Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d5cb289-3d0d-3697-a0ed-99d48d4efcd7.roa
File:                     4d5cb289-3d0d-3697-a0ed-99d48d4efcd7.roa (raw, json)
Hash identifier:          Sjdizn+C6/ClgGnYSvJao79TLMvISP4WE0/3Id+ji5A=
Subject key identifier:   BB:55:B9:A5:0F:66:9B:D4:D1:3E:D2:76:55:A9:F4:AB:25:62:03:08
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848090FC10F784F541095A46FC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d5cb289-3d0d-3697-a0ed-99d48d4efcd7.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     0
IP address blocks:        208.236.212.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:c1:0f:78:4f:54:10:95:a4:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=264e9432-49ff-4f31-8cc4-220986d0892f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ee:1f:08:42:7d:cb:16:92:57:24:ec:d5:5e:
                    cf:b9:61:5b:43:be:5d:b1:9d:db:60:b4:49:49:b2:
                    d5:a7:b1:21:3e:f6:ff:e2:4f:b5:29:d5:6e:53:ab:
                    f5:98:97:31:56:94:f3:35:e1:03:e6:fc:52:95:11:
                    56:d0:a6:ba:c7:99:5b:c2:9c:a8:5b:a8:80:fb:e7:
                    17:11:13:be:39:a4:95:65:7e:9c:9d:57:31:df:ed:
                    25:42:e5:f5:80:b6:92:ad:dc:56:c3:20:c7:98:6b:
                    96:ce:0c:b3:0e:cd:64:41:97:6b:7a:c7:36:fc:40:
                    b8:07:b7:1c:a8:68:c3:81:49:46:35:dd:75:b7:60:
                    5b:ee:c1:36:b2:ff:d8:31:f2:da:5d:68:fe:20:de:
                    b5:ef:87:03:c5:93:75:f9:7b:31:7a:8f:4d:3d:1b:
                    1f:07:59:93:1a:1d:d1:80:1e:b1:23:52:73:e9:63:
                    c1:4b:bf:1f:88:55:17:ee:34:60:8c:3f:47:05:ad:
                    5b:a2:f2:63:1a:3b:9f:d2:fa:14:45:f9:f1:e4:a2:
                    e4:3b:9c:14:b9:86:28:02:d8:a0:32:d4:b4:1e:34:
                    d1:55:b2:76:01:84:6e:d5:73:b2:86:1d:96:c5:de:
                    f4:dc:17:c9:08:86:a6:07:40:80:73:71:d7:ba:f9:
                    47:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:55:B9:A5:0F:66:9B:D4:D1:3E:D2:76:55:A9:F4:AB:25:62:03:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d5cb289-3d0d-3697-a0ed-99d48d4efcd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.236.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:97:3b:3d:74:7f:4a:33:e0:3d:2e:32:de:9d:80:e2:27:9e:
         4d:75:bb:9a:cf:fb:b0:6b:a6:fc:b5:03:c3:bb:f1:75:7f:8c:
         b8:be:36:b3:e0:95:b5:30:5b:8f:c6:62:df:74:b2:9f:ca:ae:
         9c:46:b4:99:b2:0b:06:33:fc:df:b4:ea:f1:92:5d:7b:63:32:
         aa:2a:88:b0:b3:e3:39:14:ea:9d:1e:be:b4:a8:d3:b2:60:fb:
         83:4f:b9:77:24:a5:f5:1a:fe:67:7d:5c:40:24:3d:98:7c:fa:
         5b:94:8b:71:9e:7d:a8:0e:a0:db:22:ab:a6:1e:ba:55:15:41:
         69:38:25:ba:72:76:db:ae:44:0b:81:de:ff:c4:93:b1:f9:cc:
         2b:73:b0:b7:77:27:6c:6c:b3:40:70:9c:85:a2:70:66:3b:8d:
         76:1e:92:3b:7b:d2:77:74:51:dc:db:14:09:6d:67:48:7c:01:
         31:1c:d2:b3:91:c2:47:4c:25:ca:14:76:39:c5:c2:7d:7f:37:
         d4:b2:9f:c4:38:14:bc:24:84:e5:d1:ff:c4:b8:d5:57:b0:ea:
         c1:16:18:3e:f6:dc:5f:83:e6:90:fa:8d:7b:00:ef:e2:1a:31:
         bb:b0:db:91:9f:3d:01:31:c6:0f:ff:48:e0:e5:b6:ff:81:98:
         5b:1f:39:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:29:58 2025 by rpki-client