Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5cd6e8ba-29d2-3d88-8c99-331e083c3358.roa
File:                     5cd6e8ba-29d2-3d88-8c99-331e083c3358.roa (raw, json)
Hash identifier:          kYSVku+wsNzhY9HRD9Yk5HOCSjmRQUh8zW7YU5pbFr8=
Subject key identifier:   1D:BC:80:3E:CE:2E:1F:CB:F1:23:1E:B8:76:C8:DF:B9:B0:B6:D3:AA
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F43285848090FB8E529F60850A8EB6080
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5cd6e8ba-29d2-3d88-8c99-331e083c3358.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     54032
IP address blocks:        72.233.144.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:b8:e5:29:f6:08:50:a8:eb:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=33045e97-b0c8-4a56-bb07-e1dbbdfafc09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:48:e1:c8:c2:f8:4e:71:30:76:63:90:83:4d:
                    bd:db:2a:75:96:4b:35:6f:ed:06:d8:46:b9:75:47:
                    ed:59:1e:d7:b9:1a:44:3a:9a:51:bd:32:f5:ae:3f:
                    dd:e6:a8:cd:df:f5:37:0b:a2:ef:a0:eb:0f:48:0b:
                    80:8c:2b:85:36:7a:34:99:4f:10:24:ae:2a:36:80:
                    f7:c7:b1:07:64:5e:94:d0:5e:f4:cb:6e:15:61:6d:
                    3f:2e:5e:3f:ba:33:c6:bf:88:54:15:01:8b:46:42:
                    40:c2:4d:04:a7:ed:f7:f8:37:0b:22:15:51:b7:02:
                    04:46:c6:17:f4:cc:28:91:c9:e3:4c:f6:4a:d0:fe:
                    a0:b6:1e:1a:5e:73:ac:44:67:ec:a3:e2:58:2f:a2:
                    31:2e:ec:20:63:fc:67:a5:74:54:94:b5:21:97:64:
                    ba:2f:38:c4:5e:0b:48:0f:1c:3d:97:36:47:8b:1b:
                    b7:ce:76:02:63:86:11:e1:ac:36:1e:dc:17:e0:fb:
                    ec:e3:b8:65:2c:14:20:e9:d9:eb:6a:0e:f4:c7:38:
                    0d:be:70:31:66:7a:eb:79:ed:93:a5:fd:e9:d4:8c:
                    8f:11:0e:64:bb:99:6a:85:50:c7:40:c0:d2:4e:82:
                    fa:f9:70:d4:d4:36:9f:01:46:b4:33:41:fd:ab:96:
                    ce:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BC:80:3E:CE:2E:1F:CB:F1:23:1E:B8:76:C8:DF:B9:B0:B6:D3:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5cd6e8ba-29d2-3d88-8c99-331e083c3358.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.233.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:19:8e:8c:43:5b:6c:dd:6f:ce:4e:38:42:a6:10:0c:50:38:
         3a:ee:fe:6b:24:71:1f:00:07:8f:2a:ca:5b:16:20:02:cc:cd:
         82:20:3c:aa:40:cb:8e:3d:94:a6:18:56:7e:48:d9:d1:d5:17:
         95:23:26:ca:02:93:f4:ed:5e:93:ba:90:4f:26:33:99:2f:ea:
         95:c8:ae:83:fb:f0:6f:2c:df:4a:dd:81:c1:b9:9a:8f:c4:35:
         61:e4:4e:07:3d:d9:93:e4:96:60:6f:56:2e:c4:2d:bd:e8:8f:
         8d:59:27:0b:3a:a4:31:c1:81:2f:39:95:a3:5d:fe:af:69:fa:
         78:b8:8e:38:17:b0:21:f6:68:f0:f3:31:eb:e3:01:bb:d2:2a:
         b6:8f:29:6e:60:b0:bc:06:4b:24:f9:65:e6:ec:ab:05:1a:76:
         d1:11:4c:84:34:4b:39:9d:27:00:b6:96:a0:d1:78:ae:e5:9f:
         57:65:b4:35:ae:10:1c:18:85:3d:26:5a:08:c9:01:eb:f9:bb:
         b4:25:14:42:dc:bb:ec:6c:13:65:6b:1a:82:a0:7e:21:cd:22:
         c7:48:fa:3b:b2:3b:d1:11:35:7b:a5:14:51:2d:4a:62:e3:d0:
         9a:64:07:a1:11:e2:39:c0:35:42:67:9a:78:29:7a:ae:9c:8d:
         72:7f:06:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:16 2025 by rpki-client