Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7ebf2d3-5536-3bc1-8a37-44b21c1e8b44.roa
File:                     b7ebf2d3-5536-3bc1-8a37-44b21c1e8b44.roa (raw, json)
Hash identifier:          NZMAUkI+gYQ3HMg5l4KW54NC7KSiinr0MEkOZMkHiOc=
Subject key identifier:   92:2E:D5:DC:98:B8:BB:07:77:FA:65:D2:65:3D:91:55:14:42:19:B3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AFE8F8661CD869F77D720
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7ebf2d3-5536-3bc1-8a37-44b21c1e8b44.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        162.72.1.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:fe:8f:86:61:cd:86:9f:77:d7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=9ef47e66-7d2c-4ccd-b261-c20936adcc3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b1:f1:30:9d:7d:db:37:06:16:e1:0e:34:0e:
                    9c:c5:f0:2d:e1:16:4b:0a:a5:de:46:e2:02:c6:47:
                    85:bb:6e:47:1b:71:14:d2:29:48:47:01:5d:53:de:
                    8e:a5:54:81:6c:63:8c:ec:4d:3e:7f:80:b3:f3:ed:
                    94:a8:92:08:38:fa:de:2e:a6:64:71:4d:b4:09:23:
                    ee:2d:be:77:97:d1:af:7d:ed:06:a6:a6:4a:a5:d1:
                    c1:56:e4:9f:72:13:98:0f:38:3b:ab:e0:1f:7d:12:
                    d5:ff:fb:dd:81:92:11:c5:97:c7:ca:30:e0:83:86:
                    38:c9:e2:7a:c8:76:62:79:60:fe:7b:05:8d:ee:a1:
                    05:38:80:71:2a:c3:e7:ec:66:c3:5e:3b:23:95:0c:
                    fb:40:ee:69:8f:fe:2b:18:6d:5b:87:ba:6d:c8:40:
                    02:2f:eb:6d:ad:ec:6c:1b:96:01:7e:e4:65:26:15:
                    b6:bb:3b:92:9b:ca:b9:7f:4c:5c:3c:82:fb:66:fb:
                    71:e1:30:00:9a:eb:b7:f7:54:07:c5:0e:32:9b:ac:
                    56:26:b6:23:b1:dd:ca:10:aa:15:91:28:83:66:ab:
                    ac:f0:21:99:43:dd:19:e9:6e:11:9f:68:06:30:a6:
                    db:f8:04:7a:03:c8:44:98:b2:33:26:d8:f4:cd:df:
                    ba:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2E:D5:DC:98:B8:BB:07:77:FA:65:D2:65:3D:91:55:14:42:19:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7ebf2d3-5536-3bc1-8a37-44b21c1e8b44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.72.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:ce:52:c9:0a:fd:a9:ab:b8:90:7b:b3:cb:de:d9:c5:3b:d7:
         db:b7:8e:67:3e:47:18:bc:8f:c7:12:5e:63:9b:25:54:08:8a:
         62:b1:d3:06:29:5e:1f:22:99:65:bd:3a:18:97:4b:c5:4a:cc:
         00:37:96:fe:c6:8a:4f:a2:1a:88:93:0b:3a:b0:11:c7:bc:e7:
         57:3e:3c:55:27:3c:d4:10:a0:27:11:54:86:1a:36:88:3f:76:
         28:47:e1:78:08:c1:51:22:cc:41:af:79:5b:18:5d:10:b5:bf:
         ad:48:06:ae:10:13:c7:58:27:5c:07:f6:aa:9e:4a:c8:31:3b:
         d3:4d:4c:96:7e:ab:fc:5e:c4:89:04:96:e5:25:57:1a:a8:d3:
         6a:40:92:a7:9e:1d:63:b2:77:cb:99:36:08:ea:e7:fa:b8:2d:
         77:b5:07:ba:ab:87:e7:4e:ff:81:80:f5:04:0a:78:0a:fb:fa:
         0c:d1:71:ac:63:94:5a:af:ef:d7:43:c6:af:1c:20:ba:3d:05:
         b2:0f:dd:a4:b0:14:63:de:fc:64:a7:33:7b:a6:ed:66:53:c4:
         f1:df:db:51:d9:9f:29:6a:57:12:aa:26:cd:ef:1e:5f:54:b1:
         18:61:eb:32:4e:f8:40:f8:33:02:a6:60:4b:8b:47:e7:d0:80:
         4d:f9:b2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:20:34 2025 by rpki-client