Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32231444-e79b-3f3b-8223-7492123b90ba.roa
File:                     32231444-e79b-3f3b-8223-7492123b90ba.roa (raw, json)
Hash identifier:          vxWx6izZi7HxQpaiazirUsU6WsKbpP8rgxorpmjico4=
Subject key identifier:   F9:CE:4F:2C:58:53:C0:F7:88:A1:E5:40:75:C2:E1:99:97:A8:27:3A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849218423126080D217C3616E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32231444-e79b-3f3b-8223-7492123b90ba.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        97.136.192.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:23:12:60:80:d2:17:c3:61:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=9fb9ee56-5d72-458e-b7fc-99310d614091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bf:54:b5:20:f5:70:19:97:8a:7d:c1:ff:1f:
                    e2:f4:74:64:18:e5:f8:38:39:b2:ad:18:38:0e:9b:
                    5c:24:39:f7:25:ea:74:15:9c:41:3b:09:ca:a2:52:
                    c9:97:85:a3:e1:a7:98:aa:6e:1b:02:3b:b0:08:1f:
                    74:b5:75:55:b0:f8:af:06:be:d6:c2:ab:c1:9d:74:
                    dc:2f:13:4d:1b:73:83:e8:32:d2:3d:b2:c8:65:9f:
                    62:ab:02:2e:ae:e9:10:10:0e:6b:3d:57:bd:f3:2d:
                    03:0d:dd:ea:7f:45:08:ac:78:2d:86:c8:d6:7b:3d:
                    57:a7:24:08:82:68:da:d9:a2:c3:6b:cc:49:d3:1e:
                    86:f4:a8:c2:de:3a:9e:d3:56:26:97:32:59:dd:c8:
                    9f:d0:ad:ca:a5:d4:e5:df:ba:12:77:ff:c3:39:a2:
                    e9:2b:be:3f:db:1c:b2:6a:28:b2:97:72:c9:3b:48:
                    6b:3f:5f:af:a1:0a:26:bd:40:bc:fd:60:ee:0b:81:
                    b8:f4:b0:e1:9f:be:e5:14:17:63:43:ec:2e:e5:47:
                    c9:6a:b6:c1:0c:2a:e4:24:7b:10:23:45:a9:ba:1c:
                    b4:8c:d0:ce:47:33:8a:85:62:63:78:88:63:2d:bd:
                    6c:26:00:a8:02:e2:28:c4:c4:07:57:c0:6f:6c:08:
                    af:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CE:4F:2C:58:53:C0:F7:88:A1:E5:40:75:C2:E1:99:97:A8:27:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32231444-e79b-3f3b-8223-7492123b90ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.136.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:5c:da:a6:7d:05:5d:c9:66:97:f0:e6:93:cb:83:86:a9:2f:
         f0:19:2b:03:d1:9d:a7:b1:a3:b0:71:69:b9:89:a0:04:c3:02:
         4a:8c:3d:20:7d:6d:03:ed:89:a4:25:e1:1c:bf:c2:ed:f7:ec:
         1c:4d:5f:74:9b:5c:b0:d5:00:24:90:1a:66:c6:be:b1:3a:f0:
         08:94:cc:65:7d:1d:72:37:ff:37:67:8e:ab:bb:65:0a:71:ae:
         38:c0:c0:c5:c7:3a:32:62:f5:d4:8d:0a:96:c8:47:55:55:21:
         18:a7:f4:fc:77:7a:cc:f5:1e:8e:77:d4:d2:76:f3:bc:e1:5a:
         6e:dd:5c:2e:d7:f5:e6:24:3c:e1:08:3c:40:39:6a:9d:d3:5e:
         0d:51:ec:24:4b:67:17:66:b3:e1:bb:39:50:75:58:14:be:9b:
         f3:57:97:2a:e0:83:49:73:bd:a2:70:bf:9d:3f:6b:fd:f7:19:
         53:d3:6a:6a:41:06:39:bd:cb:ee:11:48:0c:24:03:ef:9b:9b:
         70:67:58:e1:55:47:94:9c:3f:86:71:a7:31:fa:f4:16:30:b8:
         15:81:88:4e:f2:de:72:38:00:6a:c1:3f:c0:b8:08:67:8d:c9:
         8e:db:1d:73:c3:45:79:cf:97:ab:37:25:cf:8f:51:fa:f1:11:
         99:53:84:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:48:10 2025 by rpki-client