Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9aeda3b7-1dc4-3ecb-b3a6-17131b604a98.roa
File:                     9aeda3b7-1dc4-3ecb-b3a6-17131b604a98.roa (raw, json)
Hash identifier:          DEqFvf2bQljfSanUFMiOZnTFsfLcwIYOlVONLkdgQVE=
Subject key identifier:   86:B2:36:0A:94:9F:71:57:88:4E:12:A1:1B:60:63:73:94:45:6C:37
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858493ED3E1462DA5D18AC41EDE80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9aeda3b7-1dc4-3ecb-b3a6-17131b604a98.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.108.8.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:e1:46:2d:a5:d1:8a:c4:1e:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=3d0bc1d4-0fae-4895-b45b-8d55a3509dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:91:f7:8b:09:9c:92:c3:d1:cc:f6:f2:b7:37:
                    73:38:11:60:50:a5:35:76:25:b2:ba:e0:8b:9b:8c:
                    06:71:4e:0d:48:5a:81:88:0b:af:7b:ad:8d:f0:ff:
                    df:cd:81:e3:55:25:65:4c:bd:be:08:f5:1c:48:f4:
                    3f:3b:df:b8:68:29:29:d4:4e:0c:e8:f8:6b:db:dd:
                    25:f7:ef:b6:64:c7:67:46:fb:87:d4:e6:50:de:91:
                    47:02:84:1d:53:57:f5:ca:e7:58:54:68:d7:e3:c4:
                    86:d5:d5:86:b3:52:6a:50:7d:4c:dd:d4:64:dc:c4:
                    f4:78:f4:27:e6:54:a4:5e:42:38:87:3c:3c:b1:06:
                    39:96:b6:de:c1:49:49:41:cb:24:45:86:81:b1:0d:
                    b6:bd:2e:02:b5:77:66:2a:f9:c0:93:7b:56:eb:f9:
                    4f:1e:8d:ed:d2:b8:68:fe:8c:01:59:81:a5:ec:10:
                    a2:55:6a:96:87:0d:8c:43:85:99:68:60:d7:4e:d7:
                    a0:57:c9:d6:5b:d2:64:31:c2:f7:d3:c2:3a:ec:14:
                    41:b6:fc:f1:21:f8:70:49:4d:00:db:9b:6e:5b:de:
                    85:f7:7b:16:ad:c7:13:6b:ee:eb:e1:9a:56:a4:e5:
                    73:b5:c0:f1:7b:43:1d:5f:4d:9e:87:54:ff:e3:01:
                    dc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B2:36:0A:94:9F:71:57:88:4E:12:A1:1B:60:63:73:94:45:6C:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9aeda3b7-1dc4-3ecb-b3a6-17131b604a98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:f4:ab:b6:94:c6:9f:89:fe:21:12:15:8c:de:b4:95:53:74:
         7a:f6:c0:f8:6c:32:b4:69:32:5b:e0:0f:28:68:83:2f:2d:bb:
         a5:7c:92:11:a3:f5:d4:92:d0:2a:df:16:ed:84:20:9d:09:23:
         cb:34:32:c1:5c:70:2c:16:24:c7:d5:dd:ac:ed:4a:33:75:e9:
         27:5f:a8:31:0b:79:ec:7d:34:98:4f:31:b9:20:a1:ea:13:d5:
         3e:d1:e5:a3:49:19:7f:43:7f:dd:5b:8f:40:3f:65:cb:3e:7d:
         5a:ec:22:1e:0e:9e:7e:82:7c:64:b1:b6:98:79:c3:8b:dc:38:
         98:13:e3:fc:d9:b7:41:e5:02:bd:be:e1:96:9b:9d:6e:8b:15:
         b1:a6:8e:fe:cd:18:1b:1f:57:1d:26:7f:5f:d7:b5:fa:1f:8f:
         f1:0e:07:ce:9d:93:90:f9:59:a2:d6:6e:98:11:4e:26:8a:1f:
         f5:9d:2e:58:38:21:5d:5c:13:31:5b:a7:4e:35:cc:ca:81:e9:
         f3:d8:5f:10:ef:eb:b5:cb:9d:29:ba:58:4f:08:d7:e8:09:62:
         45:b2:4b:25:11:07:80:dc:57:ab:ea:7a:69:23:1c:a7:be:ae:
         c4:ef:aa:2f:37:90:43:8f:e5:96:18:02:93:c7:33:e0:4e:61:
         4a:00:fb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:28:24 2025 by rpki-client