Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71009b44-2bc2-3648-bcf9-906579205fc7.roa
File:                     71009b44-2bc2-3648-bcf9-906579205fc7.roa (raw, json)
Hash identifier:          otyBMkDEkxcdq/ZQl2XNUg9pVc6WzumXBiP/2XNRRDg=
Subject key identifier:   D3:14:A3:C1:03:00:FE:54:1E:44:D3:F2:9B:B0:31:0D:C2:8D:0D:8C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848424B047DFFC840493397B480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71009b44-2bc2-3648-bcf9-906579205fc7.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        97.156.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4b:04:7d:ff:c8:40:49:33:97:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=bf8b20cd-4fdf-4fee-ac68-bef175e62418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5c:46:d0:2d:21:95:3d:da:2c:7f:01:33:6a:
                    ac:88:bc:71:1d:11:09:5d:37:93:a8:26:d8:36:df:
                    f7:0e:75:b7:1a:13:98:71:67:1a:07:df:b1:cc:ae:
                    1d:76:88:53:9c:fa:c6:0b:9d:ae:31:a7:42:94:89:
                    47:eb:4c:c4:04:e6:bc:80:f3:2a:ca:01:c2:1d:85:
                    00:04:9d:8b:06:45:ca:68:13:cd:8b:a0:5d:4d:d1:
                    b3:ce:87:ea:02:b8:2e:1c:c1:64:2a:f9:86:5f:d8:
                    5c:02:25:e2:ed:59:f2:9f:ac:f2:2b:79:97:84:4b:
                    bd:98:9b:e4:fa:12:5c:08:d1:66:76:28:0f:1c:9e:
                    f2:f2:4e:12:ef:6d:8f:9a:9c:05:00:7b:77:d2:b4:
                    23:80:27:5d:3c:f7:22:00:6d:6d:d4:71:08:2e:ab:
                    de:14:0a:a7:8e:7f:78:d6:f5:19:4a:dd:8c:c9:46:
                    2b:b6:22:79:8b:c2:bc:8b:2d:95:d7:22:30:02:a7:
                    12:5a:7e:15:67:7d:6b:be:bd:48:47:08:a7:22:63:
                    79:a2:6e:d5:02:58:9d:65:ef:a7:d5:4b:2d:8b:0b:
                    8d:ef:03:0b:c3:d6:29:8d:95:ad:47:05:b2:ca:73:
                    eb:3b:e9:ad:53:b4:0a:c1:39:c5:43:3f:54:9d:d6:
                    41:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:14:A3:C1:03:00:FE:54:1E:44:D3:F2:9B:B0:31:0D:C2:8D:0D:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71009b44-2bc2-3648-bcf9-906579205fc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.156.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:c6:c2:9a:c6:18:99:a6:e0:17:84:74:29:a2:68:72:a2:68:
         e1:cf:84:cb:2a:26:b8:24:92:0f:a8:85:21:7b:19:9a:21:5b:
         b7:23:0d:29:81:f0:f1:4a:dd:2b:f0:68:cb:d2:ad:a8:7e:de:
         d7:66:ae:73:35:94:98:d7:9d:54:7d:d3:d4:fa:8b:ee:6d:9b:
         7d:10:eb:13:9f:4e:6a:95:19:86:6d:19:c5:cd:63:d2:1d:6e:
         79:5d:48:ad:ea:45:12:db:51:9d:6b:d0:21:0a:69:cd:a6:a4:
         c4:a5:2c:31:31:1b:c4:fe:ea:15:f6:6c:77:b8:67:11:33:a0:
         08:d3:97:8e:6f:3d:85:25:c5:95:9f:d3:c7:b4:4b:78:f6:27:
         39:de:24:6d:d2:04:0a:8b:7e:ce:5c:00:eb:7f:61:bb:7c:28:
         c7:b0:6a:18:94:cd:16:dc:7e:01:7a:5f:c5:4a:35:73:39:53:
         75:b4:65:5d:3b:b1:b4:02:d8:9a:71:48:3d:40:bc:9e:43:5b:
         93:a6:4c:0a:6d:38:21:19:0d:77:02:e4:3d:04:b0:7f:c8:05:
         dd:b4:c4:ed:68:12:a8:5e:83:9d:1f:f8:63:ba:47:d6:7e:a4:
         19:76:66:4a:b7:02:10:b2:8a:25:85:f9:87:ca:48:bf:05:ca:
         f8:d4:23:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:27:31 2025 by rpki-client