Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27ec0a83-10d0-3e47-9879-9790542edc63.roa
File:                     27ec0a83-10d0-3e47-9879-9790542edc63.roa (raw, json)
Hash identifier:          neId8+IXoZGbHAWvvaCkF1UlWPzVFmOyohJadWcoVM4=
Subject key identifier:   2C:94:7A:0D:0A:A3:48:BB:DC:53:D2:78:F1:43:37:55:2E:F0:48:11
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858487CEB41F2C55944D43832E754
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27ec0a83-10d0-3e47-9879-9790542edc63.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     701
IP address blocks:        209.114.64.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:41:f2:c5:59:44:d4:38:32:e7:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=9b0a7de1-52ca-4edc-a2ac-6d9f4111e835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:31:0b:9e:ec:33:2d:68:33:11:17:52:52:b5:
                    9b:b1:23:88:dd:78:31:a6:f8:7b:81:df:d5:be:e3:
                    2a:2b:c6:7c:dd:9e:c6:5a:a8:e8:f4:3d:c3:74:96:
                    66:11:64:cc:d9:14:1d:bd:c2:b8:76:e2:0f:f0:3c:
                    ce:80:fb:03:2a:04:83:9b:39:66:73:42:79:69:b8:
                    2e:6b:e2:d4:01:80:28:80:78:d2:29:f2:c0:ad:d7:
                    02:87:03:ed:f1:25:eb:27:20:d6:17:7a:75:fd:64:
                    e4:a1:5e:21:53:b7:88:60:cf:6b:b3:48:18:81:9b:
                    20:b2:29:59:1f:01:15:cd:45:5f:c2:3f:c6:4c:a6:
                    c0:3d:31:4d:c9:8f:8c:ea:79:b7:69:2b:41:14:34:
                    b8:a0:bd:ac:0b:6f:62:f3:ab:1f:2d:a2:4e:29:f0:
                    10:1e:da:56:77:28:71:98:05:32:0f:56:0b:a9:0c:
                    c5:1a:b8:ac:3d:39:31:e6:bc:f5:3f:c9:ec:b7:66:
                    33:7b:36:43:59:6f:c9:d4:fa:c1:97:d1:4e:d3:53:
                    28:2d:b6:ef:9f:eb:8f:54:49:14:48:59:23:83:46:
                    b0:a5:9a:35:00:cf:60:85:be:53:a5:05:7c:97:d0:
                    f6:0f:4a:c2:ef:00:b3:a8:6a:1f:2f:28:4c:7d:d0:
                    3c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:94:7A:0D:0A:A3:48:BB:DC:53:D2:78:F1:43:37:55:2E:F0:48:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27ec0a83-10d0-3e47-9879-9790542edc63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.114.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:1f:c4:59:ec:c3:db:64:03:e4:fa:35:3a:68:5b:50:23:4e:
         07:21:c6:61:fd:10:5d:27:85:63:73:1a:17:77:57:8e:62:35:
         39:4f:75:4b:6a:08:4f:53:72:bd:e3:cf:8d:06:8a:d5:10:1f:
         cb:f2:27:54:51:d4:38:05:17:de:4a:e1:a0:59:38:4b:a7:be:
         77:d7:14:29:26:72:02:b6:bd:35:78:d1:e7:25:5b:41:da:40:
         ec:eb:c3:de:21:76:4b:84:8f:d1:73:83:6d:ba:3c:f6:78:a9:
         1b:61:eb:51:4d:96:6c:5d:3d:c0:28:74:39:f8:63:01:77:a7:
         2c:f8:fd:11:80:34:2d:29:cf:9c:70:24:8d:61:9b:b8:e8:8e:
         57:6c:1b:a3:2e:0d:66:06:0c:d6:94:10:c7:20:ee:a1:0f:2c:
         80:8a:f7:42:ad:7f:76:2e:fa:20:0e:b3:ea:25:88:fa:dc:af:
         32:ff:64:fd:35:24:e7:11:f2:13:53:d6:76:9f:92:c1:d1:bd:
         50:7c:6f:7b:07:f5:e3:c9:19:c9:0e:e0:ea:a8:50:ce:a7:79:
         7d:81:17:88:b9:30:26:68:52:0e:06:55:0b:12:19:e1:45:18:
         cb:26:c4:f7:27:7b:c4:90:77:dc:b1:8f:c2:e9:c4:e1:44:be:
         49:36:10:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:00:49 2025 by rpki-client