Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cec2e359-1c23-30f6-8a83-2be8581e0783.roa
File:                     cec2e359-1c23-30f6-8a83-2be8581e0783.roa (raw, json)
Hash identifier:          eet2waOpSwXLtVFIQjUv2FPxsafL2xhqnnDGYKaztSU=
Subject key identifier:   33:93:EB:EA:19:CE:BE:13:60:4A:B8:0B:19:2B:99:D9:54:1F:2E:48
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584910E176DC822E7A42D7767300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cec2e359-1c23-30f6-8a83-2be8581e0783.roa
Signing time:             Mon 03 Mar 2025 14:00:53 +0000
ROA not before:           Mon 03 Mar 2025 14:00:53 +0000
ROA not after:            Sun 01 Jun 2025 13:00:53 +0000
asID:                     13335
IP address blocks:        172.71.250.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:10:e1:76:dc:82:2e:7a:42:d7:76:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  3 14:00:53 2025 GMT
            Not After : Jun  1 13:00:53 2025 GMT
        Subject: CN=1701daea-b90d-4a7c-9a53-acc0086efc60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ac:d4:66:39:3b:fb:63:49:06:04:1c:7b:e8:
                    c1:91:29:9c:b3:72:01:a7:9f:64:60:c6:40:a8:ba:
                    3e:84:ce:b8:d7:c5:43:99:63:55:12:4b:63:1f:9a:
                    07:a1:bf:3e:0e:15:f4:eb:d7:77:a4:f9:0c:c5:eb:
                    eb:80:3b:c2:cf:3a:83:de:13:a2:b8:2f:1c:85:0b:
                    61:d0:30:1d:d1:1a:92:d0:87:a7:c0:68:cc:a2:10:
                    8a:20:7a:8a:a3:05:23:59:3c:55:6e:6a:07:3a:f1:
                    b1:42:5a:8d:9f:17:52:a9:51:bc:91:30:ac:19:69:
                    05:98:49:99:45:71:c3:7e:65:06:bb:c2:78:7b:31:
                    b5:37:e2:00:b7:49:5d:14:6e:1b:e2:27:37:16:db:
                    8d:27:b1:d2:e4:36:d2:1d:b8:3c:70:57:6a:a9:01:
                    e4:a2:f9:7e:e3:8b:5a:ef:eb:03:08:50:dc:74:34:
                    fd:79:65:5e:9e:2a:46:c9:2c:00:a1:47:c3:0b:05:
                    47:0b:81:8d:30:9a:10:ed:2a:80:44:8f:f3:1e:54:
                    d0:32:2a:e6:4d:bf:9b:56:d4:82:93:42:e2:3f:af:
                    ab:f1:87:e2:dc:09:57:01:39:ba:da:18:29:96:fc:
                    b7:c0:98:23:cd:c8:39:a8:2f:e9:73:b8:97:c4:6c:
                    53:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:93:EB:EA:19:CE:BE:13:60:4A:B8:0B:19:2B:99:D9:54:1F:2E:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cec2e359-1c23-30f6-8a83-2be8581e0783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.71.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:43:e7:61:82:52:40:b7:97:c5:c9:cd:3b:91:9f:55:a9:4f:
         dd:73:ab:c1:6d:f4:43:3b:13:5f:2d:21:ed:30:b6:0e:0e:d5:
         9d:9e:d4:a7:81:02:ef:c3:e7:f7:79:ba:c2:cd:a7:3d:87:73:
         34:e9:68:cf:bf:df:d3:9b:1d:36:f6:43:93:13:c9:a3:e5:ba:
         e1:7a:76:08:53:40:1b:f0:34:c5:5e:5e:4c:3f:5d:0e:94:6f:
         47:0d:68:75:ce:d4:4f:74:77:39:9b:74:3f:dc:09:f7:b6:89:
         4c:a0:7f:5f:ed:4c:d4:d6:5b:ac:91:33:5d:26:ab:b1:93:b0:
         d3:fc:f1:04:1d:b0:b2:4a:7d:f8:e1:8c:b7:ca:b7:99:91:c8:
         95:71:b7:50:5b:ab:73:0c:93:c2:7a:e7:3a:85:2e:9d:ca:7c:
         20:c5:f6:7f:54:dd:64:92:c1:1f:5f:6f:f9:27:24:82:41:a1:
         ef:36:af:e9:69:f2:2b:69:57:19:a7:20:c5:11:f2:b0:dd:2e:
         6b:53:bd:91:1b:73:6d:f8:d4:29:ca:a7:a6:46:3d:51:2a:eb:
         9a:1c:f8:8e:55:e0:3c:83:38:9b:37:4c:01:8d:b3:3a:e3:f4:
         4a:33:9f:f2:c7:65:8e:9a:ba:b3:84:19:65:d8:df:e4:12:a6:
         cc:ba:38:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:49:09 2025 by rpki-client