Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cb5aa02f-87d1-309e-8d2c-891ee20d8c0f.roa
File:                     cb5aa02f-87d1-309e-8d2c-891ee20d8c0f.roa (raw, json)
Hash identifier:          kjBBJn6YFUpHnVSsIoEB9+AmuxtTBsfdFjrW+JHDKZU=
Subject key identifier:   7F:88:0E:2A:A4:9B:3C:A9:D0:02:51:DE:A5:2A:0C:1B:84:1E:CE:78
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F43285848C4658A76A5E6C04784F52E00
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cb5aa02f-87d1-309e-8d2c-891ee20d8c0f.roa
Signing time:             Tue 04 Feb 2025 04:29:55 +0000
ROA not before:           Tue 04 Feb 2025 04:29:55 +0000
ROA not after:            Mon 05 May 2025 03:29:55 +0000
asID:                     14813
IP address blocks:        72.51.68.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c4:65:8a:76:a5:e6:c0:47:84:f5:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Feb  4 04:29:55 2025 GMT
            Not After : May  5 03:29:55 2025 GMT
        Subject: CN=ac69f32d-c69f-47a1-8ed9-f647c2a242f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b0:c0:62:30:65:11:c1:7e:62:ff:3b:40:a1:
                    95:51:02:16:ee:2f:b2:e7:4a:e8:f4:91:ae:74:05:
                    f5:ef:56:a7:83:27:58:0c:fa:d8:55:d7:51:f4:20:
                    c9:f2:c2:dc:09:9a:f9:ae:b2:47:6c:29:d6:ef:16:
                    f4:22:84:de:5a:61:60:ee:a0:2e:a8:7b:aa:3a:13:
                    61:43:48:d4:fb:bf:4c:c4:88:66:6c:e1:f5:9d:91:
                    4f:6f:47:1e:ee:3d:ad:78:8a:65:57:ee:54:4a:66:
                    be:a0:f4:81:64:02:9a:d5:6e:a7:9e:aa:9e:91:c4:
                    b2:f0:03:8e:b7:d3:a4:6a:2b:6d:94:d1:e6:37:b3:
                    b1:0a:03:ce:c6:a7:8a:a5:c6:8d:04:91:3d:3e:0e:
                    f6:12:08:1c:81:d0:5d:56:62:6a:5b:ed:e2:9f:ee:
                    c8:6d:82:f0:c6:78:eb:da:5f:2c:db:c2:8d:94:a5:
                    8e:7f:52:96:66:ff:72:27:5d:64:e9:d5:e4:73:09:
                    3f:c0:31:aa:a2:a5:d9:73:ef:c1:ce:11:a7:ae:d0:
                    d4:6c:c2:97:8d:2d:e0:9c:ca:0f:95:31:0c:16:d9:
                    f8:e8:bb:fa:a7:b6:3d:70:ed:5e:df:d4:31:72:14:
                    db:90:f6:e1:19:2d:8c:a1:24:be:11:f0:14:fb:ec:
                    2f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:88:0E:2A:A4:9B:3C:A9:D0:02:51:DE:A5:2A:0C:1B:84:1E:CE:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cb5aa02f-87d1-309e-8d2c-891ee20d8c0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:6c:65:60:0d:45:cd:6a:61:bb:6c:e6:67:b4:47:32:17:64:
         41:69:a4:e7:57:3e:5f:cb:5e:d7:64:7c:14:0b:55:08:0a:ea:
         bf:68:a8:d4:9a:98:dc:e0:26:cb:a9:e5:fc:95:e5:fe:27:65:
         17:81:3b:8e:4b:0d:a5:f5:81:f2:6e:df:79:64:39:3d:8e:c2:
         e0:a0:f0:8a:d3:15:8a:1d:12:5e:62:74:ea:4b:2c:6b:a2:09:
         33:8a:a6:8e:09:13:8b:79:c4:c7:41:d3:a4:b5:74:97:1f:39:
         58:e4:df:71:0e:a2:96:2d:91:2f:80:b7:9d:e8:c0:17:7e:d3:
         40:97:fd:86:cd:98:14:b2:f3:76:98:a8:04:f8:d2:08:22:23:
         f1:cd:22:1e:a3:af:73:4b:c9:bd:14:d6:ee:2b:94:ba:b5:4b:
         27:e5:d2:7e:23:e6:7c:eb:fd:90:b3:13:9f:8c:74:50:d2:8b:
         2c:04:28:67:e9:01:88:9b:9e:95:5a:3f:6b:7b:6d:51:ee:91:
         12:00:81:c3:f6:46:e6:42:ce:1d:5d:83:a7:23:85:99:bc:e3:
         99:81:6b:11:f6:62:38:91:ea:32:1c:ba:62:fa:71:90:ab:9d:
         da:c3:6e:1f:f7:ca:6c:23:96:3b:13:b0:16:26:9e:c0:eb:50:
         f8:ec:3a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:30:38 2025 by rpki-client