Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44c527c6-e8b8-38d8-b741-96af2120c258.roa
File:                     44c527c6-e8b8-38d8-b741-96af2120c258.roa (raw, json)
Hash identifier:          s5gCV6E8gQ/Db97SIixC9FG9tgHyl2e1VoR9uHHmW7w=
Subject key identifier:   8A:9C:07:0A:6D:53:79:63:19:4F:DB:BE:83:E2:7F:18:7B:40:4A:FE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584946054486CC4A318237569D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44c527c6-e8b8-38d8-b741-96af2120c258.roa
Signing time:             Sat 22 Mar 2025 14:51:01 +0000
ROA not before:           Sat 22 Mar 2025 14:51:01 +0000
ROA not after:            Fri 20 Jun 2025 14:51:01 +0000
asID:                     701
IP address blocks:        63.66.176.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:46:05:44:86:cc:4a:31:82:37:56:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 22 14:51:01 2025 GMT
            Not After : Jun 20 14:51:01 2025 GMT
        Subject: CN=2a38e939-1aee-48cb-bb31-bd0a07a3be7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7c:f2:b8:90:f8:b4:e3:0b:56:c0:ba:74:98:
                    7a:97:bb:f4:89:bb:22:96:f5:04:c0:c9:bc:15:5f:
                    2b:a2:00:6b:23:1e:74:63:b4:01:9a:12:e0:1e:9c:
                    07:d8:15:04:5d:6b:85:1b:d5:77:6e:2d:3c:63:c7:
                    f0:b4:53:c4:95:6a:5f:18:66:58:8f:e8:85:31:ce:
                    40:a5:55:5b:5b:f9:6a:7e:81:14:4f:e5:fe:39:4c:
                    cd:37:dc:9f:c3:e6:39:a3:9f:6b:95:ee:82:2b:01:
                    d4:6c:d7:f9:a7:84:5e:46:16:93:ad:a2:c2:91:a3:
                    cd:64:c5:82:6b:4f:75:77:e4:52:e3:4d:d5:29:09:
                    fe:d0:ae:d4:67:ed:c0:8c:15:a4:ec:93:66:53:44:
                    eb:48:82:53:6c:da:2a:8f:11:8c:e7:57:1c:43:d9:
                    42:9c:e1:89:9b:52:4f:4a:0e:74:00:1e:ec:e2:18:
                    e5:2c:8b:09:64:84:0e:e9:22:4e:e2:4a:30:d2:a7:
                    49:08:35:e0:5f:21:89:c1:fc:c6:be:62:93:1a:e1:
                    8b:3a:4e:59:a7:21:33:77:14:84:dd:7b:28:28:3f:
                    23:e2:e8:9b:4f:03:c1:a2:06:59:c2:d9:1c:90:03:
                    88:bb:7a:f7:db:15:23:61:4a:2d:15:58:96:3d:57:
                    77:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9C:07:0A:6D:53:79:63:19:4F:DB:BE:83:E2:7F:18:7B:40:4A:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44c527c6-e8b8-38d8-b741-96af2120c258.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.66.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:87:da:2b:7f:b2:fb:39:c0:7b:2a:2e:30:36:d3:60:2c:70:
         38:fd:70:0a:a7:53:3c:68:ab:59:d2:7d:77:90:15:ab:08:f9:
         26:d5:cf:75:53:73:e4:9f:b0:ed:3a:44:f6:95:74:9d:46:de:
         d5:b6:ca:42:aa:c7:22:d3:8d:38:3d:36:da:7f:1c:a1:d1:c4:
         65:09:79:e5:76:20:b3:75:dd:b9:99:6a:e2:52:54:cc:f7:4f:
         32:24:63:c7:01:0b:c1:90:5d:db:3a:5d:cd:15:45:3d:7b:73:
         cd:37:3e:07:28:1c:d3:41:89:f7:8a:f6:46:38:54:50:37:fb:
         80:a4:46:0a:49:93:70:48:62:75:c2:55:cc:d3:e0:7a:77:8e:
         23:52:4a:1e:91:e3:a0:91:1f:ee:80:9c:96:21:64:fe:04:7a:
         17:5b:ae:b5:21:fb:5b:13:39:41:6e:2e:e9:f4:df:3a:ee:29:
         22:90:c6:b5:80:90:d9:28:10:1e:c7:44:cd:3d:9f:5b:20:bd:
         5d:80:8c:8f:86:71:a5:ce:d4:b8:57:c8:98:a6:48:d0:ab:14:
         bf:cf:f9:97:51:6f:4c:59:cd:e6:42:a7:02:a7:84:cf:53:66:
         22:71:ed:12:d0:b9:4a:4c:b0:2c:cd:59:16:bd:ee:d7:63:49:
         c8:8c:5f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:40:13 2025 by rpki-client