Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de57bbb6-46f5-3f99-bbf0-671057d9a354.roa
File:                     de57bbb6-46f5-3f99-bbf0-671057d9a354.roa (raw, json)
Hash identifier:          712T6ZE9iNUslYDdiZkEKcINVAhXERV2qbbpfTh7rhs=
Subject key identifier:   48:4B:0B:7B:72:C3:65:1C:98:A3:FA:CA:7E:1E:68:0F:43:F2:1C:53
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584917DC08E88116390261DBA780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de57bbb6-46f5-3f99-bbf0-671057d9a354.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.103.160.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:08:e8:81:16:39:02:61:db:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=e58644b8-501a-4a6e-9f44-6a321e0aca98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c8:7e:54:34:0c:2b:90:ed:a8:d5:f9:80:0c:
                    b2:a9:83:5a:c1:c7:4b:a7:29:a1:0e:3e:2b:9b:e8:
                    58:c7:81:c5:92:66:ea:ea:0d:48:dc:50:a2:e5:95:
                    40:68:89:89:e5:7a:bd:67:22:4c:5b:9a:d6:ca:ba:
                    97:32:2a:80:08:2c:66:b5:d8:06:b6:eb:5b:a0:b0:
                    b8:78:39:88:da:b2:75:5d:ee:aa:35:f7:45:c8:ac:
                    1d:48:3a:0c:ab:04:bc:4a:9c:7c:1d:b1:c4:f4:a0:
                    ee:d9:1a:36:1b:0e:70:8d:d5:62:f2:b2:f7:ea:89:
                    f8:f0:5d:94:71:bb:19:0d:4f:52:77:97:f4:fe:18:
                    ee:13:70:b4:4a:96:70:7d:b4:54:a2:2a:27:7e:79:
                    2d:68:7d:a2:0c:25:bf:e9:c4:2b:22:54:f4:59:fe:
                    8b:54:4e:62:17:f6:1d:3a:42:b3:86:a0:1d:6b:f2:
                    a7:6e:d1:72:12:ec:c8:92:4f:03:9d:ec:f8:db:53:
                    e3:46:05:70:aa:aa:d1:72:42:2e:4d:34:12:80:08:
                    5e:77:3b:1c:c6:0f:bf:e3:d6:87:11:98:84:77:8c:
                    b3:7d:40:95:55:92:c8:ab:f7:a4:a6:5f:d6:f8:d9:
                    15:66:45:26:3e:94:a1:a5:de:bc:fe:19:6b:40:e7:
                    fa:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4B:0B:7B:72:C3:65:1C:98:A3:FA:CA:7E:1E:68:0F:43:F2:1C:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de57bbb6-46f5-3f99-bbf0-671057d9a354.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.103.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ce:05:2d:72:91:ca:fd:5b:bd:b1:79:e3:dc:c7:16:e4:e1:
         a2:ee:98:ec:24:7d:aa:08:92:73:59:a6:48:c3:a4:c2:bf:38:
         3d:f7:6d:a8:78:12:bf:67:67:8a:10:60:80:13:50:ab:8a:71:
         26:fa:2c:ef:92:a9:9f:0c:d9:f9:38:16:53:2b:59:20:6e:37:
         bd:e6:de:00:62:6b:42:7b:5f:81:bc:36:f9:df:17:26:90:bc:
         15:60:69:dd:7b:e4:e5:a4:4b:a0:0e:32:fe:ae:c2:f3:a5:98:
         b3:c4:73:4e:20:fe:ce:72:8e:51:26:13:f1:66:b3:79:97:7c:
         b4:47:97:cd:5c:82:9f:1c:6c:26:41:48:31:6e:e2:9d:97:98:
         61:bd:5c:bb:bf:a7:2d:b7:34:bf:07:d4:27:d6:24:0f:62:1e:
         20:33:68:e8:03:51:af:a2:43:54:94:e5:42:5c:f7:ac:26:c5:
         4d:cd:7c:7a:55:9a:1d:e6:92:e0:af:be:91:e7:a1:63:98:c4:
         72:63:9e:d9:a0:75:bd:ed:d0:59:d9:e9:de:64:0d:eb:39:61:
         90:af:6c:53:e9:1d:13:7b:d7:79:f7:e7:c7:98:5e:5d:9b:b9:
         d0:2b:6b:b1:61:42:bb:9f:28:bc:32:cc:39:32:58:fe:5a:cb:
         15:43:9e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:27 2025 by rpki-client