Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/06176309-7078-3126-a97e-9846c9869c1b.roa
File:                     06176309-7078-3126-a97e-9846c9869c1b.roa (raw, json)
Hash identifier:          /YJ0pwDMmOjMheyjYi4NYfJwzbAvuEbZmcIVR76aTn4=
Subject key identifier:   26:59:D4:07:EC:BA:46:6A:42:16:54:9D:53:EA:CE:E6:5A:46:7F:BC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858491246D2A582AEB4239FE40A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/06176309-7078-3126-a97e-9846c9869c1b.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     701
IP address blocks:        108.1.96.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:d2:a5:82:ae:b4:23:9f:e4:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=e9c5f907-545f-42bd-a6a9-b6a9e2ba34a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:79:43:a4:79:11:bc:1b:09:5c:47:29:60:68:
                    ef:54:04:6f:58:a0:e2:74:ed:4d:4a:da:c5:db:58:
                    0d:b6:90:f8:5c:55:82:15:2c:eb:cb:94:d8:ae:28:
                    83:6b:0f:46:06:dd:9b:ea:ee:3c:61:45:a2:47:84:
                    a9:34:dc:32:ba:cc:0d:e0:77:18:80:e7:af:1f:f1:
                    1e:46:e0:f8:1c:ae:e7:52:cb:b1:af:18:cf:cd:12:
                    99:b0:7f:96:2c:95:e6:e3:f8:b8:3f:2c:b4:67:12:
                    24:fb:0c:83:56:56:42:96:27:60:72:de:d1:a4:83:
                    2d:6c:e0:91:dd:da:c7:2b:8d:7d:0c:00:78:8f:9e:
                    12:0c:f3:dc:8f:c5:c5:e1:b8:25:ec:64:e2:0f:89:
                    e2:17:71:88:0d:54:56:f3:16:02:b5:6b:11:79:2f:
                    ce:6e:ab:89:da:c0:42:43:b4:54:dc:62:ed:fd:64:
                    28:aa:2d:f6:e6:23:1e:73:38:e6:0a:a2:5d:b5:49:
                    1e:15:53:f1:5a:35:88:16:19:01:f9:7d:04:df:ff:
                    3e:53:79:85:01:a2:81:c0:d5:71:8c:a0:76:75:0a:
                    78:16:00:f9:f2:32:2f:5a:61:bd:78:b9:ff:73:31:
                    87:ed:c5:3d:f2:8d:b9:d5:9c:c1:1b:c2:55:fc:98:
                    52:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:59:D4:07:EC:BA:46:6A:42:16:54:9D:53:EA:CE:E6:5A:46:7F:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/06176309-7078-3126-a97e-9846c9869c1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.1.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f1:b2:11:ec:31:2e:50:a4:01:3e:bd:f1:dc:d4:d8:05:d5:
         9e:a6:aa:c3:3f:00:47:a0:b6:06:0c:2d:9e:f3:61:c3:66:b8:
         af:83:6f:0e:dc:27:f6:be:ee:5c:4f:3a:3b:67:5c:7b:5b:89:
         3f:07:06:b8:fa:f8:b6:95:69:c7:82:9c:8e:1c:a1:4f:7f:30:
         bf:50:30:4a:d4:dd:4b:91:52:47:15:04:4b:56:8b:4d:ff:0d:
         1b:9d:1e:0a:68:36:d0:36:01:3c:af:b9:e7:c3:06:36:0f:7b:
         e2:c5:b8:cf:de:b5:91:39:79:9f:17:db:65:a8:98:ef:52:f5:
         59:cb:24:ed:10:06:7e:16:93:2c:6f:25:8f:3d:83:4d:4f:50:
         93:4c:99:41:92:51:6c:50:f5:8f:c7:6a:b6:c1:ea:e4:8c:cc:
         12:e4:3e:a7:8f:3a:fd:c9:8c:33:29:83:14:04:19:6b:74:cb:
         f6:18:e3:90:66:eb:bd:7d:a5:6e:9c:7a:ea:42:51:6d:4a:27:
         51:06:77:a4:a3:26:ad:7e:a4:71:fd:26:2b:ba:b2:0b:6e:e2:
         0b:aa:52:35:b8:8d:43:4d:95:54:7c:59:82:d2:0e:f0:eb:b2:
         56:77:ab:77:86:9b:9b:50:11:62:e3:ad:5e:f6:a3:6c:d6:b8:
         39:4c:72:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:48:10 2025 by rpki-client