Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0223d4fe-1fb7-3e32-8033-bff52035a445.roa
File:                     0223d4fe-1fb7-3e32-8033-bff52035a445.roa (raw, json)
Hash identifier:          3A9x1PMQmZNTGauSntDimDZZ4P8cAskBz+xRNtbx/MY=
Subject key identifier:   04:C1:ED:8F:EE:28:F9:DC:67:31:2A:8A:85:5E:81:7C:2B:55:93:14
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858493ED3DFAC592E55EA67D01480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0223d4fe-1fb7-3e32-8033-bff52035a445.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.108.184.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:df:ac:59:2e:55:ea:67:d0:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=9356c9c7-008a-4768-aca3-083f7b75074c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:73:8d:c7:da:0e:3d:dd:5d:c6:c7:07:4a:54:
                    10:77:41:38:99:e7:a5:fb:a9:a7:78:fa:73:7b:16:
                    19:a2:95:bd:7c:a4:67:91:9c:32:28:f4:d5:bd:f7:
                    58:a4:ee:b8:74:7e:f6:30:ce:8b:ff:fb:73:5c:30:
                    80:83:14:3e:93:0f:41:16:b0:a0:f6:9c:07:11:67:
                    7f:38:27:4c:67:47:ab:4c:3b:a3:48:62:45:d6:de:
                    b4:e0:41:6c:6d:ff:b7:93:f4:52:02:1e:91:6d:bb:
                    50:40:03:44:b3:e3:80:bd:41:39:5b:57:35:ce:e4:
                    cb:c6:63:71:d2:99:dd:01:58:ec:43:69:11:42:58:
                    d6:3a:ee:c5:9d:fd:7f:0f:0a:16:8f:8b:e9:38:65:
                    da:63:ea:37:4c:57:01:65:46:86:49:a2:2b:64:ea:
                    4c:14:3c:e4:41:c4:da:25:4e:36:cf:81:5e:3e:64:
                    91:c2:ff:45:59:19:26:31:31:ee:ac:a3:05:c0:a7:
                    1e:6e:0a:3e:17:72:62:63:e5:40:64:c4:b1:0a:39:
                    b9:3d:a1:14:ee:7b:18:15:7c:94:2f:bb:02:71:5d:
                    63:1a:78:a7:65:79:bc:11:fd:1b:47:1a:c7:09:2f:
                    c5:59:d1:24:a3:2c:a8:a8:fb:e6:08:61:bd:22:cd:
                    9c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C1:ED:8F:EE:28:F9:DC:67:31:2A:8A:85:5E:81:7C:2B:55:93:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0223d4fe-1fb7-3e32-8033-bff52035a445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:4d:61:ce:5a:4d:ff:7c:a3:42:e9:22:19:3d:af:fe:8c:5b:
         3b:0f:64:c7:3c:58:1f:ba:94:6d:9e:e2:7a:38:67:ae:a3:62:
         27:7f:5b:d1:0c:c0:81:27:7b:f9:7c:eb:bd:c2:1a:4f:c4:cf:
         30:e9:d6:67:c0:bf:d1:5b:d1:73:51:30:4a:ce:93:e4:d9:c3:
         b7:3a:c7:25:86:67:52:7e:f1:74:d4:3c:31:ff:4e:6d:97:e2:
         cf:67:ad:fc:d8:c0:eb:11:b2:dd:e2:9a:f8:1c:4d:8f:08:2f:
         84:ed:29:23:95:45:6d:ad:3e:fc:5f:e8:9f:dc:b2:c2:09:87:
         78:5a:cf:bf:4d:8b:e6:56:33:ee:15:bf:6c:cb:6c:bc:da:70:
         cc:83:41:b9:f9:c4:e9:12:35:f7:b6:76:b0:6b:2c:59:a0:49:
         dd:da:7f:e2:cf:10:c1:7f:29:60:3d:01:cf:b7:a3:92:3b:0f:
         ba:11:6e:96:d9:df:ef:62:cd:c7:79:e9:45:9b:a2:6b:8b:e4:
         a7:85:e0:31:9f:0a:9a:c5:2e:d4:25:d0:f2:2f:2e:f8:87:a0:
         2a:b3:1e:b1:c3:21:36:4e:0d:95:b4:a2:6b:a1:ed:45:b2:62:
         90:72:2a:01:65:5d:77:e5:49:2f:5c:f6:ce:b8:3a:4d:a0:52:
         80:af:16:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:11 2025 by rpki-client