Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/472b12af-b9e3-39d1-896b-b6682b1e1e07.roa
File:                     472b12af-b9e3-39d1-896b-b6682b1e1e07.roa (raw, json)
Hash identifier:          +MYrDJEcNfN0i9l+vvep+SU95bhaN9GqQ05SEIsxG/k=
Subject key identifier:   D6:45:EA:E2:5D:DC:0D:4D:89:9B:FB:EF:11:85:F5:E3:71:35:F3:3C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858482BF5612229C48DDA69FFC9C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/472b12af-b9e3-39d1-896b-b6682b1e1e07.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     701
IP address blocks:        74.99.128.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:61:22:29:c4:8d:da:69:ff:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=815c9f7c-4522-41d3-9875-02c60fa971a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f2:dd:98:42:1a:34:df:f9:40:e2:66:d7:07:
                    2f:6e:95:5c:e0:84:76:16:47:45:a2:5e:24:27:12:
                    fa:1b:83:ce:f7:ac:88:94:a6:8d:9d:32:4b:84:c4:
                    db:d1:1c:08:42:1a:5c:6c:76:75:a5:f4:51:97:b5:
                    e4:7b:16:de:1a:48:cb:5a:51:58:59:ce:f3:e3:6c:
                    31:ef:6d:25:d6:e6:dd:63:e3:ff:bc:a1:42:54:f4:
                    ce:fa:ec:1f:12:37:2d:17:f9:b5:02:f4:96:dd:46:
                    73:fc:da:c8:19:32:0a:5e:b6:4a:15:a1:54:62:f2:
                    f4:12:e9:80:b0:ff:0f:2c:4a:9f:31:fb:5d:c8:d0:
                    e2:16:99:2a:a7:db:c2:39:75:34:d5:62:c1:66:db:
                    c4:c4:25:dd:72:7f:49:11:f9:2d:15:70:87:b1:e2:
                    5c:6d:64:b2:fa:06:93:e4:3c:5b:20:dd:0f:eb:3f:
                    3d:f3:4c:ac:3b:33:85:0d:b1:1c:a5:53:71:fb:dd:
                    41:80:29:69:2c:0d:32:2c:0f:7d:ad:fe:d9:2c:28:
                    90:8d:35:1f:5e:5a:de:12:eb:5d:6f:9c:43:23:d6:
                    38:9b:ba:6b:46:27:3c:e1:c4:9e:f6:83:98:dc:4a:
                    dc:79:c3:b6:fa:79:06:e5:18:85:9c:f0:44:50:bc:
                    fd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:45:EA:E2:5D:DC:0D:4D:89:9B:FB:EF:11:85:F5:E3:71:35:F3:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/472b12af-b9e3-39d1-896b-b6682b1e1e07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.99.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:6e:b7:fa:13:49:17:52:48:54:9f:f8:c5:3e:fa:9f:ce:f1:
         3f:0a:ae:22:7b:55:1d:fb:02:cf:ba:41:a2:77:b3:b2:55:62:
         7a:23:80:d9:2c:31:25:cb:45:07:6c:8d:2e:9d:c1:3b:2e:1e:
         c2:6c:94:50:be:c6:cd:97:a5:62:3f:57:9d:19:1f:d5:dd:cc:
         cc:b7:11:d0:49:0e:08:7f:6c:58:08:81:f7:75:79:97:d4:17:
         2e:5c:4a:cd:72:4d:79:a3:b6:ae:19:ff:e0:76:95:a3:11:81:
         74:a8:59:8e:fe:b3:43:87:85:27:67:8e:4d:50:db:5e:ed:4c:
         5f:17:6a:0b:02:57:41:f8:80:53:0c:11:f7:9c:82:f3:1c:25:
         ab:44:82:2e:73:a5:c6:69:95:db:f3:3f:74:83:7c:18:32:8a:
         d4:20:fd:a7:fa:8a:a6:ca:4c:2e:b1:f9:2a:6b:7d:ef:43:79:
         6c:ad:3d:8c:7c:df:8b:ad:2d:d3:eb:34:fb:14:bf:d7:8b:3c:
         41:0a:8d:69:56:45:f4:51:93:91:06:c7:81:9d:d9:3e:66:e0:
         7c:d2:40:ca:09:73:72:8a:3d:e7:4c:a1:f2:00:bf:40:b7:44:
         40:a1:95:b2:7d:8c:d2:2e:51:a5:9e:58:2a:79:27:7c:a8:97:
         79:00:26:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:27:37 2025 by rpki-client