Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/458603c9-3531-346e-9347-36a9d0e900eb.roa
File:                     458603c9-3531-346e-9347-36a9d0e900eb.roa (raw, json)
Hash identifier:          9HEZeyQBQOpPTxMg25IDc1LnUvCfKn5yJ9VaUrt/D+8=
Subject key identifier:   04:02:48:A8:5B:3F:AD:6C:13:7E:12:D7:81:7A:6F:50:6D:85:66:E6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858485E35C91E60229CF7A32C1418
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/458603c9-3531-346e-9347-36a9d0e900eb.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     6167
IP address blocks:        72.107.208.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:c9:1e:60:22:9c:f7:a3:2c:14:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=e444ec31-7af4-4e85-ae48-faa3b7c0f8c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2f:60:de:f1:40:2e:78:24:bb:31:37:1b:85:
                    5a:b4:81:07:ba:5d:d2:ab:5a:44:b2:36:d4:7e:fa:
                    67:8c:17:4f:fe:03:ea:eb:63:c0:39:4f:d9:91:9d:
                    92:65:41:3b:fb:b6:ad:e7:e9:42:4e:c8:49:db:83:
                    4d:63:8d:5e:31:0a:c9:4e:50:5c:a2:02:f4:ef:a3:
                    b7:32:9a:8b:32:d5:bb:38:81:20:4e:93:b5:ce:10:
                    de:0c:d3:33:4b:aa:26:33:88:f4:7c:f9:2c:10:06:
                    eb:db:d8:86:62:5c:47:f4:3d:9d:f2:7d:7b:95:a3:
                    33:04:e2:27:90:32:24:2d:a8:82:d4:e3:bd:a5:85:
                    bd:c1:d4:bc:20:5e:22:e0:48:90:ff:d3:33:66:56:
                    0b:7e:fc:64:23:2d:26:53:82:6a:ba:35:c5:68:f7:
                    e4:eb:a0:33:76:3f:66:99:4e:96:8c:8f:9e:d3:d2:
                    eb:08:e9:90:89:dd:91:e0:12:ed:67:b1:6f:d7:6a:
                    d8:f0:e1:99:d9:ec:00:2f:71:5f:61:59:a3:31:25:
                    28:de:31:b8:02:f0:d6:96:8e:b0:c2:a6:93:73:1c:
                    6f:98:16:a6:93:73:87:f6:31:14:db:80:90:ca:a2:
                    35:ea:bb:a6:a2:64:ee:5a:4a:a0:9e:72:b2:1f:9e:
                    35:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:02:48:A8:5B:3F:AD:6C:13:7E:12:D7:81:7A:6F:50:6D:85:66:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/458603c9-3531-346e-9347-36a9d0e900eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.107.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:d3:35:97:6a:74:de:fb:0c:cc:96:50:6b:c5:9f:0a:f5:08:
         75:d2:78:5c:53:e5:5c:69:02:ff:0b:b9:7b:ee:9c:7a:af:8f:
         c0:d1:5f:a0:8d:fa:bf:ee:ac:2d:1f:3d:cd:ab:2e:91:b0:9a:
         e8:1f:8f:0a:20:5b:bc:54:c9:07:a5:97:44:55:38:3e:e3:18:
         0f:5a:f2:5b:44:3a:a0:37:d5:20:90:53:3e:97:6b:52:c8:99:
         93:d8:c4:ca:9a:7e:13:9b:68:22:68:6d:f1:93:02:d9:f1:19:
         83:3b:79:6b:a7:d5:63:40:01:91:49:6e:68:1b:7a:21:a2:41:
         2a:bd:bb:46:79:3e:55:52:b5:db:70:88:20:6b:84:a0:37:26:
         19:ef:ed:e2:ca:1f:c7:3b:e6:ab:49:3a:de:e4:b7:78:64:45:
         36:2a:25:56:5a:a3:1d:f5:63:4a:45:4b:c4:dc:d3:2e:cf:24:
         da:19:49:ef:73:dc:cc:6a:70:4e:df:35:b0:f6:38:cb:9d:12:
         0a:ba:e4:a8:0d:65:5b:59:f7:08:8e:5f:d4:e5:35:86:ee:52:
         26:6a:20:ec:79:04:a1:45:be:9c:8c:77:9d:a3:84:3d:18:0b:
         87:11:fb:63:80:96:fd:cf:50:e6:8d:9c:11:df:d9:fb:d4:a3:
         b1:cc:8d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:30:09 2025 by rpki-client