Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2dc405b6-eb8b-3dbb-8de1-a7f3d9a2dc80.roa
File:                     2dc405b6-eb8b-3dbb-8de1-a7f3d9a2dc80.roa (raw, json)
Hash identifier:          ZvQzZLL3UzdYRq02adfsL2D+brSopNcsdRmodqxUkw8=
Subject key identifier:   57:C2:6C:9B:AE:7E:CB:63:19:C7:99:85:CD:72:78:E0:4D:2E:AA:03
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584832F048843DBD2730F7B304A7
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2dc405b6-eb8b-3dbb-8de1-a7f3d9a2dc80.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     701
IP address blocks:        173.59.224.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:48:84:3d:bd:27:30:f7:b3:04:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=a5cd9c2f-daf8-461d-bca2-7bc8bd1770ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7e:7f:e9:bf:69:47:3d:55:48:10:ec:38:93:
                    70:6d:fe:72:19:ed:a2:44:52:1e:50:9b:27:02:36:
                    a2:2e:51:26:0e:53:54:eb:6d:94:63:5e:47:c3:ee:
                    3d:e8:b9:a3:d5:20:61:dc:19:13:dc:44:91:9f:11:
                    09:25:ff:73:7e:23:09:e0:02:bc:82:a8:60:85:ce:
                    76:71:11:59:73:be:7e:e6:55:1c:42:4e:e4:a0:1d:
                    98:8c:61:a2:a7:bf:17:a5:6e:44:4d:e6:d6:46:60:
                    3b:8d:9b:4a:44:b1:d1:61:4c:1e:fa:95:a7:c3:72:
                    fe:12:f3:d0:13:38:57:01:27:84:e8:2c:72:50:2b:
                    be:3a:d3:04:a9:e3:dc:1c:9d:42:88:51:c4:37:7e:
                    5a:e8:4f:eb:74:6e:fc:f9:0a:74:30:ba:7f:90:66:
                    46:ab:8d:16:0c:a9:14:13:6e:3b:2d:26:3f:3c:53:
                    51:57:60:5e:a8:35:c8:c3:83:0e:5c:96:f1:3c:f6:
                    04:2f:c8:f7:1d:5a:69:be:0d:fd:33:9a:98:57:65:
                    c9:d6:09:ec:69:b9:d8:f9:b8:6c:e9:55:42:42:f2:
                    52:cf:cf:35:e2:02:7b:77:68:e1:f0:00:4c:d0:15:
                    fd:1f:ca:f9:2b:0f:50:e0:b7:97:15:fe:49:c6:6b:
                    1e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C2:6C:9B:AE:7E:CB:63:19:C7:99:85:CD:72:78:E0:4D:2E:AA:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2dc405b6-eb8b-3dbb-8de1-a7f3d9a2dc80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.59.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:cc:e1:8f:08:14:41:1b:f3:00:d0:78:aa:4d:0f:4c:b8:40:
         02:d0:94:18:1d:17:c9:18:41:5f:4e:a4:66:32:48:65:f8:b1:
         dc:fc:5e:d7:36:d6:06:83:09:1c:d8:48:aa:7f:a7:ce:0e:42:
         e1:df:70:38:04:8a:fe:c9:d4:55:af:9c:6f:91:e6:18:cf:19:
         4b:5e:5b:ad:a0:89:9f:5f:2b:91:7f:ea:d3:e3:5d:9a:d9:10:
         82:2b:e9:5b:28:8b:ea:0f:a0:12:bb:00:19:2e:5b:9d:11:42:
         a2:7d:b2:3e:f4:8e:78:89:d3:c4:2a:6e:a2:2b:8c:7e:02:b5:
         4c:32:af:6e:45:8f:cb:b0:ee:13:0d:6c:c7:77:c7:c9:5c:b6:
         cc:3c:16:7c:b7:58:12:ed:36:0b:98:55:61:ba:f6:b0:f0:67:
         dc:88:08:4f:26:06:bd:7b:04:37:8b:85:44:0c:2f:53:55:74:
         e8:8f:88:4e:dd:ad:da:e5:d5:0b:4d:e7:33:f2:d9:a0:03:a7:
         97:a7:89:8a:f4:ec:9d:5e:49:fe:80:3f:c5:68:00:23:d4:0e:
         92:a5:d4:6c:b0:cc:80:e0:3d:0c:a4:15:f5:17:04:68:50:a7:
         3c:69:04:1a:3d:f4:9a:96:45:99:6f:f2:e2:df:eb:04:84:fc:
         28:6a:68:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:42 2025 by rpki-client