Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f72ee645-d729-3e02-95ae-b6ea357e2fa9.roa
File:                     f72ee645-d729-3e02-95ae-b6ea357e2fa9.roa (raw, json)
Hash identifier:          nLbDTu2/Nlyjr0N2KwADT9kYVxJmJolxlyfka1Iv9ls=
Subject key identifier:   2A:E3:AF:DC:83:EC:C3:93:75:37:9F:60:95:A0:39:15:F5:02:12:4E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848854B68E9153C831C92572980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f72ee645-d729-3e02-95ae-b6ea357e2fa9.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     6167
IP address blocks:        75.242.0.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:68:e9:15:3c:83:1c:92:57:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=be6eb6ad-5ce0-4c98-b615-e571f476c334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:03:bc:6f:41:d9:6d:43:d8:12:c1:d0:3d:83:
                    0f:00:fe:6c:fe:18:25:d2:62:d2:1b:1e:da:ba:95:
                    23:4f:82:5a:76:6a:b7:57:23:47:3d:ef:2a:e2:ad:
                    5d:6f:96:0f:96:c3:25:c0:31:f9:9d:3c:1e:10:59:
                    73:ad:8e:82:de:57:59:49:5b:fb:9d:a6:be:3a:6b:
                    63:ba:a4:7e:9e:bc:af:d3:0a:a5:39:b7:2d:cd:57:
                    67:40:e3:41:6b:f5:de:09:e1:93:b7:07:f9:86:30:
                    65:3a:dc:ad:4e:26:93:7d:46:02:aa:e3:60:b0:52:
                    a0:9a:c9:da:5a:0e:5a:ea:c2:f4:df:6b:3c:34:99:
                    6c:a2:9f:69:bb:60:f4:b2:26:ef:1a:fc:19:af:a1:
                    41:a6:b5:f9:44:68:d9:09:45:c6:a6:22:fc:90:c9:
                    08:96:3f:bb:65:26:c4:d8:58:f1:c1:9c:e8:6d:2a:
                    99:24:84:fc:c1:66:eb:73:f8:f1:66:db:70:e8:ae:
                    bf:68:51:72:0d:a3:5d:32:80:58:ee:06:ce:ea:42:
                    83:db:cb:bf:f9:2f:2e:7f:37:f9:09:8a:47:f8:38:
                    55:cf:fc:35:97:58:fc:62:38:09:c9:de:64:75:32:
                    6d:e1:e9:f5:2b:5a:a4:53:bc:04:0d:c4:17:a0:59:
                    b3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E3:AF:DC:83:EC:C3:93:75:37:9F:60:95:A0:39:15:F5:02:12:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f72ee645-d729-3e02-95ae-b6ea357e2fa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.242.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:75:7f:63:b8:cb:ae:a6:69:c1:78:42:16:e9:2c:4a:46:54:
         d0:11:58:e2:e5:f0:f9:02:09:bc:03:b1:d4:23:7a:9d:89:3c:
         df:59:17:fb:9c:87:85:fe:5e:84:d3:f0:8d:6c:19:73:dc:08:
         9f:0b:44:29:a2:1b:7a:4e:b7:08:ab:fb:2a:f4:90:d3:cb:53:
         53:1c:a1:d9:f1:e3:4c:ab:00:3f:cd:f1:7c:c1:45:00:99:2e:
         fa:08:83:88:42:22:dc:17:dd:d4:ab:a6:05:ab:ef:16:f0:6d:
         1b:6a:98:3c:8c:55:e5:ef:86:3f:13:ff:4f:13:d8:59:80:f6:
         34:63:c8:ed:6d:1e:b0:11:30:d9:05:f8:e8:69:a7:e8:b4:c7:
         c4:6b:ef:9e:7a:ba:af:0b:dc:17:0e:28:fd:c8:ed:ff:79:57:
         3f:18:7d:47:ba:42:cc:51:f2:f0:0e:99:88:97:71:09:50:1c:
         ac:e9:45:7c:5b:d0:92:d9:cd:0e:82:1a:73:a5:eb:b7:00:73:
         48:a7:17:1d:b7:6a:df:2d:9e:05:51:90:b5:54:83:95:2a:2f:
         85:57:d5:96:59:c9:65:3b:03:c7:84:2b:13:48:2f:e7:a9:3a:
         0a:1f:1c:0f:aa:29:df:d9:ff:f6:eb:79:ae:de:76:ba:9f:4a:
         b4:05:ca:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:10:40 2025 by rpki-client