Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a145ce2e-2a62-3bdc-b4f2-dd46b2b79858.roa
File:                     a145ce2e-2a62-3bdc-b4f2-dd46b2b79858.roa (raw, json)
Hash identifier:          3ogDSlNKzl6qEAd8u6MK8p0ipE7BJwhtCOLQHvksReI=
Subject key identifier:   4D:68:88:0D:0F:DA:80:74:31:4C:F3:04:EE:32:14:69:AE:B9:3C:2E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848854B6636F6A61A28AF7ABC40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a145ce2e-2a62-3bdc-b4f2-dd46b2b79858.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     6167
IP address blocks:        75.232.144.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:66:36:f6:a6:1a:28:af:7a:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=a7c1711d-a6ad-48f0-81bf-3f5b802f6a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:04:ba:04:01:4c:e4:81:76:1c:9f:e3:0a:60:
                    a2:bf:aa:79:d0:38:f2:be:a1:11:fb:56:46:b5:3b:
                    70:7d:5e:6f:92:9e:08:43:68:0e:91:14:11:61:c2:
                    35:43:0c:49:03:5c:7a:a9:0f:28:cc:96:f3:a5:2f:
                    35:bd:90:d8:36:25:25:f6:3c:35:32:0d:9e:50:09:
                    2c:28:5e:6a:a3:17:01:a5:80:05:08:de:13:47:27:
                    20:17:48:7a:37:3f:bf:95:fd:99:90:7f:55:50:f5:
                    64:30:69:dd:e4:85:20:81:76:77:d8:a3:02:43:24:
                    28:b2:56:a3:71:2b:31:3b:ee:5d:a3:0d:ec:b1:1d:
                    ad:b3:39:ae:18:22:e1:25:e2:bf:bc:01:9e:a7:13:
                    c5:a3:ad:89:35:aa:ad:2f:44:b0:8f:75:52:30:74:
                    af:03:53:f7:a5:c3:43:f2:d1:cd:c6:49:e2:92:18:
                    64:7d:bd:ff:15:ae:bd:3f:ab:8b:1a:60:c2:ff:42:
                    49:9a:22:2e:fe:77:0a:0a:c5:29:e3:82:01:01:14:
                    56:69:0c:46:c8:02:70:88:13:a8:2d:48:10:ba:1c:
                    a7:c9:cb:4b:b3:aa:de:ac:9d:05:07:22:cd:ae:53:
                    e2:53:b1:65:e9:2f:2d:15:0a:8f:33:0c:30:54:d1:
                    cf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:68:88:0D:0F:DA:80:74:31:4C:F3:04:EE:32:14:69:AE:B9:3C:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a145ce2e-2a62-3bdc-b4f2-dd46b2b79858.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.232.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:13:94:bc:78:f5:df:9f:cf:ed:6e:88:9c:d0:84:27:71:b3:
         9f:57:c4:16:16:e4:c6:a9:69:ca:7b:c1:08:66:68:c0:c7:ae:
         c0:30:34:ca:8f:7d:c9:21:16:ba:28:ce:21:23:4c:84:f8:8f:
         bf:5c:75:c9:c5:a2:2e:06:27:87:23:7b:ce:6b:50:ea:6f:32:
         1e:cb:61:3c:05:9a:c7:4f:34:3d:97:12:a2:0f:e9:b5:84:cf:
         15:6b:cc:39:cf:d0:13:cb:91:b9:2a:a8:1c:21:67:4f:c6:26:
         e7:bf:8a:37:7a:b2:ae:41:40:72:07:46:8f:52:76:73:fe:71:
         58:1d:8a:77:70:96:e6:0a:1a:99:af:22:b2:03:16:7c:96:9d:
         db:91:56:37:d2:5a:a6:df:12:30:9b:b2:88:83:81:58:2f:dc:
         78:09:4a:20:18:0e:1b:e1:ba:c5:50:97:1d:3d:77:30:54:7d:
         d6:26:b3:52:6f:01:14:18:2a:59:1c:08:61:cf:2b:09:a7:f5:
         e3:c8:d8:57:73:32:dd:d3:15:13:57:e6:ac:43:26:20:86:02:
         42:15:d4:49:96:0d:48:2d:26:a6:e3:1c:65:6a:ad:88:93:08:
         3f:b2:46:a6:d1:36:13:66:23:a4:89:62:16:2f:25:a0:ac:a0:
         dd:e7:b3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:49 2025 by rpki-client