Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35331e2e-b0e5-3e19-aacc-1dd54ba0be69.roa
File:                     35331e2e-b0e5-3e19-aacc-1dd54ba0be69.roa (raw, json)
Hash identifier:          ehXWFG9Ev14FAwewJj+VLF/Sb9HkCvUWY8MW4wB6jL8=
Subject key identifier:   A7:94:49:45:19:87:96:CE:15:95:FA:D9:E8:3E:DE:58:EF:7E:85:61
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858482BF56B9D9859FCB235534500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35331e2e-b0e5-3e19-aacc-1dd54ba0be69.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     701
IP address blocks:        71.255.0.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:6b:9d:98:59:fc:b2:35:53:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=8ecc25fb-9dea-4553-a5cc-fff858837723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b1:c1:6b:36:4a:1e:89:b7:62:08:5d:c3:3b:
                    46:62:5c:7a:34:8e:8c:8f:83:9e:82:c7:4a:78:e2:
                    fa:d4:3b:34:fb:c0:dc:bb:2b:78:72:52:6a:31:e1:
                    c7:5a:a1:3e:b8:48:e3:31:07:b2:ee:be:2a:f3:7c:
                    75:33:9b:2a:db:4d:32:2b:e2:d2:3d:cf:09:bb:24:
                    89:03:50:78:93:7e:c4:44:a4:2a:7a:60:ec:6d:80:
                    37:58:c1:b4:93:cd:44:59:28:c6:60:90:15:3a:25:
                    18:e8:1e:08:d0:99:91:d1:23:ba:89:35:d0:c4:eb:
                    a6:6c:ee:8f:7a:29:41:a4:d8:de:e3:30:d2:d8:0a:
                    10:c0:89:a8:79:0d:8c:3c:f1:57:28:f6:db:b4:fd:
                    13:ee:3c:0f:f6:7d:ba:c8:9e:7c:55:5c:0b:74:d2:
                    0c:66:34:84:c2:6b:a6:7b:6d:ca:6e:4c:a2:68:59:
                    8d:03:ff:96:93:ff:ad:04:32:65:f8:9b:58:a4:31:
                    94:87:67:c4:e9:2b:da:e1:68:63:00:8b:f8:99:b7:
                    3d:55:18:ba:db:a5:36:e5:71:79:5d:f5:69:ce:47:
                    ff:ff:87:ab:dc:6e:b9:e8:a9:96:1c:23:2d:6e:21:
                    3e:1a:13:2e:4f:13:e1:a8:67:a4:ae:6f:53:b0:1b:
                    b5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:94:49:45:19:87:96:CE:15:95:FA:D9:E8:3E:DE:58:EF:7E:85:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35331e2e-b0e5-3e19-aacc-1dd54ba0be69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.255.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:ff:f6:ae:99:61:36:9c:a0:86:10:de:05:7a:67:c8:9a:9b:
         94:c4:1a:e7:39:48:39:0c:73:f3:cb:2f:1d:00:66:f0:2e:72:
         29:be:08:17:1e:22:c4:c4:e2:0a:f5:91:7e:4a:41:a9:5f:13:
         59:88:9a:d5:ec:96:44:0a:40:18:3c:93:66:a8:5a:04:e4:9d:
         c9:f1:c7:e4:bb:9d:91:d3:d1:0a:ee:b7:50:e6:99:e6:e8:ec:
         e2:18:02:4a:6e:1e:10:c9:aa:c5:ab:b6:c0:9e:0a:a5:2b:15:
         e8:08:ef:3b:ba:d4:a6:7e:18:9a:8e:bb:e9:44:62:da:ad:ae:
         f0:a7:30:43:2a:d0:b5:5c:05:5d:b1:59:68:fe:66:58:20:37:
         28:f1:77:8f:27:76:f2:9b:67:56:2d:74:7b:44:56:7b:70:f3:
         ee:c2:30:15:f2:8e:7d:76:c7:f5:a1:0e:9b:fc:fb:4d:23:04:
         4f:a8:78:2d:ee:69:62:ed:df:3b:fd:ff:d1:4e:98:5e:a2:0c:
         7a:d7:29:70:2d:cf:a4:4a:4b:4e:e5:93:9e:07:ef:ac:b9:c6:
         c6:ce:ea:17:16:59:89:2e:87:32:83:54:44:48:54:8d:79:50:
         ce:71:c6:b4:64:cf:d3:ff:4c:99:9f:70:0c:c0:26:ce:0b:cf:
         bc:8d:21:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:32:57 2025 by rpki-client