Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbc3d250-01d9-3b52-8510-66a53acb449e.roa
File:                     dbc3d250-01d9-3b52-8510-66a53acb449e.roa (raw, json)
Hash identifier:          nRiTuUKeYO13Fd8fNa0FZXiO8wyYPPJ4pwg6MQyjpeg=
Subject key identifier:   79:5C:86:11:AD:FE:79:35:65:FE:90:B9:70:83:FF:1B:EC:09:47:F9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849071BF6B333BC3174C76628C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbc3d250-01d9-3b52-8510-66a53acb449e.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        172.70.135.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:f6:b3:33:bc:31:74:c7:66:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=f61723c8-1c8d-453b-af4a-23989d0dc0ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:d7:d8:4e:63:b8:8f:36:10:04:88:a0:9c:
                    ec:84:3b:4f:e9:af:68:3e:14:b1:49:a5:68:16:c3:
                    9c:b7:2f:2b:dd:60:ad:1b:8e:6c:f4:40:8b:a4:b7:
                    09:7f:49:44:6f:64:69:a9:f0:b2:65:b3:9e:47:73:
                    e1:43:4f:72:06:cb:dd:bd:91:12:f1:96:e8:2f:68:
                    a4:e3:b5:a7:d3:51:50:8b:ec:58:bd:b0:e9:a6:c1:
                    64:19:88:c9:42:38:16:58:56:4c:b1:e1:06:ff:9d:
                    20:34:1d:86:c9:76:0a:db:da:54:27:85:08:63:de:
                    e4:ff:1b:47:ec:b2:a7:cb:67:26:f1:e9:3d:32:9d:
                    f4:dd:29:c0:f2:5b:89:a1:b2:dd:d8:81:25:8d:c4:
                    8f:63:c6:e4:75:0f:9e:3b:ea:92:7b:69:a1:d2:02:
                    96:13:3f:df:05:87:f0:c5:20:f5:ae:7d:b5:29:54:
                    0b:c7:a5:23:71:77:52:1a:a3:7a:95:17:ac:64:81:
                    51:ef:e4:c0:38:25:f8:38:b2:53:a9:87:bf:74:55:
                    04:9b:a4:a8:ba:7b:c1:9b:00:34:f1:53:f1:e5:8a:
                    98:22:7c:ac:f0:bf:df:d1:ac:4d:1c:a6:50:da:bd:
                    d6:4e:e0:bd:94:09:88:ea:e9:b9:31:08:bd:9b:8f:
                    64:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5C:86:11:AD:FE:79:35:65:FE:90:B9:70:83:FF:1B:EC:09:47:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbc3d250-01d9-3b52-8510-66a53acb449e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:8a:18:3f:f8:01:7f:64:6d:d9:ca:59:55:6a:17:af:10:f9:
         c9:a5:6f:d0:54:14:91:4d:ec:6e:f3:4f:a7:9e:3d:af:73:b1:
         3a:aa:eb:c0:38:a5:86:fa:f3:c9:78:0d:b8:f7:01:d8:0f:73:
         e5:88:c1:4a:1e:e7:80:e2:9e:96:bc:ea:d4:b7:a1:ff:a6:cb:
         d3:7d:f7:25:d9:bb:a6:1b:06:d1:cc:aa:d0:ba:2f:5f:d3:2f:
         1f:ab:f3:00:b3:6e:df:da:6f:eb:09:75:4c:85:d0:d1:76:d4:
         5f:d0:22:63:81:4b:c5:8d:5e:50:2d:4f:c0:1d:6a:08:78:b4:
         76:55:54:a9:55:a6:e1:bf:f2:51:60:07:25:01:49:20:c0:65:
         4f:96:17:24:8f:77:78:49:3d:e8:17:e3:e9:f8:71:28:c7:df:
         88:3a:b5:3c:9e:3c:27:60:cd:45:24:89:af:33:f9:df:9f:5c:
         4e:62:a6:0d:06:bc:71:a8:73:db:01:3b:d7:60:02:52:2f:41:
         4c:bd:4d:94:85:0c:ab:3d:0f:e6:3e:e0:10:30:97:72:cf:09:
         5b:dd:4d:03:37:fb:e3:2b:8d:dd:b6:4e:a0:03:5f:25:6b:10:
         72:5d:d5:d7:50:f1:3a:21:0e:eb:49:c6:ff:24:01:80:1e:83:
         66:e4:4b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:49:59 2025 by rpki-client