Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15738b52-5a68-3501-b400-d22d84911cf0.roa
File:                     15738b52-5a68-3501-b400-d22d84911cf0.roa (raw, json)
Hash identifier:          wj3no59NYIXZyZ5djvDtFqhCwauTCugpr9xZ1cbLmmE=
Subject key identifier:   7F:B9:3A:D9:F4:EF:32:B5:79:3B:E1:78:5A:EC:D1:7E:4E:88:16:3E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848EF6166BA354B8E5BF9A6D600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15738b52-5a68-3501-b400-d22d84911cf0.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     0
IP address blocks:        204.179.232.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:66:ba:35:4b:8e:5b:f9:a6:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=0c911b17-09be-49d2-b059-e1db2563bf87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:44:e0:10:7a:44:07:18:92:31:cd:b6:1f:3a:
                    fe:5e:a8:03:b1:cb:82:8c:a2:b9:53:06:8d:54:e0:
                    13:0b:62:5e:f8:b4:d1:63:3c:58:2c:65:b0:18:8d:
                    7a:72:7b:6f:31:72:a2:4f:c3:38:83:07:0b:75:51:
                    45:b2:62:99:a8:d5:44:bc:5d:db:b3:1e:c7:d5:64:
                    f8:a1:8f:de:73:2d:f1:9f:07:fb:bc:ce:22:80:00:
                    a8:6d:8a:20:46:a7:d4:ef:f3:7d:c9:c0:c7:93:81:
                    da:7c:2b:91:d6:44:d1:d6:36:73:ba:c8:fd:92:be:
                    4e:76:74:a6:8b:a8:66:85:f9:1b:5b:d1:98:1a:29:
                    6b:2c:67:10:c1:e6:15:9b:77:6d:dc:13:90:e0:c3:
                    39:dc:f8:27:47:86:b7:14:9b:2f:6e:f9:26:69:06:
                    01:ec:29:10:7f:c2:08:50:35:e9:68:fe:c8:67:cd:
                    ea:9d:3f:d2:a8:4d:4e:2c:78:85:55:66:e4:f5:65:
                    84:34:fa:56:81:e5:f8:96:a8:e6:53:04:e5:82:4f:
                    2d:98:b1:20:8d:c6:89:13:a8:9d:6a:c0:3c:58:b3:
                    ce:5b:06:a6:0f:4a:13:6c:55:1b:47:d4:02:e4:fb:
                    5f:51:58:85:41:44:38:3c:31:d3:9a:ca:b6:3a:38:
                    ce:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B9:3A:D9:F4:EF:32:B5:79:3B:E1:78:5A:EC:D1:7E:4E:88:16:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15738b52-5a68-3501-b400-d22d84911cf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.179.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:1c:13:eb:87:d9:cc:a3:c9:97:86:b7:20:3f:bd:14:bd:77:
         56:8f:d8:d1:51:b9:9d:ac:a5:44:8e:b3:04:c5:f3:36:89:56:
         c5:20:5a:05:b7:2a:38:f6:87:a2:da:77:28:56:69:6b:7d:b8:
         3c:43:b0:e9:15:e3:0c:90:3b:f8:6e:5f:39:59:4a:0c:8e:a9:
         d9:41:5a:42:5b:a3:1a:04:cc:9a:95:fa:ef:8b:a4:a4:1e:b4:
         b0:8f:3c:af:a0:be:a4:78:57:3a:e0:3d:7a:dc:e7:03:d9:6d:
         7f:66:f0:85:ad:c5:e8:3e:04:bd:4f:e8:40:1e:ef:c0:48:69:
         da:68:bd:cd:fa:55:4c:51:c4:99:2f:21:e5:eb:a9:b9:d0:33:
         19:9d:26:37:64:cd:fa:50:ce:9c:d9:d8:9a:c2:c0:6d:91:bb:
         6c:76:26:60:11:d1:3d:e1:47:14:63:6a:84:02:fe:b7:5d:88:
         19:82:a2:a8:20:84:39:b0:89:bb:78:91:00:84:8f:16:ed:14:
         eb:f8:3e:fe:36:4d:99:af:98:39:17:8c:4c:ad:dc:62:9d:8b:
         03:ba:c6:8d:24:8b:ca:76:e5:60:6f:cc:ba:fe:06:2c:00:83:
         77:af:d9:1f:80:87:dd:75:e8:bc:e0:52:be:9c:76:40:73:9c:
         25:a4:6b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:08:28 2025 by rpki-client