Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/94bc998b-af1e-31d8-a55b-eb42f14d24d3.roa
File:                     94bc998b-af1e-31d8-a55b-eb42f14d24d3.roa (raw, json)
Hash identifier:          AAeIPCYuEfy8SwsSE+cVVN0L85UaHoRHS3FgS6oaxF4=
Subject key identifier:   00:DA:80:BB:28:40:BC:D6:E9:08:93:D6:7A:3B:DF:8B:76:A1:11:0C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584917DC0765F1FEFDD55F2256D4
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/94bc998b-af1e-31d8-a55b-eb42f14d24d3.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.104.136.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:07:65:f1:fe:fd:d5:5f:22:56:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=8067e16e-9dfc-448d-8d74-7422004af1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:57:dc:2e:5e:22:f8:27:73:34:7e:ac:01:7d:
                    7a:29:38:e4:ca:b7:7a:39:a6:f4:ca:6a:c5:a2:c9:
                    8f:e4:4a:11:08:26:0c:52:c9:b9:93:35:4b:16:92:
                    79:5e:2c:02:9f:72:e4:45:09:73:c0:9d:2b:c0:9c:
                    6f:14:d4:07:a7:b1:60:1d:f3:b1:16:5a:b1:bf:25:
                    1e:04:0b:ba:03:56:ba:ee:83:ea:e2:b6:d7:4c:23:
                    74:bf:86:34:75:67:b6:1f:79:e3:e1:2c:86:ff:df:
                    3c:6d:c5:e6:9a:25:9e:03:1d:4b:f9:d7:c9:2a:63:
                    9f:5e:b4:b4:06:de:3e:b7:b9:5f:04:8e:5a:07:aa:
                    5a:2f:ff:0e:af:74:80:ac:52:18:66:4d:6e:d4:eb:
                    db:0a:c4:3e:4b:14:6a:cc:5d:f5:e7:f5:19:98:69:
                    94:79:a9:88:55:33:ba:65:cc:0d:c4:1c:e5:06:48:
                    64:1a:bf:b5:63:74:1a:fd:6d:3f:c1:46:a9:d7:c6:
                    33:4e:98:3b:50:7a:5d:76:a6:b1:25:8e:e4:59:39:
                    63:28:a4:b1:63:7c:67:22:43:70:76:a9:1f:16:33:
                    e2:a9:2b:13:00:c3:59:70:f0:94:e4:b0:86:c7:80:
                    97:bc:51:d1:e7:f9:85:c8:58:31:05:3a:39:da:f0:
                    0d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DA:80:BB:28:40:BC:D6:E9:08:93:D6:7A:3B:DF:8B:76:A1:11:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/94bc998b-af1e-31d8-a55b-eb42f14d24d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.104.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:ab:b7:9f:a6:e4:12:84:f8:0a:b7:f5:25:9f:5b:f6:ae:08:
         f7:76:db:00:1e:c5:bb:88:26:d2:2f:c3:83:94:b6:93:7d:e1:
         dc:78:e1:5e:3d:e0:17:06:cf:72:12:b4:1f:99:22:ef:a7:9f:
         87:78:88:46:30:7d:76:af:dd:e4:3d:c5:02:4c:36:8f:c2:e5:
         2f:1a:58:ab:fc:d9:a3:75:d2:2f:17:a6:6a:e0:79:12:3e:b0:
         0f:00:4e:de:3e:bc:94:e3:c5:fb:92:5b:76:31:da:6c:2b:e0:
         2c:1b:18:24:52:d6:73:7d:75:76:e5:af:36:c6:38:28:b0:fb:
         9e:37:3b:56:ad:fc:4b:00:a4:1c:fd:a4:99:01:83:40:15:17:
         69:31:8c:a2:d2:3e:e5:d1:fe:00:4e:f4:53:7b:a9:5c:ec:de:
         aa:d1:39:39:04:32:83:96:d8:3b:dd:e6:cb:6b:82:38:45:97:
         f6:a7:f2:e4:54:e2:46:f2:cb:69:01:18:54:9d:3e:95:cf:7b:
         b8:6d:f8:99:9d:73:50:35:50:5d:65:95:c9:81:76:34:3b:e7:
         8b:fb:f6:ba:d2:b4:eb:1a:6b:6c:b4:ab:47:ee:ba:73:51:0e:
         ff:0c:3b:c9:65:c8:56:03:8e:67:ef:13:bd:db:67:16:b7:77:
         46:13:89:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3Adl8f791V8iVtQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
ODA2N2UxNmUtOWRmYy00NDhkLThkNzQtNzQyMjAwNGFmMWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFfcLl4i+CdzNH6sAX16KTjkyrd6Oab0ymrF
osmP5EoRCCYMUsm5kzVLFpJ5XiwCn3LkRQlzwJ0rwJxvFNQHp7FgHfOxFlqxvyUe
BAu6A1a67oPq4rbXTCN0v4Y0dWe2H3nj4SyG/988bcXmmiWeAx1L+dfJKmOfXrS0
Bt4+t7lfBI5aB6paL/8Or3SArFIYZk1u1OvbCsQ+SxRqzF315/UZmGmUeamIVTO6
ZcwNxBzlBkhkGr+1Y3Qa/W0/wUap18YzTpg7UHpddqaxJY7kWTljKKSxY3xnIkNw
dqkfFjPiqSsTAMNZcPCU5LCGx4CXvFHR5/mFyFgxBTo52vANdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFADagLsoQLzW6QiT1no734t2oREMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTRiYzk5OGItYWYxZS0z
MWQ4LWE1NWItZWI0MmYxNGQyNGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGiIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKSrt5+m5BKE+Aq39SWfW/auCPd22wAexbuIJtIvw4OUtpN94dx44V49
4BcGz3IStB+ZIu+nn4d4iEYwfXav3eQ9xQJMNo/C5S8aWKv82aN10i8XpmrgeRI+
sA8ATt4+vJTjxfuSW3Yx2mwr4CwbGCRS1nN9dXblrzbGOCiw+543O1at/EsApBz9
pJkBg0AVF2kxjKLSPuXR/gBO9FN7qVzs3qrROTkEMoOW2Dvd5strgjhFl/an8uRU
4kbyy2kBGFSdPpXPe7ht+Jmdc1A1UF1llcmBdjQ754v79rrStOsaa2y0q0fuunNR
Dv8MO8llyFYDjmfvE73bZxa3d0YTiX4=
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:46:22 2025 by rpki-client