Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bbbcc06-2232-37d2-bdd4-b688153df820.roa
File:                     4bbbcc06-2232-37d2-bdd4-b688153df820.roa (raw, json)
Hash identifier:          tfxbbdMfhF7fEXZr5HQmTg7UPO0cjRGzXCykAU2+Los=
Subject key identifier:   4E:A6:9E:E1:CC:B4:1C:7A:1D:66:D7:7D:16:48:0E:AD:F5:03:DD:29
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858487CEB465605668F613A36D940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bbbcc06-2232-37d2-bdd4-b688153df820.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     701
IP address blocks:        207.68.32.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:46:56:05:66:8f:61:3a:36:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=6a79b8a5-003a-4b00-9956-ac6898ed61a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:28:ce:ff:e6:28:d9:b6:8e:8a:8d:e5:4d:b9:
                    4c:e3:8a:9a:c1:53:8e:ef:ab:db:da:79:a4:3f:ee:
                    40:41:29:81:8a:09:9a:89:03:ac:5a:fb:79:c6:0b:
                    d5:0b:63:4c:9f:21:f8:99:94:c9:04:e8:7d:38:8d:
                    be:7d:8d:eb:17:1f:3a:37:6e:f6:99:22:75:d9:af:
                    01:80:6c:f5:62:8a:57:91:20:f8:89:99:c9:e4:1e:
                    b2:6b:e0:50:5a:66:5e:78:3a:ed:73:e3:52:b4:61:
                    aa:95:85:9b:f5:f8:da:4c:5c:16:1b:00:95:86:d6:
                    c1:35:0e:88:71:cb:1c:e6:d9:67:ed:99:62:4c:f3:
                    c1:be:49:5d:9a:18:89:e3:e9:12:6d:17:19:37:2c:
                    98:bb:e9:05:7f:de:4e:2f:ea:ea:18:2d:08:8a:da:
                    1d:87:9a:0b:02:cb:c7:b7:12:15:48:ac:07:d2:3c:
                    4a:4e:d5:30:33:ad:0f:f0:f8:14:3f:15:ae:af:d0:
                    6c:78:a2:0a:cc:d8:10:12:f4:81:ff:be:84:8c:e6:
                    6e:53:b5:6a:cd:50:5f:99:93:af:14:93:28:86:e0:
                    30:2b:3b:09:41:f3:5c:04:60:94:69:d1:6b:41:38:
                    47:13:89:4f:db:0e:15:55:ba:d1:6c:9f:5a:88:d5:
                    03:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A6:9E:E1:CC:B4:1C:7A:1D:66:D7:7D:16:48:0E:AD:F5:03:DD:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bbbcc06-2232-37d2-bdd4-b688153df820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.68.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:61:07:1f:55:bc:8d:17:25:a3:93:bd:15:ae:05:14:2d:7b:
         75:36:e1:3b:cf:50:1f:45:b3:9f:30:f6:68:6b:0b:a4:30:1a:
         32:97:b3:08:bc:c5:d2:c6:6d:90:ce:bc:f2:9e:4a:88:37:d0:
         44:24:70:88:86:8e:37:a4:75:92:c3:91:b6:32:2f:12:9e:ef:
         52:aa:32:c1:a2:3c:41:fd:6a:40:cc:cd:12:6d:9b:71:46:6a:
         2d:89:ca:21:07:b8:51:d1:18:e9:88:aa:76:f9:fc:86:1f:65:
         46:16:c8:17:85:1b:c1:c8:02:d4:d2:1d:c7:70:d9:7f:26:8f:
         1c:13:ab:d2:53:8d:17:51:81:66:a2:fe:15:bd:05:59:a6:db:
         ad:c2:12:7f:13:22:13:31:de:ea:5b:82:0f:da:49:18:a0:1e:
         b7:bd:31:c2:93:a9:65:83:62:b0:05:f6:e4:b5:ab:31:83:95:
         77:47:cd:b6:42:aa:9d:12:27:41:92:6f:30:0d:95:18:a9:8e:
         62:12:4e:f3:e3:fb:e0:a7:30:bd:5c:d7:41:5c:bd:56:10:15:
         2a:f4:84:65:fc:c9:77:fd:17:0a:5f:42:0d:39:25:6d:d4:d5:
         25:53:00:5d:e4:78:b3:82:44:24:31:dc:04:eb:77:d8:35:2a:
         34:4b:e2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:10 2025 by rpki-client