Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c68f896a-9278-358e-8a9b-cbf2c10e23fb.roa
File:                     c68f896a-9278-358e-8a9b-cbf2c10e23fb.roa (raw, json)
Hash identifier:          Ae9mCZeklOthcQYEkwAf2wWowkeot59ByilRqIJo4Yc=
Subject key identifier:   77:53:F4:22:65:6A:87:38:96:9C:32:13:6C:78:0F:7A:71:8B:BA:1E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848854B610640A1E8107414E1A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c68f896a-9278-358e-8a9b-cbf2c10e23fb.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     6167
IP address blocks:        75.205.152.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:61:06:40:a1:e8:10:74:14:e1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=679402db-da7e-47b1-aecd-95d22a5d15f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c4:1c:2a:b2:4b:71:e7:4e:3e:fc:7b:2c:59:
                    d5:18:71:91:66:d8:9a:07:9d:13:2e:3a:51:ff:bd:
                    d0:26:aa:ee:25:98:c8:68:5c:97:76:e1:97:6a:dd:
                    32:45:65:28:49:e5:79:27:ca:43:a6:fb:d3:c0:7c:
                    3c:53:3e:8f:a2:dd:2a:c1:83:15:60:e6:a6:41:e6:
                    fb:8d:ca:cb:3b:d8:ac:0a:98:aa:ef:97:0d:5b:65:
                    be:47:ee:50:77:ad:be:57:8f:86:bf:d2:64:2d:ae:
                    1f:af:33:c0:09:c4:96:66:61:b3:c4:fa:6f:01:3d:
                    18:a4:b3:36:7b:b9:34:d0:b4:61:e8:58:17:5b:14:
                    e1:da:ea:db:b2:7a:2b:6b:d0:5a:03:d6:6c:57:55:
                    8b:17:42:f2:ad:2a:5a:da:36:3b:21:00:73:b0:a7:
                    35:92:b4:c9:83:14:0c:09:af:1d:52:52:1b:3e:4e:
                    f9:9b:0d:c1:88:cb:42:0f:1f:f0:ff:af:44:d3:7f:
                    c4:e3:64:f8:23:57:79:f9:df:9a:24:75:db:1d:65:
                    9b:95:f4:1f:7d:16:25:96:af:ee:bb:dd:1d:85:0d:
                    01:6d:69:98:cb:cc:77:be:36:a9:34:bb:59:d7:fd:
                    4c:96:09:e7:4e:49:fb:a0:76:25:8a:1b:33:55:3a:
                    6c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:53:F4:22:65:6A:87:38:96:9C:32:13:6C:78:0F:7A:71:8B:BA:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c68f896a-9278-358e-8a9b-cbf2c10e23fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.205.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:6e:ff:ab:fa:8f:6a:5d:09:b3:89:8a:55:2a:ca:6c:9c:82:
         dc:19:98:8b:ea:40:0a:f8:78:a1:c5:b4:6c:43:cd:46:3a:39:
         0a:ca:bc:37:2f:30:21:db:83:28:b0:6d:00:b9:fb:b9:7a:2f:
         18:c1:98:ca:67:39:e1:7a:80:24:e7:24:67:54:be:fd:ef:56:
         c1:1c:35:19:6e:da:ac:cb:9a:df:cc:de:ee:68:a0:41:62:07:
         0b:0e:3c:e2:8a:f8:b0:0a:94:51:ae:93:57:f2:62:50:3b:20:
         b6:14:b8:6c:bb:32:2c:30:e1:0d:db:77:b6:8e:cd:40:a7:a6:
         6e:d4:e8:54:03:7e:68:10:25:35:31:47:f0:93:1a:88:d8:bb:
         6b:61:66:02:70:61:39:ba:c4:5e:96:ca:af:27:4d:55:f9:c3:
         f0:4a:a5:9d:cb:6a:90:8f:ae:0d:e6:37:a9:3a:72:14:f6:90:
         33:eb:05:86:fb:50:b2:43:4d:7f:32:9d:34:36:8c:98:44:df:
         4e:5a:86:26:25:34:0a:96:0f:e4:7d:26:d2:db:ca:d9:ee:f2:
         83:28:2e:3f:1e:f5:8b:f2:11:e4:71:66:9a:71:97:12:2d:0e:
         b8:12:ff:ea:67:23:db:c2:6b:36:e0:97:63:9a:1f:0d:2a:30:
         2c:53:5d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:59:59 2025 by rpki-client