Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/9108badb-91ba-37e3-a32e-1e9f3607a741.roa
File:                     9108badb-91ba-37e3-a32e-1e9f3607a741.roa (raw, json)
Hash identifier:          v2wSM14fGY3HnacSgvnfGiagkRaqyIzHa07/8OUyfvg=
Subject key identifier:   53:FA:22:4A:5C:1C:85:4E:A9:B7:60:83:0A:AC:D2:F7:45:35:66:C9
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F432858494CC94DA6279E845DB1787720
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/9108badb-91ba-37e3-a32e-1e9f3607a741.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        72.22.70.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:4d:a6:27:9e:84:5d:b1:78:77:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=5e18a8fe-4312-45c5-83f0-6f58d2feac41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f4:dd:28:a6:eb:4b:08:c7:58:89:99:9a:cf:
                    18:1a:6d:45:c4:20:5b:d7:df:fc:ac:e9:e1:16:3a:
                    cd:bb:65:1b:03:aa:4d:68:50:50:98:54:43:16:8d:
                    27:03:fd:fb:dd:00:b3:54:43:c3:a5:c8:fb:c7:19:
                    7c:1b:66:da:c8:f7:7e:f1:e2:30:48:99:70:a1:d4:
                    0e:7e:8d:f0:dd:cb:3b:1a:d3:08:8b:80:e0:e1:e8:
                    bd:e8:ab:e6:3d:00:17:40:93:2a:70:b4:0a:ca:1d:
                    15:88:cf:bc:2b:61:92:26:26:6e:c0:91:3c:28:1e:
                    e9:72:e7:a8:33:9a:d9:4e:55:28:4d:f6:31:c4:b3:
                    e1:ac:45:f3:48:6f:9f:1a:4b:57:f5:3e:c6:cf:68:
                    59:b4:c4:ef:3a:a9:2e:76:19:36:de:87:0d:54:3a:
                    22:87:89:bb:6e:18:76:ea:cf:bf:c6:dc:f3:cd:e2:
                    ba:a0:b0:1d:de:50:b3:32:ee:f4:bc:23:8a:dd:8c:
                    f8:d7:bc:1a:6a:1f:a3:70:00:54:3c:1d:a2:11:e2:
                    f0:1e:fe:11:2c:58:bd:27:76:1d:84:42:4b:5f:f7:
                    8d:ef:08:57:43:09:73:de:65:ca:88:cf:b9:fa:ce:
                    27:56:b8:02:69:aa:99:fb:41:d5:69:cd:f8:64:30:
                    27:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FA:22:4A:5C:1C:85:4E:A9:B7:60:83:0A:AC:D2:F7:45:35:66:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/9108badb-91ba-37e3-a32e-1e9f3607a741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:6e:e4:5c:61:1a:db:cc:33:ab:9f:d8:b6:28:cb:98:88:3b:
         a4:f1:a8:f1:fb:15:aa:f7:5f:92:fd:70:94:d7:d6:da:cd:e6:
         19:4b:38:f7:58:e6:e9:3e:87:65:55:de:29:a5:5a:d9:04:43:
         ef:5c:99:8f:b5:3f:49:27:c5:59:ca:d2:81:fb:17:00:f3:25:
         ef:89:20:1e:6b:82:0e:a0:e1:a8:be:17:97:37:01:54:ee:7a:
         63:31:98:f2:55:e4:98:90:a2:c3:0a:2d:6e:8d:b7:29:07:2f:
         75:a0:bc:3e:b9:48:7a:f9:a3:32:c4:52:09:c3:9f:98:9f:82:
         3e:c1:56:60:e3:ac:d6:a1:01:e4:41:ee:95:dc:da:66:ee:d2:
         b2:bc:bf:93:a2:97:74:9a:34:7d:c7:bb:af:bf:83:3e:ec:3f:
         05:51:e0:7e:d4:5b:48:5e:3b:3c:bb:df:ed:1a:d3:60:6a:2d:
         9b:b9:14:c5:ee:f2:95:93:eb:34:a2:ad:02:77:d7:56:96:96:
         e9:29:10:27:16:2f:e3:00:2b:89:a7:5c:af:d8:48:8a:6e:48:
         35:cf:67:0d:b5:bd:b1:d9:eb:43:b9:91:24:5e:ca:d7:36:b1:
         4e:97:07:9d:05:5b:f9:c3:0a:fb:d5:b4:db:2f:a4:58:2e:42:
         26:6f:c0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:17 2025 by rpki-client