Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a98cc2c-b12d-361c-be77-b97d0601456c.roa
File:                     5a98cc2c-b12d-361c-be77-b97d0601456c.roa (raw, json)
Hash identifier:          1GjODJnWRSro6jtasv7KpE9wDloPk9wai3K9mTUoypY=
Subject key identifier:   DD:81:03:7F:21:B3:08:B5:39:FD:73:30:4E:60:C8:6D:A1:E2:C3:B6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858493ED3E67171693BC6FCD82180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a98cc2c-b12d-361c-be77-b97d0601456c.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.102.176.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:e6:71:71:69:3b:c6:fc:d8:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=fb0e6543-65e2-4b87-8667-bc8ccb53111f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0f:a1:d7:76:cf:91:35:1b:9c:ef:1b:80:44:
                    b9:ab:41:1e:c7:0c:84:b3:e9:ab:39:80:a8:b5:e5:
                    6c:5b:74:34:92:ae:07:4c:c3:89:3e:86:ff:01:18:
                    47:3c:6a:02:83:4a:89:18:30:ea:e4:9b:34:c7:e1:
                    27:52:b7:f1:5d:50:a6:60:09:1e:e5:a9:86:22:d7:
                    f4:ab:4f:fb:7c:6d:6c:59:d5:dc:3a:71:65:41:d4:
                    dc:c7:d6:a1:78:0b:0a:16:58:b7:57:f2:cc:01:1f:
                    c6:b0:e8:ea:60:42:f7:4e:12:fb:91:96:99:85:59:
                    a1:ba:82:2f:b7:56:6a:b8:53:76:30:b0:a5:02:e5:
                    6b:0a:48:d4:cb:17:b9:6e:ac:90:2a:08:d3:ee:de:
                    3c:16:32:b8:39:6e:a1:81:a5:82:8e:3d:24:c0:e1:
                    87:b9:36:17:95:1c:3d:29:5b:01:7e:60:44:29:5b:
                    e2:4f:0e:e2:a2:2f:80:1c:a1:27:eb:dd:fa:11:66:
                    aa:bd:6f:12:08:ac:11:60:65:33:4e:e5:93:da:74:
                    ed:ea:93:70:ed:24:e2:7e:29:db:16:f0:6d:8b:89:
                    4e:20:0b:97:1b:fd:1b:38:7c:89:86:ab:9a:a3:e0:
                    e1:d3:11:c3:fc:ce:0f:37:1c:5d:fe:62:73:d7:27:
                    c0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:81:03:7F:21:B3:08:B5:39:FD:73:30:4E:60:C8:6D:A1:E2:C3:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a98cc2c-b12d-361c-be77-b97d0601456c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.102.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:40:0b:c1:2a:33:cb:0b:09:bd:e8:da:98:f3:db:07:da:8e:
         e1:ea:2d:0e:16:fa:2b:7b:0e:58:05:bf:81:28:dd:17:42:37:
         f2:7f:68:0f:0d:7b:b0:85:f4:0a:b3:2a:30:31:19:36:64:a7:
         ee:a4:18:8e:d7:5e:2f:ae:96:07:23:17:f0:16:33:43:7c:70:
         dd:81:5d:17:cb:1a:63:a6:82:bc:7b:d7:cc:fe:fc:3a:aa:a7:
         66:1b:6a:ec:15:5b:05:65:8d:0f:58:30:f3:f2:45:16:6e:2f:
         00:83:5d:2a:02:84:e5:16:e7:99:24:2f:14:b0:f6:68:8a:a7:
         a7:35:b4:e3:8b:d2:08:61:b0:49:15:7c:a8:a7:85:41:23:c5:
         cb:fa:ad:6e:07:00:36:45:8c:9b:0f:c8:da:9d:4f:aa:7f:b2:
         99:17:17:09:da:d0:83:34:7a:2d:e2:ec:08:9d:5f:59:c1:da:
         35:c6:0c:34:cd:f1:a9:a7:bc:cd:69:b1:52:25:f0:ee:98:bb:
         b8:f8:b8:9b:37:ee:fb:7a:ae:e2:33:dc:09:c3:c4:9a:e0:d6:
         83:85:99:ac:8e:a3:71:8e:2a:95:c5:06:18:d9:0c:f8:98:03:
         b6:47:50:88:ad:04:a1:7f:77:70:55:b5:b9:3c:a3:2f:3a:0c:
         25:8f:ae:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:18:56 2025 by rpki-client