Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/feba055e-3ba6-3146-be31-3d78c235193e.roa
File:                     feba055e-3ba6-3146-be31-3d78c235193e.roa (raw, json)
Hash identifier:          C+ZoD197XvjZ935MjWUmIWDZlr2PzHFAnQ5LEdpwey8=
Subject key identifier:   68:17:58:D8:DB:AA:EE:FC:D1:B9:8D:B3:E7:A0:7C:BC:76:23:C4:0A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848854B6150855446F701DE6AB8
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/feba055e-3ba6-3146-be31-3d78c235193e.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     6167
IP address blocks:        75.205.192.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:61:50:85:54:46:f7:01:de:6a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=8e81793f-12e5-484f-ace0-a39d03f28485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c8:91:b3:9d:2e:bc:37:10:04:0e:4c:81:5b:
                    3e:95:24:63:7b:1f:7d:d0:8e:8b:b6:e3:6a:bb:e8:
                    23:af:b1:68:a4:14:3d:97:6c:14:34:a2:64:20:86:
                    3b:4f:f1:b2:d6:8d:17:fe:1d:6c:42:0a:d3:a0:ad:
                    75:72:b7:71:12:9f:16:d6:3d:94:f2:8b:5f:33:0d:
                    43:60:9c:74:2a:eb:e0:57:61:62:e1:16:06:22:69:
                    20:9d:43:38:f7:4a:46:53:b6:bc:27:c6:98:89:80:
                    5a:2c:7a:c4:40:25:bb:03:1e:51:a8:4c:ef:86:37:
                    84:58:51:49:32:11:97:df:cc:1d:92:50:b0:ed:f0:
                    46:b0:a8:e0:30:a7:95:2f:ae:23:d9:3b:dc:23:66:
                    1d:93:95:ef:d1:2d:ff:30:e6:3e:94:59:ae:3e:86:
                    87:d1:a4:b5:59:ef:3d:24:70:6f:a6:b0:e7:ec:64:
                    38:ba:2c:c8:b7:94:c4:f9:aa:6e:b3:3b:8b:fd:c7:
                    db:99:2d:3b:f0:1c:dd:db:42:05:e1:21:dc:4e:d2:
                    5c:d5:21:27:ce:84:8b:fd:99:e1:00:7b:3e:a8:66:
                    29:8b:7e:3d:84:84:36:2d:47:34:0b:ad:03:6b:64:
                    41:cd:47:2f:34:14:e3:2b:e7:7e:a7:b3:6b:29:41:
                    59:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:17:58:D8:DB:AA:EE:FC:D1:B9:8D:B3:E7:A0:7C:BC:76:23:C4:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/feba055e-3ba6-3146-be31-3d78c235193e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.205.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:3d:e9:60:00:4d:2f:78:9f:9f:38:7b:a9:a2:1e:ce:81:3b:
         12:64:e7:3d:1a:9c:6f:b0:53:1c:55:6b:86:8b:75:00:5c:bb:
         b0:b7:d3:72:88:e7:c6:5c:c6:82:eb:cc:ea:79:be:cc:83:8b:
         eb:e4:01:ec:a5:c0:ff:87:df:15:25:cb:a7:e2:6a:2c:60:c2:
         15:95:f2:3f:53:ae:8d:86:17:1a:eb:1f:45:7f:50:07:4a:7c:
         17:dd:ba:f8:95:e3:a8:9c:ec:f9:82:a8:d4:da:c5:b0:e6:f3:
         bb:df:71:3c:3f:8b:83:32:e5:3d:f5:26:11:0e:ff:ca:db:7b:
         48:43:10:cb:9d:51:49:b4:27:cb:bc:6c:64:b8:8f:50:ef:0a:
         1c:27:48:61:87:c4:e9:56:ea:c6:f1:5a:7b:31:59:a6:85:9e:
         d9:02:47:f0:5e:1b:be:12:c2:4b:98:18:5b:1c:3f:a1:14:9e:
         43:af:0b:56:7b:d8:d2:a2:c5:3e:be:e6:88:6a:0c:87:aa:eb:
         84:75:67:f1:3b:7e:30:62:f2:db:ee:3b:ff:87:0c:67:bb:2f:
         6d:f7:62:52:85:24:9e:ac:38:e8:6f:39:35:68:17:74:58:5e:
         04:01:7e:01:48:72:ce:a1:ee:86:80:dc:b7:1f:a1:9e:eb:68:
         e6:32:01:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:52 2025 by rpki-client