Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1905e0c3-a5f7-34b5-82d4-1403231b0985.roa
File:                     1905e0c3-a5f7-34b5-82d4-1403231b0985.roa (raw, json)
Hash identifier:          ju/jBx3vIhztVYv3ZLuBChUjP9gQ82K8XHOKZaUSCdQ=
Subject key identifier:   C9:A8:35:E5:9C:7F:D7:AE:D1:55:A4:59:0E:EA:9B:0E:AB:72:89:EE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858487CEB482DA2B50279C8160AC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1905e0c3-a5f7-34b5-82d4-1403231b0985.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     701
IP address blocks:        207.22.128.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:48:2d:a2:b5:02:79:c8:16:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=185b735b-43ff-4a19-b7d9-3b55bc881c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:34:3d:d0:77:65:80:af:f2:dc:0f:45:e9:fe:
                    00:fe:10:1f:ce:cf:ca:47:be:d5:6b:40:ab:31:f8:
                    b7:bb:f8:3b:45:8c:e5:39:b6:e3:51:61:98:c0:e7:
                    a5:27:20:d1:b6:8c:9b:b9:e8:38:22:d0:23:18:d2:
                    cb:5c:3a:97:ca:34:24:ae:d6:ab:3a:89:d3:63:cf:
                    ad:ed:e9:1a:34:66:28:6a:4e:41:13:e4:2e:d4:9f:
                    8e:c7:69:c5:79:c1:1a:af:a4:22:a4:61:19:f2:89:
                    78:64:41:c9:96:70:cf:1b:2b:a7:42:01:ce:a2:29:
                    08:2f:48:28:dd:a5:dd:4c:02:24:c5:25:96:8a:d9:
                    a5:55:4b:1b:41:ac:48:4e:64:a8:91:43:4f:6e:f9:
                    89:f7:51:f2:b0:b6:1c:26:41:73:3b:68:5e:9c:81:
                    bb:e2:c0:2a:db:46:6b:ce:fa:e5:4a:6e:cd:12:79:
                    32:8c:b4:09:99:71:36:93:51:8e:75:29:c3:58:ce:
                    68:fc:a8:0b:1a:d0:ca:6e:4c:0b:a0:d4:10:8a:cc:
                    8c:b4:4c:ee:e5:b2:b6:1e:60:34:1c:64:c1:3c:f4:
                    a6:fc:ad:47:14:43:6d:6e:a6:15:b9:cf:37:a2:39:
                    35:73:ed:04:ea:15:a2:72:fd:fd:26:70:ca:8d:c4:
                    48:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A8:35:E5:9C:7F:D7:AE:D1:55:A4:59:0E:EA:9B:0E:AB:72:89:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1905e0c3-a5f7-34b5-82d4-1403231b0985.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.22.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:06:cb:c0:f7:bf:a0:e3:f4:bd:df:02:b2:86:8b:1e:f2:e6:
         2c:f9:29:cb:3c:e8:18:60:d5:29:29:87:c2:d7:d1:58:45:37:
         d1:f3:e7:6c:d1:11:f4:3d:4b:0a:85:a0:32:2d:cc:05:52:81:
         d3:a6:29:b0:b0:7c:35:ae:c5:77:20:5a:05:d3:55:29:3f:c5:
         59:db:ed:79:19:20:a6:0e:47:99:58:ad:ef:23:37:b7:3d:19:
         68:9c:fb:9a:bd:4f:63:d8:ac:d1:c6:c4:3c:5f:6c:dc:e8:b1:
         f9:e2:95:09:aa:b3:fe:63:7d:93:65:fd:ff:9c:14:30:b4:05:
         d1:bc:68:89:34:df:2d:28:25:8a:ca:25:36:c2:bc:76:48:10:
         12:c8:06:16:d7:a0:29:8c:89:17:d8:39:fa:7b:11:67:1c:69:
         d1:c3:6e:55:c8:a5:39:c6:e1:40:4c:60:03:e8:f1:aa:22:2e:
         b5:43:98:be:3a:d2:a9:44:c3:ab:34:ea:3c:d1:8b:b9:a2:2e:
         55:dd:78:53:a7:e9:15:23:b5:75:bb:1f:6c:bd:fd:3f:c9:c9:
         94:23:70:76:c5:b0:ed:4b:0b:7f:1c:cc:30:18:f3:54:ab:71:
         62:42:3c:e7:1c:3c:eb:a2:39:d5:66:b6:66:91:d0:b6:dd:b5:
         f9:36:a3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:55:09 2025 by rpki-client