Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/14f86378-158e-366f-a977-a2bc127c1364.roa
File:                     14f86378-158e-366f-a977-a2bc127c1364.roa (raw, json)
Hash identifier:          PU9v2jRy1QlL85caRqUPgwjdg13TMJXOUVv+pLF+xmg=
Subject key identifier:   F3:F6:F9:35:C6:09:5F:8A:D8:97:33:60:62:05:68:5B:40:F4:A7:AF
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F43285849088178FE4A1B12926C9F4300
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/14f86378-158e-366f-a977-a2bc127c1364.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     11693
IP address blocks:        72.15.96.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:78:fe:4a:1b:12:92:6c:9f:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=8d890202-6d31-4b8d-bf4a-63a9e1e401e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:27:a3:14:01:00:3e:b2:40:42:ba:70:e3:66:
                    2d:e5:5e:27:66:b5:c9:ef:71:d6:c5:45:72:b9:c2:
                    1c:13:77:c2:c8:9d:86:f4:ab:70:b7:b4:4b:67:0a:
                    b5:ba:dd:ff:7a:bb:db:33:d5:20:b4:b9:ae:57:47:
                    93:19:5f:2a:46:0e:bc:a8:84:b6:d3:6b:e0:29:76:
                    87:31:2d:5b:94:08:e7:dc:6f:43:0e:78:77:ca:27:
                    2f:2d:5e:ad:26:a2:05:ad:7d:cb:40:24:e6:57:8a:
                    36:6a:dd:fd:fb:e0:f6:0d:b8:78:d8:ba:05:99:17:
                    2a:db:4e:be:cd:7f:cf:3d:e5:04:d7:56:bd:6a:bd:
                    ad:bc:82:8d:27:92:0c:5c:b0:78:26:a8:66:63:8c:
                    67:78:88:da:3a:40:68:33:1c:20:b3:f2:d7:0a:ef:
                    f4:d5:64:1a:26:99:c7:06:ec:f8:a2:be:d9:cf:9c:
                    c3:9b:61:b0:de:2c:ca:95:e0:3d:dc:11:3d:f8:ef:
                    37:b7:53:93:e0:ea:5e:e1:f9:64:b1:b3:62:f0:e6:
                    ff:f5:d9:76:25:d5:13:e0:90:a3:f7:a1:21:b8:c6:
                    f7:69:78:c3:2b:63:23:31:c5:6e:2e:11:3e:71:5e:
                    39:8f:e6:3f:f5:22:68:6c:4f:ac:09:32:64:a3:fd:
                    e7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F6:F9:35:C6:09:5F:8A:D8:97:33:60:62:05:68:5B:40:F4:A7:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/14f86378-158e-366f-a977-a2bc127c1364.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.15.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:8c:90:9b:eb:ba:98:d5:85:b5:65:14:16:4e:53:b6:56:37:
         88:7f:09:e9:d2:cb:6b:dc:bf:ea:2c:5f:f8:0b:42:0c:4c:35:
         69:aa:ca:fd:c1:e3:29:70:ca:92:5a:43:97:f2:5d:3f:3f:96:
         21:19:2e:61:74:77:c6:6a:e6:60:b7:e5:b3:82:fb:2e:8a:4f:
         1c:60:3c:4e:f7:4b:53:10:76:64:b2:c7:4d:be:94:de:f4:3c:
         84:10:b1:3f:a9:16:00:78:04:2f:23:a3:8d:71:43:a4:1c:d4:
         7a:51:36:cf:77:99:65:22:8f:bd:6e:c4:db:20:65:21:2b:a6:
         4b:e2:b6:99:17:96:14:a5:ec:4c:2e:f6:8d:e9:90:f9:ed:0f:
         28:63:5d:97:d3:c9:07:9e:c5:4c:57:1a:8d:8d:bd:2b:ab:71:
         ef:66:ba:f8:2b:26:dd:85:f4:e4:b0:e1:4f:fa:9b:8a:59:37:
         00:ca:45:64:b2:fb:49:02:e0:72:8f:26:29:4f:61:9d:d7:1f:
         bb:fe:16:14:0a:c7:81:1e:0b:0b:e7:ba:0c:aa:cc:4c:31:d4:
         3b:01:e7:46:29:ca:77:18:87:d1:6f:04:59:3b:d8:ea:ae:76:
         9a:3b:a8:f9:ea:e9:7b:fa:58:9d:d6:12:94:85:be:10:eb:ad:
         d7:6f:3c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:05 2025 by rpki-client