Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ee0695f-8448-3461-8ceb-6c29b7448f1d.roa
File:                     3ee0695f-8448-3461-8ceb-6c29b7448f1d.roa (raw, json)
Hash identifier:          6hodk51nPilHQuVV1Bku6qtb7jJf2REDvaJyuXSfd6c=
Subject key identifier:   4D:E3:CB:CE:57:F0:9C:ED:49:E2:83:26:D1:DE:8B:3F:06:47:54:3B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858485E35C4BCCA38646B534EDB00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ee0695f-8448-3461-8ceb-6c29b7448f1d.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     6167
IP address blocks:        72.108.168.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:c4:bc:ca:38:64:6b:53:4e:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=ff5fc1c4-f9df-4865-ab4f-0561fa3c85f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:52:0d:0d:dd:4d:47:be:29:12:ec:6b:d4:dc:
                    4e:e6:80:cc:1a:3f:21:9d:af:45:18:c6:d3:74:ac:
                    c4:2e:00:42:07:be:1b:d1:6b:dd:57:78:15:bf:22:
                    43:e6:56:47:52:b8:86:ab:f0:08:87:92:2d:02:b1:
                    56:6e:17:7c:07:41:d9:00:bc:15:68:fe:b5:79:1d:
                    28:8b:99:77:db:30:06:24:66:25:69:f8:fa:b9:3d:
                    30:e1:6f:6d:9e:cb:9c:fb:49:ce:a9:fc:31:0d:7e:
                    c5:28:16:d9:16:2b:55:91:e1:eb:0e:3b:79:76:2c:
                    73:04:11:cb:e7:fe:4b:f1:2d:a1:c3:1a:be:ca:71:
                    e2:26:c0:66:8c:bd:a8:0a:fc:6e:00:cf:d9:30:91:
                    57:bf:74:47:a9:77:bd:c3:ed:e6:80:0d:8e:9b:54:
                    1f:b0:8d:49:09:0d:08:de:49:de:cc:c4:59:12:2d:
                    3b:52:17:c2:39:a3:6e:7f:9d:f7:c6:4f:92:42:88:
                    11:71:de:3e:59:09:58:e0:e6:64:12:56:33:e1:86:
                    ed:43:98:33:4c:eb:e3:1d:61:f7:cb:3d:6d:b9:c4:
                    bf:41:b9:50:ff:59:f3:29:9a:df:ae:23:29:70:85:
                    ea:14:94:21:e6:cf:f5:bf:c5:17:82:55:61:aa:cc:
                    7e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E3:CB:CE:57:F0:9C:ED:49:E2:83:26:D1:DE:8B:3F:06:47:54:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ee0695f-8448-3461-8ceb-6c29b7448f1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f4:0a:52:17:33:33:12:b1:2d:a6:97:1c:6f:f9:8a:4b:29:
         6f:5d:d3:5a:c6:0e:ef:f0:44:8c:b3:e0:4f:5d:cb:54:62:e4:
         d4:ab:de:f9:3f:52:7e:37:3d:fa:77:63:29:44:e1:f8:28:fa:
         a0:df:98:03:c4:f5:92:1e:47:34:5f:33:da:ae:50:89:a8:11:
         0d:b9:48:13:5d:45:00:66:1e:73:6a:2d:3f:48:d2:b7:ad:10:
         f6:a8:0f:f1:9e:40:79:96:01:9a:45:c0:0a:ad:fc:a0:b8:52:
         d7:01:a1:5d:ce:45:6d:5c:6e:7a:dc:ab:5f:24:b1:4a:1c:73:
         0a:d9:a0:0f:05:af:d7:04:5c:f5:77:ce:6f:24:97:06:91:24:
         a3:1e:ba:21:5b:80:67:fe:21:1e:02:31:69:81:59:fb:14:b3:
         ac:98:22:75:4b:10:0e:7c:d0:5f:d5:2d:4a:a1:65:dd:9e:3b:
         15:7b:08:44:03:a3:d8:2c:e5:e5:b6:a3:ea:02:2b:66:48:c6:
         b0:8d:d8:c5:f1:92:0c:66:7c:40:9e:9a:c6:aa:7c:39:1f:25:
         da:6f:fd:7f:f2:9f:f5:21:64:d4:12:f8:88:fc:48:d3:a3:78:
         a3:a3:ed:e7:cf:e9:c7:73:cb:04:56:f9:75:44:92:30:f1:ef:
         d1:d7:eb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:35:07 2025 by rpki-client