Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe332a68-39a4-3096-aed3-8ddd302d6534.roa
File:                     fe332a68-39a4-3096-aed3-8ddd302d6534.roa (raw, json)
Hash identifier:          AaBDOZZG9UZ4qnnclV4T3JaMh7W2XYWxs6UDYSABcEE=
Subject key identifier:   F9:FD:BB:91:53:5B:2B:75:11:4A:B4:07:25:3E:0C:81:E2:E7:77:2F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848EF61669DFE0607D013972FE8
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe332a68-39a4-3096-aed3-8ddd302d6534.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     20447
IP address blocks:        199.170.29.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:66:9d:fe:06:07:d0:13:97:2f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=57b12473-3481-48b5-83a8-9fd64d10ea3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c4:cc:77:43:34:76:a7:89:47:f2:82:9c:72:
                    b1:1a:ed:6e:de:1d:f7:a4:b7:37:7f:40:c6:ec:19:
                    cb:4a:7f:01:f6:73:ca:4a:e5:fe:e0:1a:96:ed:95:
                    1f:d8:74:17:da:f8:f7:96:ab:ad:81:e9:42:3c:c6:
                    dc:5f:8d:ad:40:25:52:d6:d0:f7:12:33:d1:73:14:
                    77:51:40:36:00:5a:70:67:73:2f:d2:d9:96:6d:44:
                    10:dc:26:ac:1b:dd:41:d3:ff:1c:e3:b1:e3:bd:27:
                    51:c8:f8:ec:21:be:c9:0b:1a:81:7e:7f:ce:e6:bd:
                    23:2c:ea:1c:98:e6:21:9c:19:ef:e7:ec:71:9f:6d:
                    7e:d6:5b:20:85:31:e4:2f:c2:21:84:6e:5c:06:0e:
                    df:5b:0c:1f:63:b7:9d:31:32:56:51:cd:d2:6e:5c:
                    3a:69:e7:90:fc:c5:58:d1:20:34:15:a1:d4:71:41:
                    27:5e:95:66:6f:85:21:f7:34:a6:f9:42:bd:a2:2e:
                    e5:94:aa:58:d3:04:db:b6:a0:83:cf:db:52:f7:0c:
                    1f:5b:cf:fa:48:76:11:07:f6:25:e0:c2:30:7b:8d:
                    5b:4e:41:4e:67:e7:97:a4:71:f0:43:2c:be:ee:b3:
                    f2:87:cb:80:06:e1:70:d1:79:94:78:af:aa:2d:5d:
                    ec:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FD:BB:91:53:5B:2B:75:11:4A:B4:07:25:3E:0C:81:E2:E7:77:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe332a68-39a4-3096-aed3-8ddd302d6534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.170.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:be:b0:f2:c0:90:7e:51:b0:c3:83:bf:44:39:07:1d:38:3e:
         32:7f:0b:d3:82:ae:10:64:dd:7d:79:4c:21:32:f0:ac:61:20:
         ce:e0:12:bf:1b:30:fe:61:ca:4d:76:42:e7:92:a1:77:c2:6c:
         7c:ba:8d:bd:d9:c4:e3:52:69:79:f4:1e:7d:e3:82:74:4d:a3:
         7e:89:d6:da:a2:cb:e9:4f:fd:5b:75:c0:7c:78:a9:30:66:9d:
         3a:be:32:5b:a6:11:c6:e0:56:42:e0:49:cf:77:79:26:af:14:
         7c:48:e7:5a:7d:83:a9:27:cc:72:bd:f8:42:0e:c7:bd:81:41:
         99:c8:ef:9b:60:49:53:a9:d0:ba:7e:79:5d:ff:8b:b7:18:83:
         c3:3f:96:c1:43:7e:81:3c:81:67:16:3b:7c:d7:70:2c:34:6a:
         d8:08:3a:ee:8a:1c:5e:85:52:47:7e:6f:59:0b:b3:cd:9b:b2:
         c7:79:f8:5c:f8:77:ae:12:64:7e:7f:c4:42:78:9d:bd:42:3e:
         44:59:43:a5:fc:3c:5c:59:75:91:7c:60:31:59:23:2f:2e:ee:
         ea:13:5d:d3:e1:a2:6f:12:a3:44:d6:0f:c7:0b:fc:69:e5:88:
         97:90:33:31:3c:f6:b0:22:3a:3e:05:f1:10:12:f6:e3:ae:33:
         b3:10:38:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:04:50 2025 by rpki-client