Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/913a5843-543b-34c0-b5e3-b7243a5d6f9c.roa
File:                     913a5843-543b-34c0-b5e3-b7243a5d6f9c.roa (raw, json)
Hash identifier:          wdEFXimuLnAjcogbWYAx/OF8FkvzUSm7eKqs7h0R1e8=
Subject key identifier:   DD:A6:1D:25:DE:57:F0:CB:67:96:DD:C0:44:E4:44:24:DE:F6:C2:9C
Certificate issuer:       /CN=fc9e4738-7902-435b-802c-f37dc4b25f95
Certificate serial:       010D0C9F43285848800DC5D69B5EBA313A9F7720
Authority key identifier: 34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/913a5843-543b-34c0-b5e3-b7243a5d6f9c.roa
Signing time:             Fri 10 Jan 2025 16:58:06 +0000
ROA not before:           Fri 10 Jan 2025 16:58:06 +0000
ROA not after:            Thu 10 Apr 2025 15:58:06 +0000
asID:                     7046
IP address blocks:        72.1.128.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:80:0d:c5:d6:9b:5e:ba:31:3a:9f:77:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9e4738-7902-435b-802c-f37dc4b25f95
        Validity
            Not Before: Jan 10 16:58:06 2025 GMT
            Not After : Apr 10 15:58:06 2025 GMT
        Subject: CN=5eaf5d82-e5a4-4afd-b36b-e1d6f4276c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:79:6e:bd:bd:8b:35:ee:ef:02:d3:88:68:
                    f9:03:7e:fd:a2:94:b9:9d:d2:a9:9e:2a:52:43:ce:
                    ec:95:3c:f5:ab:78:1d:58:3a:d3:58:18:59:1f:57:
                    6e:56:0c:db:fb:39:ee:a2:5e:19:70:d0:75:34:71:
                    de:5f:81:fa:74:ad:f2:b4:61:4b:97:4c:25:64:06:
                    4d:c1:75:fc:15:99:fe:05:e7:46:91:c8:4a:47:a0:
                    2a:fe:f5:ae:a4:26:01:61:0e:53:f9:2e:f5:ee:4f:
                    2b:33:0a:2f:25:43:1c:98:09:a2:25:90:00:a4:d5:
                    da:bf:b8:ca:a2:c6:86:32:95:7e:5b:f1:de:40:8d:
                    b8:74:ba:30:9a:29:ce:9e:f8:16:27:2a:31:82:c1:
                    57:f0:e1:43:45:8a:b5:c3:ef:40:ff:be:98:7d:5a:
                    12:a8:d0:6a:96:b7:e3:ce:49:3c:29:14:e1:74:90:
                    87:3e:6f:47:ba:ed:fa:0d:8b:c1:11:f7:1f:67:c8:
                    5c:13:a3:c8:e0:db:cc:b8:11:10:76:a1:3b:4c:97:
                    8f:e1:25:49:7d:2a:87:0e:ef:10:f0:ca:58:9d:11:
                    15:31:f8:0d:01:b5:b0:28:18:af:f0:fd:33:ad:56:
                    c2:7b:92:d9:7a:a7:e3:a8:eb:9b:d3:e4:f4:af:8f:
                    84:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A6:1D:25:DE:57:F0:CB:67:96:DD:C0:44:E4:44:24:DE:F6:C2:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/913a5843-543b-34c0-b5e3-b7243a5d6f9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.crl

            X509v3 Authority Key Identifier:
                keyid:34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.1.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:99:45:17:9d:18:4a:97:df:99:a4:c7:52:8d:60:e0:88:86:
         07:5c:34:82:50:ca:48:4b:7d:8b:6e:66:53:3b:fb:9e:74:b0:
         6c:67:0c:91:7f:fe:08:87:09:6b:b8:ff:33:7c:ae:54:35:6d:
         d9:fe:e9:f8:45:28:9a:7b:07:32:68:12:99:7c:f4:d0:02:8a:
         e1:ca:8a:90:45:1c:37:af:32:fa:90:75:40:34:85:f4:5b:6d:
         7d:43:6b:cd:72:25:c4:45:a1:e7:78:71:83:30:50:d5:0a:c9:
         3f:2b:4a:1b:8a:4a:6e:f3:46:fb:cd:b7:f1:c8:f6:b0:42:9e:
         c6:b8:f6:b1:18:30:bf:cd:4b:c6:cb:b4:df:e1:19:9d:7d:a7:
         40:83:2a:98:2e:90:1e:89:28:ed:37:33:f3:38:20:27:fd:cf:
         a5:46:05:d9:a1:41:b6:7a:ca:fe:e0:f7:db:06:b3:5e:a2:9c:
         3b:12:f7:10:4d:d0:be:c2:37:f3:bf:ed:ae:6b:b4:1b:6c:88:
         b1:75:13:7c:7f:fe:f3:ce:63:18:c9:b7:f5:81:85:90:3f:89:
         87:ab:8d:f9:17:ac:16:ac:a8:89:ef:11:c4:08:b8:87:dd:82:
         ca:97:c5:76:14:ad:72:25:50:e6:78:f1:33:9d:dd:2d:be:39:
         da:5d:6f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:02:29 2025 by rpki-client