Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/888cb9b6-6932-325e-ba9d-6f6080343c3d.roa
File:                     888cb9b6-6932-325e-ba9d-6f6080343c3d.roa (raw, json)
Hash identifier:          F4tuNwH0Vfz/tFRUHDvGDBXxFlpxOKJE6rUJJFOXeN8=
Subject key identifier:   BA:BB:3A:33:27:76:CA:B4:7D:B7:4A:48:64:09:40:F0:5A:09:14:23
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584917DC0630F6B5308C8C245940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/888cb9b6-6932-325e-ba9d-6f6080343c3d.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.97.96.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:06:30:f6:b5:30:8c:8c:24:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=6c8ad6ae-3354-4c91-84d8-247530cbb2b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:03:df:5c:bb:23:79:07:41:0f:fa:3f:42:cf:
                    78:31:44:7b:24:95:b6:9a:42:69:f5:fb:f7:23:9e:
                    ba:ab:da:86:69:65:a6:17:e8:2a:3f:16:ab:d8:4b:
                    25:49:17:60:ef:97:ce:1a:97:cd:99:e8:e3:6e:17:
                    28:3f:7d:eb:0b:81:cb:12:bd:8d:d4:e8:1c:05:07:
                    fd:a1:2d:95:15:35:1b:3c:dd:86:d6:52:e9:30:ce:
                    e7:de:39:14:a1:65:7e:45:3c:31:54:ba:98:32:7b:
                    e8:24:44:88:48:d3:a3:69:fa:7f:12:4a:7e:a3:6f:
                    06:2d:cd:28:7f:42:42:dc:0c:d3:90:7e:a2:ad:85:
                    02:a2:3f:94:fc:b2:62:d8:dd:e9:ed:c2:1a:5a:d9:
                    80:dd:c1:ae:09:b9:c3:00:1c:32:e4:07:24:3d:ec:
                    d5:45:16:81:29:d6:d1:48:52:f2:dd:3b:cf:29:19:
                    7e:37:e4:52:cd:e6:22:59:ab:14:09:3b:da:9b:f1:
                    e8:38:34:60:7d:ea:ef:a6:c2:33:51:22:b4:1f:95:
                    9a:ea:78:9c:f2:25:c6:07:02:52:37:53:0f:ba:21:
                    5f:5e:70:e9:09:6a:1f:89:34:f1:4e:93:81:85:6f:
                    f6:de:a6:21:97:a3:6f:38:81:fd:02:36:e5:e9:4a:
                    fd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BB:3A:33:27:76:CA:B4:7D:B7:4A:48:64:09:40:F0:5A:09:14:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/888cb9b6-6932-325e-ba9d-6f6080343c3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.97.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:74:14:0c:bc:0e:e9:08:80:65:1f:d6:8a:92:28:f9:1a:d1:
         36:f1:87:bd:92:a1:be:e7:2d:e3:cf:02:e2:c8:1f:ad:d5:12:
         ba:bd:3f:00:78:3b:12:cf:29:1c:95:bd:a4:eb:ee:45:bf:5d:
         9e:24:e5:3b:b1:4a:06:f1:01:1e:37:34:8c:fb:5c:1c:3c:8c:
         d4:62:77:b3:50:eb:81:5d:9e:af:e6:71:d8:09:68:c0:3d:b0:
         13:f1:9e:fb:ea:c6:46:fc:5a:54:c1:4f:af:26:cf:d3:98:79:
         58:04:d1:4b:57:46:a9:01:6f:73:9e:82:e1:a1:4e:da:89:f9:
         04:55:8d:02:74:b8:38:bd:17:09:69:6a:0b:16:70:ea:16:f1:
         92:66:ca:71:85:fb:52:40:20:c1:4a:f2:3b:e9:25:42:cc:41:
         36:db:74:b0:80:84:e1:22:31:cd:9d:fa:cb:5d:bd:5a:82:19:
         4c:fd:4e:3c:47:f0:33:37:99:46:35:8a:e1:63:ea:3c:5f:d0:
         4d:3e:69:14:f3:9c:4f:72:0b:2e:69:47:2e:b1:e8:88:16:f1:
         94:a2:cc:e9:34:fe:6e:a3:dd:2d:da:a4:05:ea:35:c4:7f:25:
         ab:e1:c2:3d:38:ac:e9:32:00:df:93:a7:1a:8a:2e:6c:22:e6:
         9f:cb:f2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:38:08 2025 by rpki-client