Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/07023894-53f0-3df2-a88c-620199a5b8d0.roa
File:                     07023894-53f0-3df2-a88c-620199a5b8d0.roa (raw, json)
Hash identifier:          h5zLPLWxSwyC9RVB1vQ3MzrG/kW+MO/5ePEuTMlMpGk=
Subject key identifier:   CD:4D:CF:92:4A:B8:7A:7D:8C:B4:39:7E:F2:43:CB:42:89:A2:DD:5D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858482BF55C9AA17CA863B0921880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/07023894-53f0-3df2-a88c-620199a5b8d0.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     701
IP address blocks:        71.255.80.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:5c:9a:a1:7c:a8:63:b0:92:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=cd9693ee-bdd3-4775-938d-bff48826ce92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ad:23:60:2a:d8:ba:ea:ac:73:d5:57:e4:0b:
                    5f:c5:51:67:a3:7b:03:4c:ec:79:e6:a3:d6:0e:9a:
                    b9:dc:ec:3b:02:9c:b3:62:8e:e0:08:10:7d:d8:4a:
                    db:c1:af:ad:6f:21:6f:77:8d:9f:7d:69:90:4d:a5:
                    21:eb:e4:8b:b6:a1:35:9f:e7:3a:39:4a:ed:98:32:
                    0d:78:4e:b9:f2:53:bf:dd:64:c7:a0:47:8d:4d:91:
                    97:b2:c3:50:83:31:00:b9:40:a6:11:89:b5:55:43:
                    6f:e1:61:e6:a1:98:33:95:19:6d:a6:e4:36:3c:86:
                    39:54:2f:3a:e7:8c:80:6b:68:df:9b:b5:81:ce:dd:
                    95:d9:8a:7f:fd:39:c1:3f:58:3a:ad:aa:bd:36:7c:
                    ae:64:60:6b:f4:1e:2c:63:8e:b1:7e:d3:bd:e4:8b:
                    67:f7:da:3f:b2:3a:b5:c2:3f:5e:85:5b:50:30:42:
                    f5:04:5e:2f:13:3a:74:5e:0c:4e:1e:56:00:29:9c:
                    60:f6:9e:b7:5e:c5:f4:eb:e6:3d:34:41:55:41:a6:
                    a9:bd:3f:6f:fa:e0:9e:9a:2c:5c:34:1b:ec:da:af:
                    5e:eb:f9:16:73:b9:cd:cb:f5:ef:64:13:70:2c:6b:
                    41:07:71:52:67:7d:18:3d:27:81:e8:ae:16:d1:3a:
                    91:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4D:CF:92:4A:B8:7A:7D:8C:B4:39:7E:F2:43:CB:42:89:A2:DD:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/07023894-53f0-3df2-a88c-620199a5b8d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.255.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:3e:a1:f8:96:16:93:f5:9e:bf:60:9d:0d:27:6d:01:ac:63:
         ee:db:7f:02:fa:d1:94:e1:ca:b7:0e:d7:db:cb:09:11:bb:32:
         99:70:47:9c:12:01:02:ab:66:ed:a3:c5:5d:ff:ea:c9:84:97:
         ac:a7:d5:bf:6d:57:9a:15:8f:cd:12:35:79:fb:fe:ba:8f:83:
         25:8e:7e:3d:84:00:f7:a1:76:b7:ef:b8:23:fd:2e:a9:53:f6:
         51:04:bc:13:0d:a0:ce:67:86:7b:02:a1:93:84:79:99:6f:d5:
         58:a4:d2:e3:86:ae:1b:41:83:ed:0a:17:cf:74:d8:2c:5f:d7:
         8e:b0:f2:74:d9:7c:98:53:de:10:3d:08:85:aa:18:77:de:36:
         ef:30:1e:95:4a:b0:22:46:41:8f:a6:69:34:e7:12:d1:3f:54:
         f2:df:82:d4:ec:aa:6d:40:c0:44:6c:30:b7:10:d1:77:4f:5e:
         63:b5:9f:26:9e:d3:ab:6c:aa:a7:f5:c7:16:bf:31:72:f3:08:
         ac:b6:07:ae:92:6e:ef:81:9e:2b:ed:a1:76:0c:6d:37:46:59:
         19:69:35:4e:89:82:60:12:54:c7:99:aa:3a:e8:10:2c:da:f4:
         a9:70:7b:95:5f:8e:06:2e:77:00:4f:42:84:36:5a:52:56:f5:
         03:75:39:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:14:56 2025 by rpki-client