Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a365bf7-1aad-3494-8eef-085a30eed65b.roa
File:                     2a365bf7-1aad-3494-8eef-085a30eed65b.roa (raw, json)
Hash identifier:          jWqzg9iAJED5+7DE2yBnmRw9iz3NH2/qDQHJ9+5tnB4=
Subject key identifier:   93:85:CB:F6:A2:26:DD:00:F5:EA:E4:3E:14:BB:DB:E8:24:33:26:91
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858490B4C29DBE72FAE08638D7D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a365bf7-1aad-3494-8eef-085a30eed65b.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     701
IP address blocks:        96.240.144.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:29:db:e7:2f:ae:08:63:8d:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=20acf09c-3072-4fba-906d-4b8978a56f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c8:ad:b7:9d:2f:13:39:85:28:a9:35:6d:8b:
                    7c:da:5b:53:86:b3:fe:13:fe:18:60:c7:04:8f:dd:
                    88:f0:5b:a1:10:ad:ed:e9:e5:9b:21:d8:21:4f:73:
                    a7:59:98:96:99:62:4a:3f:3c:1a:94:a3:c1:34:ff:
                    25:67:9e:9a:4b:1f:9c:88:2f:4e:3f:d8:39:cc:3a:
                    aa:d4:79:40:5e:7a:b5:10:1e:69:c3:cb:d5:0f:bd:
                    2c:ec:12:44:77:f9:99:db:88:92:60:dc:41:bc:a8:
                    8c:39:5d:83:be:63:a5:65:1c:b6:ac:ca:ab:7f:92:
                    c2:31:e4:18:ac:db:ad:2e:c3:8f:1c:08:7b:20:f9:
                    f6:aa:1b:77:3c:7e:fa:dd:e4:89:2a:27:19:e1:dd:
                    3f:f4:78:13:e3:ad:9c:dc:fe:73:13:22:e5:96:4f:
                    38:49:94:c8:7c:1f:0e:d6:ba:a3:24:ef:09:9a:97:
                    87:3d:40:99:ee:a5:84:f5:72:70:84:55:0a:a8:99:
                    10:7d:e2:b8:89:d5:4f:c9:96:4c:b1:29:a0:be:bc:
                    02:dc:26:12:8c:b3:87:3b:a1:a0:ef:02:5b:6a:90:
                    d1:d8:d0:ad:cd:38:e5:a4:81:5c:c7:b2:49:97:14:
                    f7:c7:86:8d:14:e0:a5:02:b1:54:1f:62:1b:b6:e7:
                    21:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:85:CB:F6:A2:26:DD:00:F5:EA:E4:3E:14:BB:DB:E8:24:33:26:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a365bf7-1aad-3494-8eef-085a30eed65b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.240.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:ef:0b:b2:19:04:db:e3:51:e6:dc:78:e2:9c:17:8e:db:cc:
         76:e7:0c:f2:97:ab:a9:26:5e:63:03:a0:b9:21:4f:1e:b9:68:
         10:9a:84:70:ff:19:a3:92:1b:dc:90:1e:c1:bd:95:2d:6e:ca:
         a0:96:6e:d0:4d:f3:14:8a:a9:d5:db:38:6b:eb:ad:7e:66:87:
         76:4e:64:9d:1f:17:bc:e8:68:c6:37:5f:51:85:1b:60:ff:4a:
         a7:87:88:05:1c:7e:dc:c2:6e:7c:ac:01:09:86:5d:1d:70:81:
         13:49:f7:7b:94:28:ba:aa:2a:2d:ad:5c:04:53:e4:fb:b4:80:
         a6:ee:fc:c1:1b:57:9d:58:6f:02:55:95:76:21:7f:6a:f8:7c:
         33:53:30:5a:8d:2a:b2:2c:02:14:39:b6:b5:5c:84:a7:ff:02:
         64:60:ed:da:99:fd:1f:2c:45:42:2f:41:42:fe:31:56:88:42:
         09:dc:67:f6:5c:c9:68:ca:0e:3e:39:c7:a7:d5:19:4b:2b:e1:
         cf:89:1e:64:77:c7:94:fe:62:b0:40:c8:4b:45:21:e7:11:e1:
         27:03:70:97:54:1b:e8:f4:90:92:13:f1:0e:91:05:e3:08:df:
         dc:e0:7a:31:0c:08:ac:87:41:23:c4:9b:04:4a:75:aa:de:79:
         bd:47:4e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:52:23 2025 by rpki-client