Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2cb12550-cd8e-3c02-ac8c-41da173c9fdc.roa
File:                     2cb12550-cd8e-3c02-ac8c-41da173c9fdc.roa (raw, json)
Hash identifier:          zyrgCNGoq2Gw9EYPpkw7JQ/PmkQdgQBUzdYcDIdqFKE=
Subject key identifier:   6E:9E:C4:B8:A6:FB:EF:BE:AB:BD:4E:56:2F:05:1D:18:3D:41:17:95
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584917DC0AE12D5D9458B71325C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2cb12550-cd8e-3c02-ac8c-41da173c9fdc.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.96.118.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:0a:e1:2d:5d:94:58:b7:13:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=89fc6a50-167f-451f-8289-30423a2b26da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ef:42:fb:f7:a1:e3:22:44:40:be:98:45:f2:
                    87:0f:31:f9:08:d5:39:ec:9c:9b:9a:09:c9:f1:9b:
                    8d:f2:4d:ab:93:1f:b3:a4:c9:58:5f:54:74:f5:46:
                    a9:1d:8b:2b:df:fb:f2:59:f8:db:74:ab:9d:60:0b:
                    cb:a3:fe:d1:00:38:29:a9:c5:f7:ae:49:b7:57:7d:
                    e2:25:ae:73:2c:0b:85:ad:05:a6:23:38:30:2c:d7:
                    ce:44:9a:0f:c0:cd:89:a6:71:0b:b7:42:dd:47:4c:
                    c6:77:94:c8:7b:de:24:ab:e8:aa:3c:91:1b:de:20:
                    a8:1a:71:96:ab:5d:33:de:65:7e:3b:69:52:18:9e:
                    79:94:83:45:ce:95:ed:4b:cd:e2:26:72:86:e0:09:
                    2d:98:ae:a3:e0:d0:eb:29:f9:bd:4f:fe:1f:16:75:
                    e9:de:e8:7c:3e:68:0c:4f:3c:03:09:8e:f8:dc:df:
                    b3:f0:1a:04:b7:ad:8c:52:36:fc:fd:8f:4a:d0:e5:
                    85:0a:83:65:49:87:7e:bf:d4:9f:34:37:09:bb:7f:
                    e4:11:67:92:70:12:ba:a0:60:f4:e0:ca:3c:da:ed:
                    87:a2:91:a6:fb:81:ac:d7:9f:b9:2f:24:84:43:1d:
                    6d:bd:9a:d6:f3:8a:34:3a:64:b9:bd:d5:2d:07:d3:
                    99:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9E:C4:B8:A6:FB:EF:BE:AB:BD:4E:56:2F:05:1D:18:3D:41:17:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2cb12550-cd8e-3c02-ac8c-41da173c9fdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.96.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:63:70:f8:ae:5e:b3:68:c5:19:76:55:da:d8:41:cb:52:e6:
         7d:c4:c7:08:4e:af:84:95:e6:c0:39:e9:f8:9b:8a:3d:7c:f2:
         c2:e9:aa:81:33:f5:12:e7:b2:43:27:95:55:e1:8c:a4:47:23:
         8b:d2:1f:e4:80:76:11:69:0e:72:42:59:ac:3d:e1:d6:0d:6b:
         b3:93:c6:19:76:8b:ad:73:91:d9:a0:7d:3d:b1:a4:a7:e1:3e:
         28:60:71:e3:ca:19:7d:94:ed:ce:a5:48:74:f8:ff:ab:9e:61:
         0c:bf:e7:48:64:2f:04:b0:b4:cd:41:f9:cc:42:9f:b9:2d:e8:
         1a:5c:33:ab:74:45:5e:d0:15:8a:04:22:b6:51:2d:d5:cf:10:
         1c:60:87:f2:1e:14:64:df:29:40:cf:3a:c5:3a:60:38:a6:a2:
         80:63:fd:96:87:cd:20:32:bd:3d:64:75:a7:0f:e8:cf:d1:71:
         29:a4:9f:59:9e:65:04:66:ef:d0:8c:dc:67:3f:47:4b:93:6b:
         95:bc:14:92:96:cd:7f:0a:da:98:56:ec:9c:63:72:e5:4f:ad:
         69:39:31:c4:34:85:97:09:83:ff:e8:84:2f:09:f4:a8:e2:5f:
         e3:4c:eb:76:47:d0:3b:5e:45:43:d2:dc:cf:49:21:56:48:93:
         a7:e7:58:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:27 2025 by rpki-client