Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c602457-9d8b-39a3-acb3-4ec21e6394af.roa
File:                     0c602457-9d8b-39a3-acb3-4ec21e6394af.roa (raw, json)
Hash identifier:          uYZrZcowji4FWTm2X1r/NEAQ/+Fa0jgw6vOBYdjPwfI=
Subject key identifier:   CD:C9:F1:AE:BA:93:A2:AF:8C:C9:25:F8:80:1C:31:98:A4:9F:6F:9D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858493ED3E0C8F163C8A0FDE825C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c602457-9d8b-39a3-acb3-4ec21e6394af.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.107.144.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:e0:c8:f1:63:c8:a0:fd:e8:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=d4a97db1-b0a9-4932-ac1c-26e6f0087d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:71:0d:fd:47:30:d5:d6:ca:ee:34:48:84:f6:
                    a5:da:b5:18:fd:b8:8d:b6:b8:9f:f3:21:c4:ed:81:
                    5b:cf:96:e7:50:e2:63:15:c7:7c:f5:fd:38:05:f9:
                    da:3e:30:64:17:ac:b5:e0:41:70:f1:93:08:bf:12:
                    21:b9:8d:6f:9d:dc:e9:20:f4:ec:74:a1:31:55:5b:
                    c3:dd:91:76:27:c0:6a:bf:10:e6:02:d0:d0:17:f0:
                    0a:7b:f7:8d:c8:b4:1a:a0:30:27:e8:69:fb:ac:a9:
                    fb:61:8f:61:fe:11:ad:31:0d:69:fd:6c:0e:3b:b7:
                    c2:7a:61:c2:e3:fa:83:4e:ae:c1:af:29:f0:81:05:
                    9a:9d:2e:28:93:ce:45:df:72:99:58:8b:55:70:10:
                    d0:6b:5c:26:23:b3:b7:6e:7d:54:13:24:74:98:71:
                    df:48:08:76:64:32:15:06:72:63:7d:27:4c:8a:92:
                    b8:e8:78:fe:ef:0f:c0:f6:0b:3e:bb:ee:6b:2e:af:
                    13:16:ac:52:8a:9d:c2:68:69:db:19:45:d8:07:78:
                    51:5e:a5:5f:f0:dd:1f:c5:38:f8:0c:58:1b:7c:3f:
                    78:b2:1f:5d:02:a3:f2:55:9c:3c:ca:ac:3f:9c:80:
                    74:b5:89:6b:80:09:e1:82:8e:c0:e5:24:85:7b:87:
                    95:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C9:F1:AE:BA:93:A2:AF:8C:C9:25:F8:80:1C:31:98:A4:9F:6F:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c602457-9d8b-39a3-acb3-4ec21e6394af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.107.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:52:83:f9:84:c9:dd:f2:ba:d1:22:46:5a:c9:77:ed:b9:09:
         65:38:9f:1d:b3:ef:78:63:d2:a9:46:f1:6a:e6:ff:7c:df:40:
         b8:98:0d:9a:45:1e:8d:15:ab:00:e5:d3:0c:c4:90:aa:74:80:
         f7:f3:48:06:61:12:37:93:9e:8f:d7:dd:51:e2:41:0c:82:7d:
         59:d6:b1:c7:a0:19:41:a4:f7:e4:e4:00:89:d0:ae:61:b4:2b:
         20:64:eb:7f:67:a2:95:58:1e:4c:93:4d:44:ff:e1:d1:ef:00:
         fb:42:cc:b0:4d:97:b9:9b:49:bf:ff:87:dc:54:de:a8:50:fe:
         49:f6:17:e2:70:8d:b4:3d:d2:c3:52:e2:e9:a1:b5:be:64:6b:
         dc:5f:e9:91:8a:85:5d:d1:8c:8e:7e:69:dc:30:78:8b:ad:a0:
         f3:dc:44:fa:86:9e:04:69:4b:b5:9d:10:2e:8a:62:04:4a:d1:
         8e:28:98:99:92:b5:c1:7e:20:87:40:93:4a:51:c7:4c:37:d9:
         81:e3:9f:d7:2d:f0:93:b8:03:67:96:48:7a:92:1a:d4:a2:89:
         9a:90:93:4e:b1:f4:2a:18:f5:7c:fe:93:88:be:8a:b4:1e:9f:
         27:37:ad:0b:49:e9:89:e2:5f:52:a3:57:b1:15:b2:59:b0:35:
         b3:6d:ed:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+0+DI8WPIoP3oJcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk
ZDRhOTdkYjEtYjBhOS00OTMyLWFjMWMtMjZlNmYwMDg3ZDQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHEN/Ucw1dbK7jRIhPal2rUY/biNtrif8yHE
7YFbz5bnUOJjFcd89f04BfnaPjBkF6y14EFw8ZMIvxIhuY1vndzpIPTsdKExVVvD
3ZF2J8BqvxDmAtDQF/AKe/eNyLQaoDAn6Gn7rKn7YY9h/hGtMQ1p/WwOO7fCemHC
4/qDTq7BrynwgQWanS4ok85F33KZWItVcBDQa1wmI7O3bn1UEyR0mHHfSAh2ZDIV
BnJjfSdMipK46Hj+7w/A9gs+u+5rLq8TFqxSip3CaGnbGUXYB3hRXqVf8N0fxTj4
DFgbfD94sh9dAqPyVZw8yqw/nIB0tYlrgAnhgo7A5SSFe4eVcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM3J8a66k6KvjMkl+IAcMZikn2+dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGM2MDI0NTctOWQ4Yi0z
OWEzLWFjYjMtNGVjMjFlNjM5NGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGuQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABdSg/mEyd3yutEiRlrJd+25CWU4nx2z73hj0qlG8Wrm/3zfQLiYDZpF
Ho0VqwDl0wzEkKp0gPfzSAZhEjeTno/X3VHiQQyCfVnWscegGUGk9+TkAInQrmG0
KyBk639nopVYHkyTTUT/4dHvAPtCzLBNl7mbSb//h9xU3qhQ/kn2F+JwjbQ90sNS
4umhtb5ka9xf6ZGKhV3RjI5+adwweIutoPPcRPqGngRpS7WdEC6KYgRK0Y4omJmS
tcF+IIdAk0pRx0w32YHjn9ct8JO4A2eWSHqSGtSiiZqQk06x9CoY9Xz+k4i+irQe
nyc3rQtJ6YniX1KjV7EVslmwNbNt7b0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:47 2025 by rpki-client