Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/984ed222-d765-3433-93a1-4d9be00bfd45.roa
File:                     984ed222-d765-3433-93a1-4d9be00bfd45.roa (raw, json)
Hash identifier:          GGqlp+wFkhl8ykSRfqJIS7DKBuvk8Qk6hrFfpeieRbI=
Subject key identifier:   13:A6:F2:7F:A0:67:11:BC:B1:F0:24:30:31:C7:1B:16:91:F7:D8:83
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F43285848EF615CDAF1D1C9F090A0F600
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/984ed222-d765-3433-93a1-4d9be00bfd45.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        170.72.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:5c:da:f1:d1:c9:f0:90:a0:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=3268d474-c1ed-435e-9695-7a4cd222008f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:50:88:69:a2:0d:c1:84:fc:f4:c9:17:d7:5f:
                    5d:57:fd:76:5f:ec:46:9b:e0:59:ed:51:b2:92:2a:
                    c0:90:52:cc:39:52:84:ad:67:3e:b8:65:8a:73:08:
                    05:bc:5b:f4:0e:cd:b1:28:99:e9:0b:12:89:43:3c:
                    9c:18:5f:c3:7d:97:3f:40:b4:c9:db:ee:61:b0:14:
                    a6:b7:ff:fb:d4:74:5e:42:76:10:15:3c:75:1e:23:
                    9f:40:87:49:69:12:fb:78:74:2f:e7:e3:f7:a1:39:
                    ca:bc:fa:c3:65:10:74:ee:1e:fc:03:c0:db:b5:d7:
                    6f:be:16:00:52:21:79:63:2a:44:0a:33:fc:e1:06:
                    3d:4e:5a:60:5a:29:f1:63:00:57:fc:fc:d4:c5:5e:
                    34:7b:8b:19:9a:e6:14:f5:50:cc:df:f4:97:3c:46:
                    4d:78:78:92:51:3a:fb:77:9b:8a:38:96:53:e6:8e:
                    a0:c6:8a:5e:4f:7d:08:0d:68:66:25:5e:80:eb:ca:
                    4c:c7:be:47:92:a0:e4:1e:eb:99:af:df:8a:d2:95:
                    52:9d:d3:e7:2e:60:79:ed:3b:bc:5c:fc:0a:dd:05:
                    1c:e5:0f:b8:26:83:76:dd:56:75:2f:d3:55:37:0c:
                    2a:62:da:90:a3:cb:e5:57:37:a2:ca:03:5e:72:23:
                    8c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A6:F2:7F:A0:67:11:BC:B1:F0:24:30:31:C7:1B:16:91:F7:D8:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/984ed222-d765-3433-93a1-4d9be00bfd45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.72.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:8d:6b:14:05:f6:d8:7e:ad:f3:cd:e4:f3:74:22:94:1d:e0:
         76:12:36:aa:dc:0d:2a:18:af:53:7b:4e:82:16:09:19:64:1e:
         0c:19:e4:19:67:8a:02:3b:0c:00:60:2b:56:28:63:c4:ce:20:
         01:1e:8d:ac:69:c0:bc:92:7c:ff:fd:2e:a0:17:07:86:41:d2:
         5d:81:68:32:34:a3:05:30:15:29:5c:0b:e0:d9:52:9b:ea:1c:
         78:79:c1:4a:04:fb:94:9a:3c:74:1f:d9:57:7a:61:c2:8d:a9:
         29:82:42:47:44:60:2f:94:f1:8f:82:f2:75:e8:16:0f:77:9e:
         6b:a0:23:36:1c:a4:b6:23:0e:f2:b1:7d:2a:70:30:f1:0c:d4:
         23:0c:3a:88:4a:65:c7:31:52:72:91:63:7b:7a:f4:44:97:c2:
         6d:c8:3e:47:af:d7:bc:07:e8:b2:33:7b:47:ee:31:4e:96:14:
         4b:5e:e3:18:2d:fa:5a:5e:0f:7f:66:7b:0c:e0:23:0c:34:37:
         d5:45:76:7d:64:72:05:1c:77:c1:5a:4c:d4:87:7b:77:9f:ac:
         e3:f0:89:c5:f4:2d:ca:f0:b3:2e:8e:c2:6f:2e:46:78:b8:9f:
         06:e0:9e:d3:43:53:80:0e:15:46:f1:70:bc:6b:1a:43:26:33:
         de:3c:f5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:34 2025 by rpki-client