Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10554572-56f3-35b4-94d7-b1e27c32911f.roa
File:                     10554572-56f3-35b4-94d7-b1e27c32911f.roa (raw, json)
Hash identifier:          QI8zw2mpVstrkBNghECqOEvDAO74DOLcL5CoPMYY1lY=
Subject key identifier:   EB:D2:18:E0:BD:AB:54:F4:23:CA:D7:D3:15:85:A1:99:30:AF:FE:88
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858486D905685ACAD08720C4893C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10554572-56f3-35b4-94d7-b1e27c32911f.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     0
IP address blocks:        72.13.32.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:56:85:ac:ad:08:72:0c:48:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=1bb7e211-94b6-4308-8bed-09f8aafdd2c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4d:fe:06:a1:ef:7f:b0:47:f7:2c:23:e5:f1:
                    df:40:5d:cd:86:a0:cb:f9:36:7d:0b:b3:63:87:32:
                    42:9a:b5:a7:c1:a1:07:01:8e:d3:9e:41:de:16:65:
                    c7:06:56:5c:04:ed:af:af:e5:21:ca:b8:f9:33:6b:
                    fb:d7:38:1e:96:bb:39:27:3b:53:6c:4f:6d:ba:f3:
                    32:aa:e2:ac:87:d2:07:2a:06:31:83:2a:83:c2:36:
                    6d:9c:6b:93:1d:6a:8f:27:53:bd:59:05:e5:f1:a8:
                    8c:81:42:6f:b6:12:0c:d6:37:8a:6c:8e:84:b1:d9:
                    66:58:c5:10:09:81:cc:3d:8b:0b:0d:b5:ec:ec:cf:
                    e9:e9:f8:fd:bc:f8:a4:f2:36:21:74:c6:ab:52:25:
                    c9:4b:a2:53:eb:92:b9:b4:a8:ff:f2:71:bc:02:39:
                    b9:00:c5:3b:8c:ca:3b:be:ad:24:17:b0:2e:48:51:
                    6e:31:45:48:8b:be:02:c3:90:df:f5:42:58:c3:6a:
                    e9:38:24:f1:56:ca:8b:0e:5d:cf:81:89:23:65:2b:
                    85:3b:42:cd:7f:be:27:c4:0a:87:ff:4e:ae:1f:20:
                    c8:69:1a:16:2a:1b:ae:fa:f7:12:fb:01:01:9f:2f:
                    37:63:83:14:9b:de:59:02:8c:cc:a5:f0:df:51:66:
                    1f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D2:18:E0:BD:AB:54:F4:23:CA:D7:D3:15:85:A1:99:30:AF:FE:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10554572-56f3-35b4-94d7-b1e27c32911f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:8e:8d:a3:80:0a:c1:dd:97:8b:22:e9:7f:19:8c:f8:e5:3e:
         7c:40:f8:c5:30:92:10:c3:7b:1b:ec:5b:61:2a:47:31:23:f6:
         56:01:40:54:94:e8:b5:5f:fe:61:50:94:1a:80:69:a0:82:d8:
         09:57:ee:6c:01:a8:f7:8b:d0:9a:80:78:32:52:d5:9d:a7:5c:
         56:c0:11:10:f3:25:03:e7:05:37:72:bf:ea:b7:0b:f8:a0:f1:
         34:05:a3:11:fd:a9:f3:76:bf:0d:53:3a:d1:e9:e5:9b:e7:28:
         86:64:13:c2:ea:f6:8a:eb:f6:3d:4b:57:f7:6d:55:b5:d9:1a:
         8f:f9:4c:d8:05:5c:8c:a7:bc:35:fc:72:bf:61:36:4b:2b:ec:
         61:78:49:e2:d6:e1:de:55:50:9a:53:38:1a:ca:77:3e:fe:1f:
         10:55:1a:8f:b3:f2:ff:05:89:e6:b7:1c:cf:9a:5b:be:43:aa:
         b9:f1:17:4a:ab:de:b1:d0:bb:7b:03:84:1f:14:a3:91:1a:cd:
         6f:44:6e:eb:d9:3a:7f:53:75:21:ad:49:4a:9c:e7:ba:e3:b7:
         65:1b:20:7f:c0:b9:d9:51:e1:04:a4:17:5a:0d:b0:94:8b:a7:
         b9:da:56:a9:88:f7:88:a3:d3:d7:3c:05:84:68:9c:67:20:1b:
         77:9e:24:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:16 2025 by rpki-client