Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a233d918-3ab6-3819-82aa-baa5dd33fee5.roa
File:                     a233d918-3ab6-3819-82aa-baa5dd33fee5.roa (raw, json)
Hash identifier:          XVhOzGJ5g8c9Zuz4+6FchXNUrKJa3TtX0cMuHDVOh1k=
Subject key identifier:   50:07:02:E8:3C:8E:CA:CB:5F:18:A6:FB:4D:6E:2F:00:58:45:BE:76
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858493ED3E99FAD35CB6933EC8F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a233d918-3ab6-3819-82aa-baa5dd33fee5.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.106.248.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:e9:9f:ad:35:cb:69:33:ec:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=f84fb7f8-1212-42be-bea1-e57b510f8481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a8:b7:95:9c:ff:24:82:53:19:7b:de:f8:2c:
                    1a:c1:25:ad:1b:fd:85:95:d6:43:03:c1:b9:6c:5f:
                    37:19:a1:53:f9:80:87:8a:00:ce:f0:56:ef:3c:dd:
                    5d:bc:c3:fa:fc:c9:a7:7f:39:dd:52:88:33:2e:50:
                    d9:5e:45:57:e4:6f:f4:3f:14:91:50:f8:03:1e:5c:
                    c7:7e:c7:31:61:7a:56:c1:b2:b5:d5:79:73:8c:d8:
                    77:31:bd:2e:40:8f:87:8e:0c:bd:c4:cf:5e:8a:30:
                    30:c3:2d:f7:38:ce:59:79:e8:9e:a1:6d:0e:3a:f4:
                    ec:2d:8d:a1:12:91:eb:b9:af:01:7f:21:1c:f8:71:
                    97:82:83:b5:47:de:8e:29:75:7e:cc:fe:66:48:40:
                    f8:3f:b7:a1:dc:b2:78:c9:43:4d:f6:dc:77:17:53:
                    4b:3f:79:3d:0c:d9:ff:e7:86:e8:93:80:ed:35:98:
                    b6:fe:f4:e4:85:f5:ba:91:61:7a:8d:5c:64:3e:27:
                    c5:97:e4:2a:6f:4f:42:65:27:de:91:c8:7e:ae:9d:
                    93:06:9f:53:f6:1b:fa:7e:9b:a9:8b:35:54:8d:cb:
                    c1:0a:bf:95:73:be:00:78:79:6a:55:7b:91:94:d2:
                    f8:16:f9:15:61:81:86:7b:f6:63:8e:a9:ec:32:5d:
                    8f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:07:02:E8:3C:8E:CA:CB:5F:18:A6:FB:4D:6E:2F:00:58:45:BE:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a233d918-3ab6-3819-82aa-baa5dd33fee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.106.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:e0:8a:6b:3a:9a:b0:e6:d0:3d:1d:bf:13:03:cc:4d:25:8d:
         ed:e2:43:bc:1a:60:a9:7f:52:9d:cd:68:23:2e:fc:c3:70:c0:
         78:72:e2:86:98:a9:0d:57:d2:e3:9d:b6:6d:04:4b:b9:ac:6e:
         59:b2:2a:52:a6:d5:3a:56:bc:12:e5:e3:e2:d0:fd:f5:f0:cd:
         d2:ce:4b:01:e7:c6:c3:91:c7:f8:e9:3a:d0:ef:36:12:f4:2d:
         ab:b6:3d:49:c1:ba:5d:b3:27:d4:b2:df:3e:89:ad:2a:a7:b4:
         54:e7:80:83:aa:f8:34:37:e4:2a:01:24:f3:14:72:7f:93:f1:
         63:8b:02:3c:ff:3f:a5:9f:75:59:dc:cd:f5:31:31:d5:4e:8c:
         89:15:da:3c:b2:a4:5b:3a:97:8c:4f:78:a1:28:92:2e:98:39:
         2c:89:db:11:c0:29:39:87:b4:a3:8a:ec:4c:e3:27:8e:81:e7:
         a1:6b:8c:f4:6b:bf:d1:4f:77:47:78:89:d2:c8:cb:3d:b2:39:
         37:ed:d5:9e:8d:60:3d:85:78:3b:94:ff:59:cb:7f:1f:9d:b7:
         de:33:95:64:d5:76:34:e4:c0:64:40:81:e3:37:1b:3e:72:ad:
         0b:31:31:ec:9a:69:ce:7d:12:7e:c7:92:34:ca:d8:54:68:a4:
         9c:22:a4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:54:19 2025 by rpki-client