Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5065bf99-2915-3896-a437-fe9567ef35a5.roa
File:                     5065bf99-2915-3896-a437-fe9567ef35a5.roa (raw, json)
Hash identifier:          SQ+pbXTWM00uYxRbtfsLT2uGxfe2C87Crvn+m7kI9eE=
Subject key identifier:   0D:5C:42:7B:F0:D0:AB:1A:B9:C4:A0:B8:F2:36:D4:1B:2E:70:AB:FF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858481F651DCA132E6CA8F0AB5700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5065bf99-2915-3896-a437-fe9567ef35a5.roa
Signing time:             Sat 07 Dec 2024 02:00:39 +0000
ROA not before:           Sat 07 Dec 2024 02:00:39 +0000
ROA not after:            Fri 07 Mar 2025 02:00:39 +0000
asID:                     6167
IP address blocks:        97.216.64.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:65:1d:ca:13:2e:6c:a8:f0:ab:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec  7 02:00:39 2024 GMT
            Not After : Mar  7 02:00:39 2025 GMT
        Subject: CN=383dce3b-2ec0-4946-a728-a3b0eeb89631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8f:21:d8:0d:e8:1b:eb:9d:d0:a6:f7:6d:d9:
                    02:b1:d6:10:22:ca:72:b9:5b:51:9a:15:09:f1:03:
                    43:c5:8a:d8:0f:1e:3e:33:99:c9:87:3f:d9:86:76:
                    99:54:22:ea:50:46:2d:c8:c0:88:2b:92:43:48:78:
                    e0:e2:61:28:cb:f2:e7:d0:ce:77:66:46:ed:0d:e2:
                    dd:45:76:22:e4:f4:39:f0:a9:aa:bf:fe:0c:b2:84:
                    d7:2d:f7:30:81:13:2b:22:34:59:b9:b8:50:c7:ab:
                    aa:d1:f1:37:76:c0:f9:25:08:ef:29:66:78:48:a5:
                    3d:ab:f8:b9:94:26:7d:ca:f5:58:5d:fe:4d:a5:d0:
                    e2:24:04:89:c1:f5:3c:fc:77:7f:68:42:cd:42:22:
                    fe:23:a8:2f:00:79:8c:56:2b:05:15:a1:c3:17:58:
                    c9:7e:dc:ea:a2:3d:2a:40:80:8a:df:d0:0b:c3:35:
                    bb:f1:7f:57:0b:1c:23:70:b3:5d:05:4f:ba:7f:3b:
                    9a:e1:4f:a7:cd:03:d9:39:28:6c:55:99:63:d7:1c:
                    0a:4d:6d:77:bb:cc:99:55:e4:13:6f:9f:d9:f8:bb:
                    6e:22:42:b3:60:5e:8b:b1:c8:f9:0f:b9:d6:c2:d1:
                    7c:72:fd:e9:a4:d8:49:1c:15:64:9b:7e:5a:4e:32:
                    77:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5C:42:7B:F0:D0:AB:1A:B9:C4:A0:B8:F2:36:D4:1B:2E:70:AB:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5065bf99-2915-3896-a437-fe9567ef35a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.216.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:9c:27:27:f1:f3:d8:2e:85:09:61:81:3e:1a:e8:00:c5:b2:
         fa:0c:30:be:60:f7:38:ef:d5:03:dd:ce:24:26:fc:59:28:9b:
         56:40:6d:29:cf:31:8e:d2:a8:a1:4c:7d:00:81:3f:5c:7f:0b:
         d4:17:4b:dc:49:3c:be:e5:b9:00:2a:b1:7d:80:63:10:0c:cf:
         27:cc:e9:af:48:80:3c:14:71:e4:ee:5c:53:b5:7f:a9:09:8a:
         2c:fc:4e:8a:1a:65:8e:07:10:85:c7:7b:a2:17:df:11:e4:b3:
         d2:0f:8f:a4:4e:a5:96:4c:0d:67:f0:2e:c9:6a:de:53:8a:ff:
         84:62:6d:e4:86:bb:15:55:d3:ac:61:a9:3c:37:5e:a3:01:35:
         43:2f:d7:a0:d2:9b:c0:0f:30:33:f6:26:e5:7c:3e:e9:13:7f:
         ac:e4:3b:64:0a:33:0c:41:01:11:22:72:5a:5a:7f:d1:6a:3a:
         64:2f:5c:18:87:05:f8:df:06:43:aa:62:90:0c:46:f1:e8:1c:
         3a:19:c2:66:2d:48:28:ba:9e:f8:0e:50:b9:30:12:4d:4c:c1:
         1d:ed:4f:84:57:f2:5e:66:26:64:82:48:ff:77:21:d8:d9:da:
         dd:6a:73:4a:06:a8:24:47:5f:e8:62:b8:5f:88:1f:fe:f3:e1:
         37:68:7b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:42:47 2025 by rpki-client