Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1ef5478f-136b-339c-bf85-385483e785e2.roa
File:                     1ef5478f-136b-339c-bf85-385483e785e2.roa (raw, json)
Hash identifier:          cDIGJfEK6BeYwOTYtr1in6mzkVrbBxhRl0jNpqXud9M=
Subject key identifier:   63:0E:3D:18:3A:5B:DE:EC:52:B9:F9:65:78:60:21:ED:4A:02:5E:94
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848854B67A11AFFB4827088DE00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1ef5478f-136b-339c-bf85-385483e785e2.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     6167
IP address blocks:        75.239.136.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:67:a1:1a:ff:b4:82:70:88:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=860b5445-18d8-4127-aa39-0e61cd3b2cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cb:4a:18:42:88:0f:e2:69:2d:b5:4f:55:44:
                    53:78:e9:33:61:f3:66:a9:bd:90:e0:d0:76:ca:40:
                    9e:7d:97:f0:58:3b:9e:47:fe:97:b3:57:63:dc:ba:
                    bd:b2:81:3e:88:4b:8f:ea:cb:67:ae:8b:8f:43:26:
                    f0:44:0e:3d:54:e5:c0:f5:fd:a8:9c:8f:13:3e:58:
                    32:4c:bd:4f:84:d7:0c:12:2e:2f:4a:0a:b4:30:1e:
                    86:22:a1:1e:a5:7f:02:e3:03:0f:0b:9c:b4:60:f1:
                    ad:b1:c6:83:54:cb:a0:af:4d:06:18:c6:ef:04:b8:
                    59:7f:29:e3:cc:10:c1:bd:d4:28:1e:db:1f:d1:62:
                    8f:3c:a3:21:e1:63:67:80:c8:f1:9a:cf:08:ee:65:
                    1d:5d:64:2c:f4:6c:c1:4d:ad:e2:45:5b:4b:84:c1:
                    f8:04:ca:1f:74:1f:8c:03:ba:22:22:fb:ac:35:03:
                    24:8b:34:9e:19:40:ef:08:17:4a:f4:d2:fb:0e:86:
                    d7:fa:08:be:5e:92:54:f3:6d:f1:48:0f:cc:7a:9e:
                    ba:50:d5:02:38:d3:62:0d:df:23:cc:15:6e:52:26:
                    26:1c:c9:89:ca:85:a5:43:6e:2e:1d:96:cd:c2:f5:
                    3d:e2:0e:63:1c:e7:bd:30:02:89:97:bb:19:bf:c3:
                    07:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0E:3D:18:3A:5B:DE:EC:52:B9:F9:65:78:60:21:ED:4A:02:5E:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1ef5478f-136b-339c-bf85-385483e785e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.239.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:37:cd:19:65:25:06:4f:c5:5c:46:53:ed:e6:50:ea:4c:8b:
         2c:8b:e1:42:7d:a1:e6:50:10:d1:b3:54:38:c8:d6:11:37:fa:
         f5:5a:8d:66:36:b3:cf:ef:0e:0c:8e:c3:64:c2:f5:72:49:9f:
         ab:a4:49:d6:f8:e9:78:ca:e4:d2:9d:fb:56:da:08:d2:b3:bd:
         85:b7:56:d8:0a:11:a9:a1:94:2b:71:1e:65:cb:e6:66:7a:07:
         ef:bd:24:68:81:c4:ee:f6:85:62:b0:14:89:48:17:0b:f0:e7:
         c0:a7:9e:1e:66:ba:70:80:f6:9a:10:4b:a4:b3:f4:34:a6:5e:
         43:e2:07:53:d0:7a:66:1d:21:b2:2c:31:86:04:a8:c0:6f:ad:
         0c:f1:fe:ff:6b:21:a1:f3:f2:e1:b9:5e:95:4f:e2:28:6d:1a:
         c0:a6:43:3b:7e:3b:d2:c1:f9:2a:fc:85:a8:16:e1:da:48:cc:
         ea:d4:87:a0:72:95:2d:86:b8:09:71:52:13:ea:88:85:0f:d2:
         c8:fc:8a:fe:02:b5:62:ef:35:da:ba:de:a0:8f:99:c1:75:21:
         98:99:cf:70:71:88:ae:35:16:bb:af:38:a4:fd:7a:54:a3:b3:
         ea:33:22:be:ba:f0:e0:12:a7:3c:a0:af:3a:fb:91:4b:5a:1f:
         45:38:05:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:27:30 2025 by rpki-client