Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08a4063c-1765-3d85-8a28-f4e6bd3657f7.roa
File:                     08a4063c-1765-3d85-8a28-f4e6bd3657f7.roa (raw, json)
Hash identifier:          tVJ7jN1l1IaWDiymNsJzXOzRSyVevg/Po/8eRM8Vyq0=
Subject key identifier:   02:88:3E:92:3E:69:D4:BE:93:32:E8:EE:F6:A3:A1:AD:AE:C5:58:EF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858485E35C83D71908E8D5298A100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08a4063c-1765-3d85-8a28-f4e6bd3657f7.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     6167
IP address blocks:        72.106.200.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:c8:3d:71:90:8e:8d:52:98:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=56c00115-9a36-4589-91da-7ed836314bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:aa:24:bb:40:5c:1f:fb:8e:c5:70:e6:ae:5c:
                    66:66:0d:11:82:fc:3b:ec:b0:2d:18:96:93:a2:28:
                    99:b2:09:32:8d:5d:35:fd:c0:88:21:04:98:61:b2:
                    46:6d:60:f8:35:93:c0:d9:94:90:ca:ae:0c:6d:43:
                    c1:a3:82:ad:d3:d3:3e:60:11:0c:db:df:b0:66:39:
                    c9:3f:a9:b3:23:e1:7c:4e:ea:13:93:e3:38:fb:5d:
                    80:91:66:46:f1:8e:91:25:bf:2a:d4:ec:5f:c3:1e:
                    c1:a3:f6:ef:6d:fb:47:b5:d3:09:d2:91:57:1f:99:
                    63:93:c4:f6:d9:bb:b1:a6:ef:20:be:4a:39:5c:a4:
                    1c:b5:c5:2b:46:f6:af:d7:4a:17:50:f6:5b:55:ff:
                    eb:17:c2:e8:26:27:80:06:c3:a0:63:c6:1c:f9:17:
                    8f:e7:a1:81:70:f0:99:81:8c:57:44:51:b7:85:b8:
                    36:fe:35:5c:6c:5f:b3:30:09:67:a6:7c:29:05:92:
                    b7:85:a4:fa:76:0b:be:19:a9:ba:8a:a3:06:e5:fc:
                    f8:0d:86:71:36:90:87:43:fb:06:f2:15:90:fb:ad:
                    75:cb:24:69:91:83:cc:fe:54:6c:98:c4:84:d6:9c:
                    23:05:98:3a:d1:5c:bb:9f:b5:16:f9:13:c5:59:77:
                    4f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:88:3E:92:3E:69:D4:BE:93:32:E8:EE:F6:A3:A1:AD:AE:C5:58:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08a4063c-1765-3d85-8a28-f4e6bd3657f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.106.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:89:bc:49:50:05:26:2e:e6:20:d8:95:77:ff:15:83:3f:16:
         f2:ad:c0:24:81:a3:36:bc:14:b3:39:bb:f9:c5:f1:88:1d:e9:
         5b:c8:dc:6d:ef:db:c6:71:09:1a:f0:55:83:f1:cb:f1:11:b9:
         bd:4d:dd:9c:16:99:d3:fc:17:43:6a:d9:b2:95:79:6b:bf:07:
         64:d1:9f:cb:65:94:ee:6d:11:56:83:6c:ae:c9:43:a7:22:ee:
         ab:e3:be:11:6c:1d:fc:25:d1:70:cd:2d:93:cf:74:81:15:f9:
         e9:97:30:c2:cc:f1:7f:63:7e:e5:20:8b:e2:55:2b:56:8f:10:
         12:32:4f:37:38:95:9a:b1:5a:44:8d:18:66:5e:dc:b6:a6:f5:
         1f:d3:1f:b6:c0:2e:40:74:c4:d4:6c:c3:a5:85:e4:26:77:d0:
         c7:19:ae:21:7d:f5:fc:0b:26:8f:b4:0a:54:5d:5e:d7:4b:1a:
         b9:e9:da:a7:5a:85:12:1b:35:ad:e1:33:64:f0:7e:95:7d:f9:
         09:ad:94:4d:a3:f0:bc:f0:a9:52:6a:28:1d:79:0a:56:05:5c:
         0a:2b:e7:5c:ef:82:58:70:28:6a:6c:44:72:f3:99:37:37:99:
         49:2d:55:6b:86:86:56:32:96:f4:5a:cf:b1:26:80:22:0b:86:
         d2:99:ca:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEheNcg9cZCOjVKYoQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk
NTZjMDAxMTUtOWEzNi00NTg5LTkxZGEtN2VkODM2MzE0YmQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaoku0BcH/uOxXDmrlxmZg0Rgvw77LAtGJaT
oiiZsgkyjV01/cCIIQSYYbJGbWD4NZPA2ZSQyq4MbUPBo4Kt09M+YBEM29+wZjnJ
P6mzI+F8TuoTk+M4+12AkWZG8Y6RJb8q1Oxfwx7Bo/bvbftHtdMJ0pFXH5ljk8T2
2buxpu8gvko5XKQctcUrRvav10oXUPZbVf/rF8LoJieABsOgY8Yc+ReP56GBcPCZ
gYxXRFG3hbg2/jVcbF+zMAlnpnwpBZK3haT6dgu+Gam6iqMG5fz4DYZxNpCHQ/sG
8hWQ+611yyRpkYPM/lRsmMSE1pwjBZg60Vy7n7UW+RPFWXdPpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAKIPpI+adS+kzLo7vajoa2uxVjvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDhhNDA2M2MtMTc2NS0z
ZDg1LThhMjgtZjRlNmJkMzY1N2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGrIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACeJvElQBSYu5iDYlXf/FYM/FvKtwCSBoza8FLM5u/nF8Ygd6VvI3G3v
28ZxCRrwVYPxy/ERub1N3ZwWmdP8F0Nq2bKVeWu/B2TRn8tllO5tEVaDbK7JQ6ci
7qvjvhFsHfwl0XDNLZPPdIEV+emXMMLM8X9jfuUgi+JVK1aPEBIyTzc4lZqxWkSN
GGZe3Lam9R/TH7bALkB0xNRsw6WF5CZ30McZriF99fwLJo+0ClRdXtdLGrnp2qda
hRIbNa3hM2TwfpV9+QmtlE2j8LzwqVJqKB15ClYFXAor51zvglhwKGpsRHLzmTc3
mUktVWuGhlYylvRaz7EmgCILhtKZytQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:27:46 2025 by rpki-client