Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/7dbf320e-1550-3b25-b6a5-53b5b29c38e8.roa
File:                     7dbf320e-1550-3b25-b6a5-53b5b29c38e8.roa (raw, json)
Hash identifier:          wEa3SOytFA48x/soGsB/g1du0DXLhe6j8TTvvkl3Khw=
Subject key identifier:   99:AA:5C:93:A0:DE:4B:45:99:BB:87:03:25:FD:03:7E:23:97:46:8F
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F43285848A9961C8A31669A4776494180
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/7dbf320e-1550-3b25-b6a5-53b5b29c38e8.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     812
IP address blocks:        72.136.102.0/23 maxlen: 24
                          72.136.104.0/21 maxlen: 24
                          72.136.112.0/21 maxlen: 24
                          72.136.120.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:1c:8a:31:66:9a:47:76:49:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=d3f8c43e-5b64-47c6-b599-ac7f463fa3c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fe:c0:b2:a6:5e:72:3a:60:5c:1b:52:a5:10:
                    fb:94:8c:8e:93:fc:2c:71:99:94:e1:e4:a9:5f:3b:
                    09:5a:f8:0c:18:d5:1e:14:a4:e8:64:92:75:39:65:
                    ca:5c:71:45:8d:fc:a7:14:c7:fb:a2:3b:9a:b4:27:
                    59:9d:64:f1:e5:1a:af:72:33:6f:f9:12:33:1e:d9:
                    02:bf:75:50:62:49:40:28:92:61:75:23:65:d0:51:
                    55:ec:7a:1b:98:fc:91:8a:86:ff:5a:e0:44:27:36:
                    3f:e0:74:b0:73:c8:22:1f:64:25:d1:48:7c:c3:b0:
                    ae:e3:71:1c:ae:76:7b:e3:85:df:ed:f7:92:7a:10:
                    9c:ae:64:66:d1:a2:5a:a6:d6:a7:2c:15:43:99:29:
                    30:a9:62:17:d2:75:04:40:c6:41:53:0c:c8:8a:96:
                    87:3e:3d:94:ef:cd:33:b0:8d:b5:a5:29:07:d0:38:
                    06:90:14:78:fd:a0:cc:c7:31:61:4b:60:6a:f4:29:
                    ac:4c:d3:92:04:51:fc:8d:81:35:7c:f9:74:14:32:
                    0b:10:01:d4:a8:ae:88:1b:64:0e:0c:3f:3b:a3:a0:
                    a4:ce:d4:57:40:d5:58:22:94:12:7b:8d:5d:71:de:
                    61:87:50:a3:97:8b:6d:7f:d5:85:3b:d5:73:59:03:
                    1d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AA:5C:93:A0:DE:4B:45:99:BB:87:03:25:FD:03:7E:23:97:46:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/7dbf320e-1550-3b25-b6a5-53b5b29c38e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.136.102.0-72.136.123.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:e8:1e:32:49:60:14:30:a4:de:0a:34:70:31:2c:da:c8:d8:
         33:18:bf:ee:a8:97:26:55:28:f5:72:9f:eb:f3:5c:e5:4c:41:
         82:e0:05:d3:2f:b4:bb:f6:b9:c6:36:2a:22:7f:54:10:d9:08:
         70:10:09:7f:ad:2a:35:54:9d:5e:15:57:cc:b0:1b:20:4e:82:
         e2:60:2c:17:40:c0:54:df:88:d3:c6:b5:09:60:00:e9:dc:78:
         72:d6:7c:0c:25:0d:17:97:58:76:c4:af:4a:91:5d:3f:7a:03:
         cc:5f:46:8d:78:71:45:23:a4:49:fc:74:99:ab:06:00:75:80:
         bb:07:de:55:bf:f3:14:06:af:b8:5b:d4:58:fe:a3:8e:f7:fc:
         ff:a5:a7:07:26:84:19:42:9d:d1:2b:bd:5d:be:30:f7:5b:06:
         44:c6:7a:b4:aa:36:7d:4a:3f:64:70:9f:59:65:35:1c:9c:8c:
         7f:f9:4d:d7:2f:c2:f5:62:b3:d2:ac:d4:aa:81:a0:1f:5f:8e:
         95:25:99:05:20:03:47:f5:18:27:a9:49:d3:d1:f2:22:95:d4:
         d7:0a:1d:63:3a:65:c2:60:17:ca:00:79:16:a8:c7:04:ca:ef:
         a3:82:45:00:5b:7c:d4:0f:1a:61:d4:b1:af:50:4b:b2:50:11:
         50:67:14:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:03:01 2025 by rpki-client