Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b70f42e6-c660-3f95-a2e5-3707bb43c217.roa
File:                     b70f42e6-c660-3f95-a2e5-3707bb43c217.roa (raw, json)
Hash identifier:          viL6wSMeI7+iAdNEwQ8QiBh4ZEYRnmLzBsrwOwHAIio=
Subject key identifier:   E5:BE:89:E7:06:AE:29:C3:95:A2:2A:F9:12:3D:B9:4C:15:AA:C8:50
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848FD017FF3368A638CF764B0A0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b70f42e6-c660-3f95-a2e5-3707bb43c217.roa
Signing time:             Mon 24 Feb 2025 11:09:25 +0000
ROA not before:           Mon 24 Feb 2025 11:09:25 +0000
ROA not after:            Sun 25 May 2025 10:09:25 +0000
asID:                     30036
IP address blocks:        72.255.84.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:01:7f:f3:36:8a:63:8c:f7:64:b0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 24 11:09:25 2025 GMT
            Not After : May 25 10:09:25 2025 GMT
        Subject: CN=f530f351-7796-4ba1-ac5b-ecd917ed78df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:01:c8:9f:97:25:e2:28:6f:1e:64:e9:4d:e8:
                    2e:d8:fa:01:cd:86:c2:4f:86:4c:d0:6c:e2:d9:e0:
                    e6:60:a8:03:18:8d:38:88:f5:12:ce:d2:9b:0a:d6:
                    10:75:35:53:37:c6:5d:d2:72:47:6b:a7:c1:d3:59:
                    39:cb:58:ab:4d:bc:8f:ab:d7:7d:5b:ce:82:8a:f5:
                    7f:c2:4c:31:c3:4e:81:aa:7b:30:fb:17:5d:95:66:
                    3d:8b:91:dc:0b:51:c5:71:e1:cc:1d:76:ba:bd:e8:
                    fd:ca:a2:2c:5b:79:d2:7d:3f:e6:a3:aa:18:06:be:
                    d1:43:d5:07:ba:a5:7c:92:a0:93:05:cb:e4:04:fe:
                    34:60:f0:fd:6c:6e:41:a0:45:07:a0:b1:29:04:31:
                    9b:c5:86:b3:3a:f2:46:24:78:ff:3f:ab:a3:af:2c:
                    ed:dd:61:2e:23:91:74:6c:b2:8f:eb:0b:04:61:a4:
                    f6:99:d3:4a:61:a0:30:0e:6d:16:85:81:2e:ff:e8:
                    54:b4:0f:c2:6c:cc:12:99:6b:de:e8:45:db:a4:1d:
                    09:a1:3d:d3:2d:c8:19:33:48:79:c4:91:66:e7:4c:
                    85:ab:9c:e4:07:36:9a:25:b5:de:ca:29:31:22:58:
                    2b:59:1a:a8:19:23:33:2d:82:3e:d1:34:a4:35:da:
                    c5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BE:89:E7:06:AE:29:C3:95:A2:2A:F9:12:3D:B9:4C:15:AA:C8:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b70f42e6-c660-3f95-a2e5-3707bb43c217.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.255.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:d2:a6:ab:94:13:81:9a:33:b5:fa:de:b1:ae:d6:ed:01:cf:
         79:d0:4f:22:86:e2:fe:b2:60:57:7b:63:8c:19:34:54:e2:d6:
         a2:d7:56:79:b5:e4:93:51:55:f7:a1:12:09:8b:fe:d6:48:3c:
         aa:6b:03:8a:d7:eb:dc:9d:1a:35:66:28:95:54:af:cf:72:9e:
         37:2d:45:67:96:c7:40:66:48:e9:00:a4:c4:a8:ca:f4:77:9a:
         fb:9f:97:94:62:ff:c1:af:e1:ee:ee:83:ae:c2:0b:7e:28:52:
         86:4d:eb:08:ea:d8:cb:b8:0f:8a:84:f3:28:a7:ba:0a:aa:0f:
         79:5b:d5:8e:49:ef:e2:95:96:1b:c0:ff:9a:7c:b5:67:48:5a:
         6a:0c:be:e8:f6:f4:7d:ec:16:f5:51:29:79:aa:80:12:ba:4e:
         2b:a2:0f:d4:31:77:cc:71:79:35:f4:c6:5d:38:b2:61:e8:0d:
         db:bd:34:97:fb:ba:d7:b5:cc:9e:86:f1:71:7f:8a:04:68:a0:
         7e:30:af:78:41:31:34:6e:5e:a1:e2:b7:23:fe:aa:c7:86:85:
         0f:2f:23:d9:bb:2e:d8:57:67:2b:3a:41:36:a9:46:f9:7b:6b:
         4d:49:f8:40:32:fe:70:fb:26:83:ae:44:38:e4:b5:01:a8:ed:
         d2:48:be:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:01:19 2025 by rpki-client