Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03fea33a-29b6-36a7-8980-8935108f67f8.roa
File:                     03fea33a-29b6-36a7-8980-8935108f67f8.roa (raw, json)
Hash identifier:          6l/2cdDiOD/V0I2ELERmqGR3l9XnCmdRAdOry8eB1Qc=
Subject key identifier:   73:2C:43:12:7A:CB:1F:9F:F7:B7:13:54:EF:75:B1:85:22:4E:E7:FA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584837201D57F78ECEF4689C8300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03fea33a-29b6-36a7-8980-8935108f67f8.roa
Signing time:             Sun 15 Dec 2024 14:00:53 +0000
ROA not before:           Sun 15 Dec 2024 14:00:53 +0000
ROA not after:            Sat 15 Mar 2025 13:00:53 +0000
asID:                     6167
IP address blocks:        72.104.144.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:37:20:1d:57:f7:8e:ce:f4:68:9c:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 15 14:00:53 2024 GMT
            Not After : Mar 15 13:00:53 2025 GMT
        Subject: CN=5c2dc59b-f523-4f4b-a4d8-dd4fb93ef8c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:29:48:a7:43:66:a8:27:88:e6:0f:97:d9:b6:
                    f3:50:9e:5c:11:67:5c:f5:62:a6:ee:9b:ab:51:72:
                    22:f8:7c:74:3f:6f:30:4d:4a:7a:a6:b0:30:de:48:
                    d8:5f:85:55:39:40:3e:b9:1f:5d:d2:6b:f3:5a:0f:
                    27:f7:89:36:39:c1:f7:9b:ac:44:ca:74:46:8f:e8:
                    82:b6:c1:1b:39:03:d0:e2:2a:b5:d1:7d:f4:b5:2d:
                    a8:16:05:a9:c8:d4:95:0e:e3:68:f3:db:fc:1d:dc:
                    40:c2:76:15:bb:ea:b6:6f:cb:1c:23:ee:22:b7:e8:
                    32:fc:27:2f:23:92:64:d0:49:c0:9d:af:bc:79:61:
                    5e:ee:15:85:d3:13:03:f5:d1:60:be:fd:c6:87:97:
                    32:52:20:ca:42:b1:ca:73:b9:1c:ef:61:b2:b6:be:
                    15:51:7a:20:d0:8b:c1:15:c4:36:1b:8f:cd:98:de:
                    d9:b2:a1:03:de:59:46:78:01:bd:a7:45:08:85:21:
                    d4:47:aa:27:7b:a6:03:0b:46:1b:8b:8f:52:83:0e:
                    0e:58:10:92:a1:8f:f9:db:f0:6b:40:12:cc:55:5e:
                    c5:c4:55:39:b6:c1:b3:27:3d:2b:ef:4d:53:a7:ba:
                    37:85:ee:78:a5:2c:bd:a3:d9:16:c1:a4:80:43:a5:
                    ba:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2C:43:12:7A:CB:1F:9F:F7:B7:13:54:EF:75:B1:85:22:4E:E7:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03fea33a-29b6-36a7-8980-8935108f67f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.104.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:d8:dc:e2:e2:d0:b4:cd:66:84:59:bf:39:ae:11:da:bc:dd:
         04:20:05:0c:48:c7:f8:5c:e3:ee:1a:73:59:0f:af:df:7f:80:
         76:0e:81:fe:22:93:e8:25:47:b8:70:b2:0c:60:64:1c:e7:8e:
         29:ef:6c:e0:f0:37:b7:5d:e3:8c:4a:7d:95:2f:22:b9:72:19:
         fc:1a:ed:c2:11:67:75:0d:de:c8:45:13:e5:a8:9a:35:c9:6f:
         5e:cb:e2:23:c7:c0:ad:bd:cb:d1:a2:66:17:51:8a:75:da:d5:
         1c:eb:dd:db:4d:0c:60:4e:1c:dc:df:0a:bf:29:fa:5f:96:de:
         0f:68:9d:ca:d4:d5:86:9d:ed:ae:16:49:0d:4a:34:37:48:0d:
         ab:0c:a6:c6:17:1f:f2:41:37:7d:ef:37:97:58:2f:1c:a1:01:
         87:cc:59:a3:fe:4e:c4:36:50:25:46:79:23:c9:8d:06:e4:d7:
         82:03:69:98:f4:52:38:09:93:bd:41:31:c8:c0:85:c4:a8:76:
         35:34:14:6f:42:64:d2:e0:52:0c:70:b4:bf:a8:35:80:79:20:
         c5:bd:26:66:cd:3e:9d:29:5b:60:ec:d5:93:1b:2e:71:97:a0:
         e8:ac:84:e8:76:24:57:7a:54:c4:33:7b:cf:64:28:58:25:12:
         03:47:32:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----