Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/623177dc-6600-3764-86b0-c33c15cd69de.roa
File:                     623177dc-6600-3764-86b0-c33c15cd69de.roa (raw, json)
Hash identifier:          H6OvjpNXWQH5Atq9cTnazjLkJ9MG+dyax8yTIUGFL9E=
Subject key identifier:   B3:C5:17:75:E7:24:7A:DA:6F:DC:D2:52:29:9A:A4:84:62:A5:96:34
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584917DC074235F4D001673E7200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/623177dc-6600-3764-86b0-c33c15cd69de.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.104.96.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:07:42:35:f4:d0:01:67:3e:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=5e6176b1-a3f0-43e8-b99e-0d47b66ab18e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:03:a9:20:cd:89:06:4a:26:9d:cf:ab:3d:b5:
                    bc:0a:a1:eb:c8:03:2a:30:9f:b6:dd:96:76:51:47:
                    71:d6:21:2e:7c:86:53:b8:ea:d9:90:84:6e:88:13:
                    16:e3:57:87:2b:9c:d0:cb:90:d2:34:fc:b1:29:40:
                    ce:2a:2b:98:f8:bc:1d:33:55:cb:d9:6f:77:25:2b:
                    d3:0c:f4:5a:bb:e8:95:6a:52:10:97:1b:80:a4:4d:
                    86:60:84:dc:ff:3a:df:41:70:6c:a5:ed:4f:6a:08:
                    ea:13:e2:76:d0:7a:91:77:62:1b:50:ba:3d:c8:c9:
                    9b:c4:db:ef:85:2d:f9:b1:0d:23:32:c1:6c:94:7d:
                    1f:a0:37:77:90:0d:eb:ac:75:5b:d6:38:e9:32:79:
                    9a:c0:67:70:ba:00:35:fe:f8:05:fc:86:1b:a4:5e:
                    2f:3d:d6:85:2c:c2:e1:1a:78:d0:83:c6:a2:cf:c4:
                    65:a0:04:6f:82:d1:68:56:57:bc:39:d1:58:d5:6c:
                    96:09:90:ab:b5:05:e8:70:01:8c:88:3f:f2:30:47:
                    22:d9:13:8d:1f:60:53:01:20:01:95:fb:df:32:40:
                    f6:cb:58:cb:6c:13:3d:d4:85:d8:b1:cd:ee:0c:27:
                    43:92:34:6f:21:ac:2c:09:ff:a2:90:77:05:c2:9c:
                    d0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C5:17:75:E7:24:7A:DA:6F:DC:D2:52:29:9A:A4:84:62:A5:96:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/623177dc-6600-3764-86b0-c33c15cd69de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.104.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:02:cf:d5:1b:c8:90:f4:ff:c9:75:ad:91:dc:ef:f0:ed:18:
         8a:d7:32:01:1b:32:d8:f1:53:5f:41:12:5a:a8:86:d5:76:b6:
         20:13:67:57:b1:6e:b4:75:3f:26:fb:97:71:73:d4:5a:2c:7b:
         2b:92:dc:38:ec:ff:a2:44:ed:a2:55:69:51:90:62:94:c3:2d:
         54:57:e3:68:36:17:7d:3a:12:91:96:f9:29:a3:09:6c:8c:e7:
         35:87:53:18:3c:9a:77:63:dc:fc:6e:5f:06:9e:36:4e:b1:37:
         d0:2f:79:ee:cc:1a:7c:4e:3b:a9:08:da:d1:56:6b:85:22:37:
         ac:b2:26:37:57:27:ef:3b:0c:c9:0e:8a:36:08:08:97:fc:e2:
         23:e8:d0:04:fd:35:2c:b1:0c:27:5b:08:f6:5f:e6:b8:91:e4:
         18:d5:7c:e6:5b:0c:d9:36:ec:67:09:69:3e:7b:53:eb:32:bb:
         ac:7b:6f:ab:c7:0a:47:57:d5:fe:8b:5c:09:b9:57:25:28:91:
         1e:ee:19:3f:86:33:74:f9:e0:f0:00:1e:d6:34:99:ed:50:b2:
         13:fc:0a:e4:fe:c9:53:65:54:f2:26:58:2c:bf:ba:5b:91:85:
         ad:3e:93:40:b9:2a:f4:b6:3b:fc:ec:b3:18:43:ec:8c:c2:ac:
         6a:e4:92:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:41 2025 by rpki-client