Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52d28b8c-9373-363a-aac1-6fedd4f6dd2e.roa
File:                     52d28b8c-9373-363a-aac1-6fedd4f6dd2e.roa (raw, json)
Hash identifier:          jVwdbnL49XJo4uy/Cr4zaQszMA0Lg5EP7guxXjOgmHk=
Subject key identifier:   05:FD:4A:F8:C1:8E:D5:5A:EC:62:DB:CE:CD:F5:53:86:2E:47:60:50
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858493ED3DD6AFC3258D154067CF8
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52d28b8c-9373-363a-aac1-6fedd4f6dd2e.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.97.192.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:dd:6a:fc:32:58:d1:54:06:7c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=27bcafb7-e16b-4531-a254-d8f963710e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2e:5e:94:9d:2c:bf:91:e3:10:a2:b4:a0:f8:
                    b5:57:10:cb:c3:f8:c4:c0:23:e2:b0:ff:df:04:41:
                    6a:b3:a0:1f:69:1c:a6:46:b4:d3:21:e9:f5:5d:69:
                    76:05:e7:e2:9f:65:7c:7c:0f:26:f5:ed:c1:6d:c9:
                    6d:26:11:db:22:3e:33:7a:9c:e2:5e:04:4b:8b:4d:
                    8e:0c:c5:4d:23:b2:43:9e:c2:44:f6:d5:91:26:7a:
                    d8:70:f2:ea:c1:35:bc:0d:34:ac:f5:9c:f9:4a:db:
                    30:53:7a:91:1d:e5:d1:92:27:b3:76:68:a9:32:da:
                    71:3f:87:02:95:1c:38:ec:be:77:58:81:35:53:df:
                    45:22:31:03:0b:4d:96:e1:ab:ab:15:c1:47:ca:11:
                    75:80:99:9a:4b:40:cf:99:bc:6d:35:8e:24:a3:45:
                    15:c4:68:6a:8e:36:60:8d:a6:9e:02:1f:d5:4b:ef:
                    64:d3:42:31:d8:e9:2b:d4:ae:87:2b:d6:e6:2e:0f:
                    38:37:cc:34:a5:77:37:77:21:72:dd:0b:2e:47:ca:
                    89:7f:0a:e9:ff:66:b3:81:7e:1a:02:08:ff:1d:e4:
                    56:14:08:a1:3a:0b:e2:a2:82:c7:b1:a0:f9:92:ec:
                    80:0f:5d:36:63:a7:15:df:01:0f:0b:a9:05:4d:70:
                    43:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FD:4A:F8:C1:8E:D5:5A:EC:62:DB:CE:CD:F5:53:86:2E:47:60:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52d28b8c-9373-363a-aac1-6fedd4f6dd2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.97.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:d7:4b:38:65:ed:1b:24:35:08:3c:41:80:34:0e:a3:b5:5e:
         0d:d3:ae:28:b7:ee:4a:31:9e:3c:bd:85:03:fb:de:1f:de:84:
         73:70:32:52:1b:e7:27:b5:92:c9:ed:a6:f2:af:33:06:4c:a3:
         e3:fe:bc:fa:e8:bd:6d:83:45:6e:bd:87:68:a3:2c:f3:d2:a7:
         4f:23:4f:ba:1d:cc:60:86:14:e3:8e:c9:e3:4e:3a:f2:cd:f1:
         65:0e:82:6d:3b:1a:30:70:00:f0:ef:ef:73:86:ac:c5:6c:bd:
         c4:57:1a:a8:ce:64:bd:27:8d:44:88:6a:9a:5f:68:ce:79:3b:
         a2:b8:c7:27:ac:4a:2f:33:82:2e:24:47:68:81:ff:53:e2:04:
         5a:57:b3:bc:c8:49:d9:a8:34:58:37:01:f1:04:6e:29:52:c2:
         29:97:db:a2:17:98:e5:27:75:c0:a4:b3:20:b6:92:2b:67:0a:
         87:26:7f:ee:ec:e7:30:e8:95:cf:c7:5a:92:75:b9:98:64:96:
         95:29:db:f0:87:83:9a:79:cf:e5:bd:2f:f5:a3:77:94:86:06:
         70:d2:cf:01:98:41:00:f5:f6:09:50:61:94:66:94:85:46:8a:
         5d:21:76:b9:69:f3:9c:88:e3:ab:47:f1:ec:60:a2:48:ac:6d:
         1d:b3:09:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:17 2025 by rpki-client