Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/512c9803-3e24-3e20-9df2-4afe5eae32bf.roa
File:                     512c9803-3e24-3e20-9df2-4afe5eae32bf.roa (raw, json)
Hash identifier:          UPx2uHaHKIefUZzcJRfsjPwlUD/EqebpvoZS4Y8snls=
Subject key identifier:   E3:AF:DE:A0:DC:6E:94:05:FB:F4:3D:FB:98:2E:BA:30:72:FF:85:82
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858485E35C9EE8FF672B5314098C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/512c9803-3e24-3e20-9df2-4afe5eae32bf.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     6167
IP address blocks:        72.111.160.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:c9:ee:8f:f6:72:b5:31:40:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=6f9987e0-3b03-493b-8625-0b8557286c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ff:99:66:6a:c0:55:f2:a9:6f:84:de:43:a1:
                    bc:6d:05:6a:0b:28:9f:8e:ee:98:07:5b:3f:ea:64:
                    4c:77:95:2e:ba:58:16:9b:58:f3:40:7b:a8:bc:cb:
                    cc:68:f4:a8:27:b2:44:90:35:0e:e6:0f:08:eb:90:
                    b9:86:a9:ea:7f:61:08:a1:60:4a:25:e6:d9:e0:11:
                    3b:d9:22:ae:58:ec:4b:53:3d:b2:71:0d:e6:e6:38:
                    15:1b:1a:95:d5:80:41:a5:c8:25:ee:5d:0b:d0:40:
                    94:77:3f:b4:f4:82:8f:38:81:3d:96:98:f4:67:61:
                    c0:d6:1e:18:43:d9:54:a6:6c:60:88:00:50:4a:5e:
                    e6:9d:53:e0:06:04:d9:85:65:7d:44:3b:53:a0:d1:
                    83:6b:2b:a9:f6:35:c4:ce:1b:67:41:79:80:25:c1:
                    73:43:07:86:9e:88:dd:d4:5a:3c:cb:3b:1f:ac:f6:
                    6b:a9:a0:b5:b7:8e:a1:af:d9:63:98:cb:2b:2d:dc:
                    64:ba:ce:cb:30:10:bb:a2:a1:46:27:26:ee:31:74:
                    89:cd:e8:86:b6:b1:02:d7:f0:ab:64:db:63:64:59:
                    a0:5d:84:df:1d:fa:be:ff:55:19:e3:ff:49:12:f4:
                    79:b2:0c:92:14:fa:1b:5d:da:13:9d:61:6f:85:c2:
                    6f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AF:DE:A0:DC:6E:94:05:FB:F4:3D:FB:98:2E:BA:30:72:FF:85:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/512c9803-3e24-3e20-9df2-4afe5eae32bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.111.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:1a:f3:03:8c:f9:62:94:39:d9:cd:53:9f:70:53:d3:52:9d:
         d6:30:cd:ad:30:1d:f2:3f:cc:d2:b6:a4:2c:57:a7:86:82:31:
         c6:ed:b8:67:20:23:45:bf:56:94:8b:bd:90:16:2c:99:c8:3e:
         6e:cf:cf:22:2d:ed:d8:8b:a9:f9:31:33:56:c4:a8:24:8a:1f:
         83:d0:be:48:26:37:6b:de:a1:ed:ad:28:1a:77:b3:70:f0:a7:
         cb:a6:51:f8:4e:62:53:6a:f1:1b:04:12:65:99:16:31:3f:02:
         62:1a:49:fa:d6:47:0a:5f:55:36:7b:fa:d0:3d:99:e6:06:63:
         59:7c:e2:79:64:24:50:29:f4:3a:22:dc:7d:da:72:4b:0f:4b:
         e0:6e:80:fd:37:e7:6e:ff:61:f2:50:c8:ac:cd:74:85:ba:79:
         79:83:7f:c6:3e:8e:d2:c2:3a:53:49:b2:58:e0:08:f8:c6:27:
         7a:c7:ff:3a:96:89:c9:1b:2e:2d:37:0f:0c:43:f0:3d:ec:81:
         f3:56:1c:d4:c1:f5:38:c7:14:d4:26:16:8f:c1:a2:a7:bb:a7:
         09:d9:61:5a:d5:0e:67:4a:33:d4:39:fa:b9:91:7f:ec:64:a8:
         c4:8a:94:37:26:68:2c:ce:2a:3e:d4:25:ad:c8:33:63:76:be:
         fb:5a:90:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEheNcnuj/ZytTFAmMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk
NmY5OTg3ZTAtM2IwMy00OTNiLTg2MjUtMGI4NTU3Mjg2YzlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf+ZZmrAVfKpb4TeQ6G8bQVqCyifju6YB1s/
6mRMd5UuulgWm1jzQHuovMvMaPSoJ7JEkDUO5g8I65C5hqnqf2EIoWBKJebZ4BE7
2SKuWOxLUz2ycQ3m5jgVGxqV1YBBpcgl7l0L0ECUdz+09IKPOIE9lpj0Z2HA1h4Y
Q9lUpmxgiABQSl7mnVPgBgTZhWV9RDtToNGDayup9jXEzhtnQXmAJcFzQweGnojd
1Fo8yzsfrPZrqaC1t46hr9ljmMsrLdxkus7LMBC7oqFGJybuMXSJzeiGtrEC1/Cr
ZNtjZFmgXYTfHfq+/1UZ4/9JEvR5sgySFPobXdoTnWFvhcJvsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOOv3qDcbpQF+/Q9+5guujBy/4WCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTEyYzk4MDMtM2UyNC0z
ZTIwLTlkZjItNGFmZTVlYWUzMmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESG+gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHEa8wOM+WKUOdnNU59wU9NSndYwza0wHfI/zNK2pCxXp4aCMcbtuGcg
I0W/VpSLvZAWLJnIPm7PzyIt7diLqfkxM1bEqCSKH4PQvkgmN2veoe2tKBp3s3Dw
p8umUfhOYlNq8RsEEmWZFjE/AmIaSfrWRwpfVTZ7+tA9meYGY1l84nlkJFAp9Doi
3H3acksPS+BugP03527/YfJQyKzNdIW6eXmDf8Y+jtLCOlNJsljgCPjGJ3rH/zqW
ickbLi03DwxD8D3sgfNWHNTB9TjHFNQmFo/Boqe7pwnZYVrVDmdKM9Q5+rmRf+xk
qMSKlDcmaCzOKj7UJa3IM2N2vvtakG4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:25:27 2025 by rpki-client