Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52d28b8c-9373-363a-aac1-6fedd4f6dd2e.roa
File:                     52d28b8c-9373-363a-aac1-6fedd4f6dd2e.roa (raw, json)
Hash identifier:          LTB++whvc0Ys82QEBAG4JZi9GpeA2UCF5BYzJgW2R2o=
Subject key identifier:   8B:FC:2A:D5:97:BD:D4:AD:59:F2:AF:3D:FE:13:87:6D:FB:5C:2C:37
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858485E35BD0190B21E2805BC29A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52d28b8c-9373-363a-aac1-6fedd4f6dd2e.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     6167
IP address blocks:        72.97.192.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:bd:01:90:b2:1e:28:05:bc:29:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=c9961b3d-03aa-4499-a58c-a3740e43bfb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:44:11:2f:c4:57:dc:02:8f:9e:ca:bb:bc:fe:
                    f8:95:e0:8f:e2:c4:8e:89:d3:58:f5:52:97:81:42:
                    55:56:2f:85:a3:77:f4:03:0f:e6:05:7b:e7:64:1f:
                    6f:3a:66:c5:72:9b:17:4a:79:9c:8d:58:77:d3:2d:
                    e4:4f:93:c8:fb:49:95:7b:b1:5f:54:ae:a7:02:24:
                    1e:2f:4c:98:b4:10:b8:2b:cc:eb:09:11:3c:1c:1f:
                    87:c6:ad:22:69:cf:0d:d2:38:5b:d0:7e:1b:b5:c1:
                    27:ca:8a:f4:02:e9:fb:b3:4a:29:b7:12:77:02:d5:
                    c8:b3:7c:2a:9b:bb:19:bb:8b:2b:75:a7:e1:f7:4c:
                    5f:43:0e:87:d3:3b:a7:e7:83:8b:a1:29:87:27:3f:
                    74:b9:38:82:d8:2c:f4:29:83:75:45:bc:b2:f2:f6:
                    78:1a:00:8a:92:38:d1:86:cf:96:d9:2d:b7:11:27:
                    83:65:23:6c:43:89:64:4b:d6:eb:a3:78:d5:11:aa:
                    fe:b8:f6:b6:bd:ea:c5:f8:dc:d0:88:e5:ca:fa:fb:
                    43:3f:42:5c:e8:ef:05:a3:1b:44:73:28:45:4b:b1:
                    a5:e0:b0:60:c1:f4:34:c3:f0:5d:aa:68:75:85:9f:
                    29:5b:06:67:39:42:a1:fd:0d:9d:aa:2d:b2:35:b7:
                    af:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FC:2A:D5:97:BD:D4:AD:59:F2:AF:3D:FE:13:87:6D:FB:5C:2C:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52d28b8c-9373-363a-aac1-6fedd4f6dd2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.97.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:6d:e8:62:68:28:81:c1:40:a5:35:a1:5d:95:e4:cd:25:6c:
         b5:a8:3a:fc:68:0a:44:c9:e9:48:d1:c4:1e:03:3a:da:49:58:
         9f:a2:7a:6c:26:b4:5e:45:22:e6:79:cd:0f:d2:21:64:40:00:
         dc:b3:70:cb:d0:91:21:e8:b1:06:50:71:f8:76:f2:fa:41:33:
         f3:5e:d3:42:e6:bf:6a:66:a0:64:06:ad:47:7d:e1:f7:47:dc:
         2f:4f:8e:75:11:27:90:1e:38:64:59:17:f1:7d:91:3a:7c:68:
         11:8a:ba:ce:35:3a:59:ad:6d:33:73:51:37:4f:ce:e7:0e:52:
         82:b0:63:48:67:65:5d:dc:22:53:4b:2b:c4:85:7b:2d:9d:99:
         b4:e2:19:89:3d:f4:fc:c5:0c:6a:80:ab:14:05:7c:d0:59:80:
         b9:3a:a2:bc:c5:7f:5c:de:e0:87:05:2a:0a:c7:6c:dc:89:a7:
         b2:f6:c1:7e:75:bc:5e:f7:08:cd:34:4b:a2:43:77:ec:2c:ba:
         79:fb:05:48:e7:20:c3:2d:f3:13:e7:8e:a4:b8:f9:0d:32:47:
         77:b4:88:3c:2f:12:38:9b:2d:27:f8:22:8a:b9:65:ce:27:e8:
         85:4e:0e:18:ab:4f:08:cc:c9:d0:71:79:8f:d8:07:1b:40:26:
         74:0b:6a:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEheNb0BkLIeKAW8KaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk
Yzk5NjFiM2QtMDNhYS00NDk5LWE1OGMtYTM3NDBlNDNiZmIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokQRL8RX3AKPnsq7vP74leCP4sSOidNY9VKX
gUJVVi+Fo3f0Aw/mBXvnZB9vOmbFcpsXSnmcjVh30y3kT5PI+0mVe7FfVK6nAiQe
L0yYtBC4K8zrCRE8HB+Hxq0iac8N0jhb0H4btcEnyor0Aun7s0optxJ3AtXIs3wq
m7sZu4srdafh90xfQw6H0zun54OLoSmHJz90uTiC2Cz0KYN1Rbyy8vZ4GgCKkjjR
hs+W2S23ESeDZSNsQ4lkS9bro3jVEar+uPa2verF+NzQiOXK+vtDP0Jc6O8FoxtE
cyhFS7Gl4LBgwfQ0w/Bdqmh1hZ8pWwZnOUKh/Q2dqi2yNbev2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIv8KtWXvdStWfKvPf4Th237XCw3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTJkMjhiOGMtOTM3My0z
NjNhLWFhYzEtNmZlZGQ0ZjZkZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGHAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC5t6GJoKIHBQKU1oV2V5M0lbLWoOvxoCkTJ6UjRxB4DOtpJWJ+iemwm
tF5FIuZ5zQ/SIWRAANyzcMvQkSHosQZQcfh28vpBM/Ne00Lmv2pmoGQGrUd94fdH
3C9PjnURJ5AeOGRZF/F9kTp8aBGKus41OlmtbTNzUTdPzucOUoKwY0hnZV3cIlNL
K8SFey2dmbTiGYk99PzFDGqAqxQFfNBZgLk6orzFf1ze4IcFKgrHbNyJp7L2wX51
vF73CM00S6JDd+wsunn7BUjnIMMt8xPnjqS4+Q0yR3e0iDwvEjibLSf4Ioq5Zc4n
6IVODhirTwjMydBxeY/YBxtAJnQLapk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:15:31 2025 by rpki-client