Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c26c0b20-8706-3524-a0ea-85fc730e35b1.roa
File:                     c26c0b20-8706-3524-a0ea-85fc730e35b1.roa (raw, json)
Hash identifier:          LblLj3ZxoFZzoOvCg6Z6S1VeSmOWH/QMBCOsr+BB7J8=
Subject key identifier:   62:B6:64:96:1D:4F:48:A9:FD:4A:47:7F:B4:5B:B9:80:6F:4B:DF:26
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847EFEF883B34744901EAB7ADC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c26c0b20-8706-3524-a0ea-85fc730e35b1.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     7029
IP address blocks:        72.25.16.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:88:3b:34:74:49:01:ea:b7:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=b49b3ef9-d097-4dd5-a49a-11f4dd7a558a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7c:c5:cf:e8:a2:0e:de:7b:4f:a4:0b:52:b0:
                    3d:c9:d7:a4:69:4e:47:f5:1e:7e:ba:0a:88:80:61:
                    28:74:c6:66:db:cd:30:ec:fb:81:9c:09:67:31:02:
                    4d:ad:e8:de:21:d9:66:a8:f7:15:f3:f3:f4:6f:3a:
                    0a:ae:f1:1f:b6:dc:72:a1:01:c0:33:5a:1f:71:1b:
                    98:33:de:35:52:8c:9f:24:1b:3f:ac:99:5b:22:f9:
                    84:df:76:64:1b:ca:cb:79:c3:25:50:ea:5a:c7:32:
                    59:5f:3a:d0:0d:04:01:e1:99:fb:57:ea:7b:cb:fd:
                    8f:b0:ee:d6:74:a2:7a:06:a2:8c:43:32:23:08:d3:
                    5e:d0:f1:13:fb:be:03:db:ef:ba:4e:b7:7c:9d:21:
                    49:da:15:6e:4b:1a:0a:d7:b0:c9:8e:fa:2c:cb:3b:
                    64:57:0a:d5:e0:79:a6:f6:e4:16:2b:d0:fa:e6:99:
                    bc:2d:c1:29:93:45:d9:41:0d:50:33:51:55:04:0e:
                    32:d1:5d:16:45:9a:1e:0a:e3:69:96:85:08:0c:0f:
                    96:2c:95:68:75:2d:81:81:bd:ee:db:af:5e:62:70:
                    f1:68:e9:94:15:e3:3a:20:54:b2:e0:4a:23:ad:60:
                    45:0b:e0:c3:03:bf:b1:0a:99:f7:0f:40:73:41:ae:
                    e8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B6:64:96:1D:4F:48:A9:FD:4A:47:7F:B4:5B:B9:80:6F:4B:DF:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c26c0b20-8706-3524-a0ea-85fc730e35b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.25.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:29:1c:7f:f5:f2:da:c4:1f:ac:b9:0d:ef:56:3f:9e:4c:92:
         01:7c:ae:57:76:42:d5:93:1c:f3:05:12:e7:de:66:79:35:7d:
         d2:75:2d:07:07:d3:bb:e2:13:1b:a8:84:68:3d:04:1d:24:9a:
         ec:9f:2f:36:64:42:a8:51:fe:82:e4:60:7a:1d:9c:2c:86:f5:
         6c:96:ea:e0:b8:f7:bc:7a:6a:3e:60:5f:b5:fe:13:95:be:fb:
         10:54:7f:e4:0c:a4:e0:82:67:b9:f4:15:4e:41:e4:9a:db:5d:
         9c:41:24:b1:87:2a:04:88:66:22:a1:73:33:b5:ce:00:e7:5e:
         d7:26:d2:a2:3d:2d:39:6e:5d:8f:59:9a:18:bc:d0:9d:13:f1:
         75:c4:ec:a6:de:85:29:ad:d3:6f:d9:d8:cf:c3:6d:11:ec:39:
         23:b6:c5:87:30:1e:28:91:70:66:86:c4:c0:86:59:1a:c6:6b:
         0f:2d:61:e8:fd:ec:83:f4:25:2f:ef:a9:f8:8d:04:0b:ac:5d:
         89:5b:30:bb:af:8c:47:c5:3e:67:c7:99:c6:6f:16:70:d0:73:
         8f:bb:ec:0f:9d:80:d8:0d:fa:58:01:7c:a9:51:a0:2f:db:b2:
         c5:71:57:2d:53:27:f7:04:7b:0d:ec:6b:47:67:e7:10:ba:db:
         fc:56:1e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:34:07 2025 by rpki-client