Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/fb07e2e7-53f5-3e85-8d99-0262eea0bf4a.roa
File:                     fb07e2e7-53f5-3e85-8d99-0262eea0bf4a.roa (raw, json)
Hash identifier:          zbUpXQ2KZ2LG/O1LLvOtIAH75R7zd0k+2U0mzA2Zwq8=
Subject key identifier:   70:A6:53:85:05:31:69:78:0C:65:8A:81:F7:9A:71:D7:07:1D:0C:1E
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584944694C6FF39708B21712F880
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/fb07e2e7-53f5-3e85-8d99-0262eea0bf4a.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     4922
IP address blocks:        72.46.72.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:4c:6f:f3:97:08:b2:17:12:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=172713f4-44b8-4086-8f92-d35146799c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:50:2a:de:79:23:a8:68:13:93:94:67:c1:03:
                    3d:8b:da:13:d0:2a:eb:ef:2d:93:e2:85:f4:8d:2d:
                    fe:7e:70:67:fb:b3:de:1b:d8:8d:47:30:1b:07:8d:
                    f2:bb:02:43:ac:56:9b:3d:75:b1:c8:7d:8f:d8:ec:
                    7e:75:04:e1:b8:51:69:87:1d:46:42:05:fd:6a:9b:
                    a6:18:c6:65:72:38:56:f5:b3:dd:cc:40:79:a4:fc:
                    c4:65:4a:c8:6e:ed:a6:98:de:10:2d:b0:18:81:78:
                    65:38:eb:5f:36:e4:ed:34:a9:f5:eb:f1:13:bd:eb:
                    51:f7:f5:44:b5:3d:7b:e5:0d:8f:0e:ed:7d:00:e3:
                    b3:97:d2:2f:9f:ac:c0:ae:f5:2a:ab:ef:a1:af:78:
                    35:dc:bd:2f:ba:2f:cf:16:e9:01:c4:58:81:31:1d:
                    cb:aa:f5:3a:e8:87:21:af:b9:5b:5a:aa:8e:03:31:
                    e7:30:b5:fb:e4:96:15:85:b8:a9:e1:93:35:74:14:
                    83:67:a0:8c:61:24:08:91:44:a1:6c:a7:cb:d0:9d:
                    2e:e4:ec:39:17:51:d8:6e:74:08:9b:c4:bf:b0:3b:
                    20:4f:9d:53:6c:d3:e8:52:dc:a7:9d:9f:36:41:8f:
                    95:84:51:ca:ba:3a:c1:05:82:04:d4:8c:d1:4a:a8:
                    3f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A6:53:85:05:31:69:78:0C:65:8A:81:F7:9A:71:D7:07:1D:0C:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/fb07e2e7-53f5-3e85-8d99-0262eea0bf4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:56:ec:30:68:ca:95:30:af:cd:82:24:4d:93:50:d5:5c:fd:
         e0:bb:46:1e:a5:c7:ec:a8:d1:db:21:6e:ae:43:02:43:4e:64:
         1e:09:e4:dc:a2:6b:fa:a0:df:f5:35:ec:31:c0:02:35:a3:8d:
         75:98:2c:20:f6:74:cc:c3:49:b5:4d:50:62:10:59:f2:e6:2e:
         87:cf:9e:70:e1:7f:44:00:be:0d:74:8b:d8:e5:98:c4:1b:86:
         ba:e6:a3:be:55:02:32:a8:f2:0d:d1:f0:73:11:9d:d2:c9:35:
         62:44:e4:46:49:82:0d:6b:bd:d8:63:a1:13:be:8a:1a:f3:a2:
         ce:6d:20:7a:86:11:94:9f:26:20:2d:34:18:51:b6:14:52:cc:
         80:0e:63:8d:62:65:e0:fb:99:43:98:ce:8d:4c:1a:ed:84:48:
         67:ef:46:db:83:12:f0:dc:e3:5b:be:7f:72:0e:94:ca:91:61:
         63:a9:4e:74:b5:64:10:ec:29:93:37:b3:85:cf:a4:5f:84:03:
         95:7a:36:78:c7:43:d5:34:e2:6b:f4:c0:52:83:ec:f3:9f:7d:
         95:d7:7b:f9:6f:2a:a3:dc:13:83:08:f4:15:42:09:66:aa:f1:
         af:11:51:fd:62:04:f1:3f:d2:de:c2:3b:34:9e:98:e7:9f:b4:
         26:75:3c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:13:36 2025 by rpki-client