6:18:4b:6d:82:a0:d4:a4:
                    06:e3:46:2c:20:63:17:af:fe:f0:e6:8d:b2:37:52:
                    f8:5a:0e:02:44:6f:b7:01:60:32:7c:ba:27:13:84:
                    d9:d6:25:88:a7:28:bb:6f:19:b3:ae:1a:1f:1e:73:
                    61:2c:6e:f6:88:de:4b:27:eb:4e:f0:80:03:fc:53:
                    78:bf:08:f1:76:54:64:df:85:cf:25:2a:81:db:ba:
                    c2:7c:1f:c5:e2:8b:c6:c2:90:52:f1:80:12:6f:bd:
                    30:e8:5e:bc:99:76:4d:58:2d:7b:db:24:37:b5:fa:
                    9f:63:35:8d:0e:53:4a:29:04:b9:5f:cc:77:83:cf:
                    2e:e7:f9:a7:28:0c:5d:ef:21:ec:8a:d7:e1:dc:10:
                    ca:a9:be:f9:04:3f:0b:51:49:65:2b:8d:10:a5:7c:
                    f6:f1:39:ff:73:8b:8d:78:3d:d3:5e:ce:56:cd:14:
                    ef:10:8a:a4:cd:8f:21:37:65:e1:cf:95:c3:dd:a3:
                    8f:ce:d1:1f:c5:7f:f2:32:95:1a:93:17:3f:16:0a:
                    ba:a7:81:61:48:a9:cd:8f:ef:78:12:38:14:f7:f7:
                    23:97:c5:4f:9f:f4:4e:0e:13:ec:22:5c:01:87:31:
                    35:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8F:62:C7:94:EE:65:D9:5E:DF:D0:E3:11:C0:94:9A:01:61:AF:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9346992-f358-3044-b41e-e5b433a129f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:62:88:7d:e1:5a:14:30:68:7f:a8:1b:5d:43:33:d6:a0:6e:
         f9:9f:6c:cf:ee:8a:c9:7f:36:69:01:79:aa:a4:22:a1:70:72:
         11:01:bf:1f:27:b5:7a:aa:e9:24:1e:29:4e:3c:0d:83:76:32:
         36:eb:ed:55:96:94:61:97:f5:77:9e:04:5f:d9:a2:37:9c:e2:
         ab:4d:b2:d1:41:b9:af:fb:dc:24:45:8c:fb:43:c6:84:1d:b7:
         cb:95:36:91:da:d7:e8:a5:68:30:85:87:87:cf:88:23:34:31:
         c4:52:1b:36:ec:40:25:34:c5:d8:b4:6e:fa:34:64:6a:41:5b:
         78:2e:08:8a:89:d1:e5:48:a5:1a:23:7c:d4:20:e5:a3:c0:33:
         a2:e5:bf:cc:79:72:ad:2a:44:57:1e:d0:2a:cf:97:3e:b0:9e:
         dc:54:e5:fe:11:80:dd:06:23:22:75:c4:8f:dc:dc:da:c5:2f:
         88:e2:fc:b9:a1:78:2e:8a:61:6d:2e:bb:86:3f:de:62:19:ad:
         33:f8:20:c8:c2:85:bd:bd:24:ab:34:5f:82:ab:99:07:e3:7a:
         5d:d3:17:05:44:e8:24:b9:e5:71:6d:ad:92:42:4f:c1:07:31:
         22:45:bf:bf:3f:d1:89:06:b0:ba:42:b1:ed:7e:e9:7a:29:0a:
         7d:a8:7a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:27:58 2025 by rpki-client