Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/533f0530-fe87-3692-ae3b-6dbb00d13f9e.roa
File:                     533f0530-fe87-3692-ae3b-6dbb00d13f9e.roa (raw, json)
Hash identifier:          63hWS1pJQOeIHc+hn9fobGrksjUwkTB6zsfw0eHuEho=
Subject key identifier:   D6:C3:D5:10:B1:85:CE:A8:FD:8A:28:69:21:DF:A6:EE:D5:AE:99:B5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858485E35BD45566C2486AFB7DB40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/533f0530-fe87-3692-ae3b-6dbb00d13f9e.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     6167
IP address blocks:        72.102.248.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:bd:45:56:6c:24:86:af:b7:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=5629b191-de87-4b0f-8e31-5397b3e7464d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:de:39:aa:fc:2a:75:54:68:9e:18:fc:af:b2:
                    2f:e0:8b:92:c2:9b:29:3c:0d:f7:35:5f:d5:75:c9:
                    43:b4:6d:c1:cf:ba:28:2b:28:54:dd:cd:0e:0c:5c:
                    26:2a:40:9d:ef:c3:62:5e:18:6a:53:51:88:a6:45:
                    b4:bb:18:7e:e0:6d:d8:e1:2a:05:96:54:c3:8f:fa:
                    d4:30:da:02:5c:24:41:a7:b7:ca:3a:a6:1d:2c:e6:
                    bb:46:8a:c9:f0:b0:e3:69:7e:d2:93:6a:27:cf:e7:
                    b3:e9:ac:83:56:cd:c9:cb:e5:c0:aa:96:d7:7e:cd:
                    de:03:78:32:b6:a4:4d:c1:f2:2a:a8:27:cd:25:e1:
                    bf:dc:30:df:e1:75:98:23:b4:0a:44:13:20:02:9b:
                    64:31:a8:41:da:42:28:4e:6b:95:bf:bd:70:6e:b3:
                    9c:82:76:e2:c8:d5:4a:5e:82:d4:a7:47:e5:f0:30:
                    fc:68:7a:d5:26:3a:fd:bf:46:a1:43:be:a8:94:94:
                    30:1b:39:5e:d1:41:72:5b:ff:ec:5a:e0:2b:fb:0c:
                    b1:ab:6b:90:b1:df:b0:d5:9e:c9:11:11:2f:38:f4:
                    2f:43:13:d8:ef:f9:14:56:d7:2e:bf:fc:71:0b:53:
                    be:5e:32:2d:84:f8:5c:fc:14:9e:69:fb:19:a6:50:
                    51:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C3:D5:10:B1:85:CE:A8:FD:8A:28:69:21:DF:A6:EE:D5:AE:99:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/533f0530-fe87-3692-ae3b-6dbb00d13f9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.102.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:b1:13:28:8e:1f:10:80:f9:29:2b:d8:c5:ce:16:ce:5c:e8:
         5f:f2:20:fc:be:d4:4d:54:84:48:05:5c:a2:7b:f6:8b:a7:21:
         87:4c:2d:20:48:72:d4:a6:ff:c4:9b:3d:2b:6a:b6:0d:d1:5e:
         8e:02:a2:e1:78:5b:8f:b6:1a:de:ce:eb:c4:bf:bf:e6:e5:de:
         8f:a2:08:d9:8c:71:77:19:96:07:ba:d7:81:8a:29:19:d5:8c:
         7d:3d:a1:3b:7e:d5:08:86:52:a5:62:1b:21:65:ef:50:88:3c:
         52:ca:86:34:94:49:66:ad:6f:1d:09:4e:f0:1e:4a:af:64:47:
         dc:10:a1:98:9b:95:75:c6:46:06:4d:12:27:28:f9:c2:c1:ce:
         d6:96:99:8f:36:c1:7a:c1:75:c8:e7:f5:8a:d6:4d:08:13:4a:
         1c:50:af:79:8c:d7:b8:7b:44:57:20:89:26:00:59:ff:a5:a6:
         15:73:09:f1:f8:e8:cf:4a:8e:9c:aa:ba:d1:83:24:a9:3c:39:
         de:29:1e:d0:81:25:d1:4b:75:d4:36:f9:bd:f0:ac:a2:87:9a:
         2e:93:a0:f5:ac:56:0e:bf:78:a9:1a:cf:4d:a3:ab:e9:2e:e2:
         c7:f2:7b:5e:52:bd:ae:6b:00:05:8a:4f:de:e3:63:3f:7c:82:
         06:14:02:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:37:08 2025 by rpki-client