Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15c2a431-0daf-31d6-aaf3-eb552c54a65e.roa
File:                     15c2a431-0daf-31d6-aaf3-eb552c54a65e.roa (raw, json)
Hash identifier:          0UyaK3mvapjOdDZSD/2QU7ej3/1hx8mADKY1TXzhJLI=
Subject key identifier:   7C:64:8B:D8:01:C4:CC:14:3E:2B:21:A2:0A:AE:72:2F:FB:DF:45:A6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584837201DB64CB6E69B5F2948C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15c2a431-0daf-31d6-aaf3-eb552c54a65e.roa
Signing time:             Sun 15 Dec 2024 14:00:53 +0000
ROA not before:           Sun 15 Dec 2024 14:00:53 +0000
ROA not after:            Sat 15 Mar 2025 13:00:53 +0000
asID:                     6167
IP address blocks:        72.104.208.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:37:20:1d:b6:4c:b6:e6:9b:5f:29:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 15 14:00:53 2024 GMT
            Not After : Mar 15 13:00:53 2025 GMT
        Subject: CN=26ac3c69-ccb1-4615-b3bd-e60c37643127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0c:d3:a4:6b:a9:6b:ec:9b:e1:28:39:2a:1d:
                    13:8e:63:73:0f:91:d3:77:44:bd:a6:f3:e0:49:69:
                    d0:7a:7e:35:6a:db:1a:d7:75:be:cd:98:82:e6:c5:
                    7f:ca:bc:61:52:7e:09:48:f5:5d:e2:b8:c2:b7:57:
                    77:91:ca:b8:53:8c:69:61:99:7e:c4:31:37:94:1d:
                    91:bd:3c:9d:9f:53:ab:b6:32:ca:2b:e1:67:53:ee:
                    93:56:f6:e2:f8:30:d9:d7:f3:5c:28:99:96:43:e4:
                    1b:de:70:57:50:3c:81:76:52:53:71:de:c3:2e:2b:
                    59:1d:8b:d9:14:a7:83:12:6f:fe:0c:d7:89:65:8f:
                    fd:55:82:ac:5a:38:ff:ff:69:fc:3e:9e:db:32:c1:
                    9a:32:da:26:b0:29:69:1f:55:42:a6:b2:71:67:b0:
                    33:23:51:3f:ff:f8:ae:97:bd:c2:e7:9b:92:14:1b:
                    9b:af:d6:2b:0b:69:31:c0:72:eb:69:ca:8c:18:3d:
                    62:ea:21:8b:f5:90:10:ef:14:6d:f8:9f:d5:71:0d:
                    b1:9a:c1:58:64:89:e6:81:fe:60:c4:5a:74:89:d0:
                    4e:01:bd:ef:e3:73:88:d0:2e:ae:3a:fa:66:a5:74:
                    b9:5a:39:c7:d5:e7:57:7a:c6:22:e7:7a:64:9a:35:
                    3c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:64:8B:D8:01:C4:CC:14:3E:2B:21:A2:0A:AE:72:2F:FB:DF:45:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/15c2a431-0daf-31d6-aaf3-eb552c54a65e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.104.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:f4:51:16:a4:15:6c:9b:68:71:96:04:51:0f:aa:90:bf:27:
         3f:b7:e3:8f:7f:d2:5b:67:e7:ba:2b:70:c2:90:8d:9b:07:34:
         c0:8c:75:f6:d3:ca:5c:a1:9b:7d:f2:56:62:26:e3:c4:95:6e:
         30:89:7b:f2:3a:c3:38:5c:ad:0a:ec:37:d1:61:c4:6d:c0:74:
         2a:e2:b7:29:8e:1f:39:a5:18:15:54:8a:a3:3e:7c:af:36:1b:
         0d:30:2f:49:c1:46:4c:f6:0a:e3:93:ef:81:39:ba:69:cd:26:
         65:b9:e8:60:12:7f:db:bf:3d:39:08:8d:38:26:26:7c:60:f3:
         c7:d4:2d:d8:77:6b:21:0a:65:1e:86:99:62:44:2e:ad:65:31:
         0a:f4:95:e0:e8:5f:99:8b:63:4c:aa:9e:7e:8a:50:e3:5f:11:
         90:0f:c5:33:f8:ec:48:00:f9:53:c7:8f:9d:5a:b7:55:08:a6:
         4a:fb:10:a8:81:da:90:ab:f5:a3:40:3a:74:e2:ad:03:28:1e:
         6d:57:eb:7b:94:a0:c6:cf:ff:c3:b7:76:f0:c8:46:f8:31:c2:
         66:30:74:9e:0e:67:95:74:ab:9e:c2:14:5d:8c:51:ed:09:79:
         02:bd:5e:b7:67:11:fd:99:1a:e5:d8:f1:70:bb:5a:1b:1a:a9:
         56:a9:1a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:25:09 2025 by rpki-client