Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/6ad53a49-6abe-3d44-806f-3164436f3834.roa
File:                     6ad53a49-6abe-3d44-806f-3164436f3834.roa (raw, json)
Hash identifier:          D9JpswqN8ognYjYH2bVXAyGai7Oqk2FY+GbeXh5/iGQ=
Subject key identifier:   3A:9D:D6:13:03:97:B8:EA:56:BE:C2:C0:94:ED:99:4D:E3:CD:53:CC
Certificate issuer:       /CN=750923cb-8ed4-4954-b4bb-8250cc11c580
Certificate serial:       010D0C9F4328584913AC3997563F18DA34FEFE80
Authority key identifier: 57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/6ad53a49-6abe-3d44-806f-3164436f3834.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     33182
IP address blocks:        72.29.64.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:39:97:56:3f:18:da:34:fe:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750923cb-8ed4-4954-b4bb-8250cc11c580
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=b6392e5a-4721-4c5d-acd3-bffeb7a79d61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f5:d5:28:73:69:ab:18:bb:bc:2d:ef:41:c8:
                    6d:96:32:70:f8:74:90:12:cd:fe:34:4b:a6:7f:7c:
                    74:a7:a3:a0:87:65:77:b5:3f:cb:53:e6:b3:7a:b9:
                    fd:7d:a1:a0:2e:af:1d:9f:c1:7e:c3:7e:f4:33:07:
                    5a:2f:02:b7:61:1e:80:6e:43:75:07:21:e9:1f:9d:
                    bd:86:1e:ff:ad:88:40:9e:9a:95:14:04:7b:13:1d:
                    68:8b:67:8f:cd:fc:85:e0:33:e3:a9:15:6e:8e:aa:
                    71:39:24:83:d0:ad:32:3f:27:55:39:e8:8c:ef:1f:
                    8d:5f:fa:69:3b:fc:cc:1d:28:cf:82:5a:28:5e:ab:
                    6e:35:60:09:ee:0f:3c:d3:7b:48:f5:0d:89:13:ef:
                    be:00:73:e6:4d:fa:32:98:37:f8:7c:aa:fc:cd:f0:
                    81:aa:08:33:48:1f:43:92:2d:fa:a3:61:e3:20:06:
                    e8:12:2f:4e:2f:c7:39:05:a4:06:af:ce:ec:8b:3c:
                    c9:c7:a2:4e:de:e8:e7:cb:f1:b7:25:97:13:9f:05:
                    f2:ae:1d:89:16:ae:0a:cd:a6:ec:22:df:dd:60:3a:
                    74:8e:73:78:0c:38:51:d7:cf:ef:fd:bf:68:3a:51:
                    54:cf:e4:b7:d3:e7:8e:76:4e:e4:01:f0:c9:53:77:
                    40:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:9D:D6:13:03:97:B8:EA:56:BE:C2:C0:94:ED:99:4D:E3:CD:53:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/6ad53a49-6abe-3d44-806f-3164436f3834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl

            X509v3 Authority Key Identifier:
                keyid:57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.29.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:b5:71:32:21:ed:ce:44:ea:21:85:62:27:4f:47:f0:36:01:
         51:2c:8f:f7:e2:f1:67:90:41:aa:7f:06:7b:c6:96:f4:3b:11:
         e1:4e:1b:8a:47:f0:57:7e:73:8e:60:fc:f4:68:b6:4a:03:e4:
         4d:19:71:72:60:45:9d:31:17:66:89:92:90:1b:44:f4:3f:d8:
         99:2b:d5:36:4a:7a:cd:d2:70:97:9a:05:14:48:73:c6:c6:10:
         a3:01:d3:a2:8e:3e:d9:04:d9:98:96:4b:07:37:cf:2f:25:02:
         72:45:b3:09:fa:ac:e7:e8:0a:c9:43:f3:5b:da:ef:7e:47:05:
         be:70:a5:5f:01:37:f0:43:3c:b9:99:e5:b3:86:c6:df:0a:d3:
         70:22:d3:37:e7:73:eb:4b:d9:39:b7:99:7c:0a:99:5d:03:35:
         d1:55:6f:2b:84:49:8f:23:38:dd:a1:79:cd:15:32:b4:10:21:
         6d:35:7d:50:23:71:2e:83:0d:db:21:94:ef:16:7b:07:7e:42:
         d9:2b:5e:17:f7:5b:f2:9a:2f:94:47:f5:31:3c:02:32:8a:75:
         50:ec:99:a9:ea:29:bd:f8:d2:15:c5:54:78:2c:7b:81:b3:97:
         a9:dc:27:be:71:e8:56:9d:76:58:d1:a5:11:2e:e1:26:1e:17:
         d3:11:d0:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrDmXVj8Y2jT+/oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzUwOTIzY2ItOGVkNC00OTU0LWI0YmItODI1MGNjMTFj
NTgwMB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk
YjYzOTJlNWEtNDcyMS00YzVkLWFjZDMtYmZmZWI3YTc5ZDYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/XVKHNpqxi7vC3vQchtljJw+HSQEs3+NEum
f3x0p6Ogh2V3tT/LU+azern9faGgLq8dn8F+w370MwdaLwK3YR6AbkN1ByHpH529
hh7/rYhAnpqVFAR7Ex1oi2ePzfyF4DPjqRVujqpxOSSD0K0yPydVOeiM7x+NX/pp
O/zMHSjPglooXqtuNWAJ7g8803tI9Q2JE+++AHPmTfoymDf4fKr8zfCBqggzSB9D
ki36o2HjIAboEi9OL8c5BaQGr87sizzJx6JO3ujny/G3JZcTnwXyrh2JFq4Kzabs
It/dYDp0jnN4DDhR18/v/b9oOlFUz+S30+eOdk7kAfDJU3dAgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDqd1hMDl7jqVr7CwJTtmU3jzVPMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83NTA5
MjNjYi04ZWQ0LTQ5NTQtYjRiYi04MjUwY2MxMWM1ODAvNmFkNTNhNDktNmFiZS0z
ZDQ0LTgwNmYtMzE2NDQzNmYzODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzUwOTIzY2ItOGVkNC00OTU0LWI0
YmItODI1MGNjMTFjNTgwLzc1MDkyM2NiLThlZDQtNDk1NC1iNGJiLTgyNTBjYzEx
YzU4MC5jcmwwHwYDVR0jBBgwFoAUV8+Elu/dVA0K4QfGR5KfA6MSMOswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83NTA5MjNjYi04ZWQ0LTQ5NTQtYjRiYi04MjUw
Y2MxMWM1ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSB1AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHG1cTIh7c5E6iGFYidPR/A2AVEsj/fi8WeQQap/BnvGlvQ7EeFOG4pH
8Fd+c45g/PRotkoD5E0ZcXJgRZ0xF2aJkpAbRPQ/2Jkr1TZKes3ScJeaBRRIc8bG
EKMB06KOPtkE2ZiWSwc3zy8lAnJFswn6rOfoCslD81va735HBb5wpV8BN/BDPLmZ
5bOGxt8K03Ai0zfnc+tL2Tm3mXwKmV0DNdFVbyuESY8jON2hec0VMrQQIW01fVAj
cS6DDdshlO8Wewd+QtkrXhf3W/KaL5RH9TE8AjKKdVDsmanqKb340hXFVHgse4Gz
l6ncJ75x6FaddljRpREu4SYeF9MR0Kg=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:27:08 2025 by rpki-client