Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/94187df6-c0e1-3957-92c1-4ebd1d6b1a03.roa
File:                     94187df6-c0e1-3957-92c1-4ebd1d6b1a03.roa (raw, json)
Hash identifier:          m72e4iw1cW5fvX0l+4yJaiN+oxTDBjzwkYacfn0X4ZY=
Subject key identifier:   38:6A:84:5E:03:D0:35:9C:72:12:C3:95:51:AA:D9:46:5B:DD:09:65
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584917DC0B27A9CD5406AF9FDC80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/94187df6-c0e1-3957-92c1-4ebd1d6b1a03.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.96.170.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:0b:27:a9:cd:54:06:af:9f:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=e431c26e-73b3-426b-9bdc-18e08678f76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bd:b4:47:20:e6:90:c2:ef:9a:d5:d0:99:0e:
                    35:30:f4:f1:f2:51:87:ae:48:b8:03:37:d4:3a:33:
                    41:57:ac:4a:4d:c8:5f:28:c4:96:17:1d:23:db:b7:
                    dc:f5:fb:d5:63:20:02:aa:29:0c:c5:30:48:f7:a6:
                    9d:d6:93:a5:f9:2d:f5:85:58:72:2a:8d:60:1e:99:
                    d2:d3:a8:b7:b3:e0:3e:54:8d:45:c7:14:3c:28:90:
                    b9:75:fe:d9:2e:4d:f1:e9:79:0b:6d:e1:2c:3d:5c:
                    da:27:1d:b2:1e:3d:51:ce:54:4f:7f:51:f8:28:19:
                    81:2f:74:59:0b:fa:6f:37:a2:6c:c5:69:a6:03:47:
                    66:d1:f6:c2:de:1a:3a:dc:ee:8a:0b:16:4a:65:68:
                    19:ec:b5:6a:6d:fb:8b:f0:5c:3f:46:62:68:c9:11:
                    6b:74:5b:f1:13:5d:35:16:b3:1d:42:50:1a:af:b6:
                    51:77:ff:ab:42:fe:2f:41:36:16:8d:74:7f:38:43:
                    63:b2:b8:e7:98:d3:3b:81:c4:69:89:71:a6:1d:88:
                    16:9c:10:cd:20:2f:cc:f8:c5:53:c8:e7:a8:73:ef:
                    f3:0c:91:b2:06:ba:35:6d:84:2f:d2:bd:9c:4a:aa:
                    6b:8a:fa:99:90:d6:82:3e:1f:1b:9e:01:c1:51:14:
                    f4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6A:84:5E:03:D0:35:9C:72:12:C3:95:51:AA:D9:46:5B:DD:09:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/94187df6-c0e1-3957-92c1-4ebd1d6b1a03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.96.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:b3:e5:58:66:ad:87:b7:36:03:74:dd:b9:37:7a:53:bc:91:
         00:0b:14:f9:a1:2a:a0:67:0a:9c:5a:02:5b:0a:dd:3a:57:bb:
         bd:52:7e:4b:f7:eb:d8:05:39:bd:14:38:31:2b:b4:03:d4:12:
         01:fc:2c:be:97:07:66:04:00:9b:59:65:22:ac:f4:d6:73:11:
         a3:6a:25:ab:17:4d:34:89:04:30:6f:c9:d4:88:16:eb:e0:79:
         3e:53:49:b9:9a:be:8b:36:94:7c:19:28:ad:f6:34:71:f0:4a:
         e8:97:82:ae:cc:72:34:ec:90:fc:59:a2:c9:b2:17:46:53:0b:
         99:ee:bb:9b:56:fe:15:4f:4d:f4:b6:12:5e:21:bd:e0:6e:32:
         0b:c0:59:96:b3:f6:ec:55:6e:26:0d:57:ca:7a:4b:27:be:fc:
         5a:8e:d5:d4:b3:dc:9f:81:fd:f4:a9:25:2e:70:73:49:7a:43:
         b0:0b:81:f3:47:06:b9:fe:da:cd:ed:86:82:21:5a:76:7d:d9:
         2a:ca:b2:43:c6:54:f2:53:f8:90:c5:dc:3e:26:cd:34:9d:bd:
         8d:63:c0:92:93:a8:8f:ca:ed:f5:b1:ac:87:ac:e1:a9:41:7a:
         c2:c4:d3:a4:8a:aa:db:8d:96:bd:4e:2a:1b:06:09:ac:4c:62:
         9f:ad:37:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:02:51 2025 by rpki-client