Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71ddb5ab-022f-3aeb-a942-4378922ab984.roa
File:                     71ddb5ab-022f-3aeb-a942-4378922ab984.roa (raw, json)
Hash identifier:          tOxq/BYwaamPBN5q3Qwg1iX2zK712BkfpAl+/XfZuOc=
Subject key identifier:   D8:2E:EC:C4:DC:33:60:FD:CD:E9:51:D8:82:BC:7C:E8:71:43:1C:0B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848143CB74AC41AEF716B713C20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71ddb5ab-022f-3aeb-a942-4378922ab984.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     6167
IP address blocks:        75.241.88.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3c:b7:4a:c4:1a:ef:71:6b:71:3c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=9645b392-ff08-4075-900d-77cb3afd2132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:53:89:9a:ca:b9:c7:49:7a:23:ad:ef:4d:57:
                    8e:fa:72:f1:6c:c3:a6:d4:6c:a8:19:90:03:78:c7:
                    68:2e:0d:c6:21:f7:2f:e9:f8:bf:c1:8a:8d:8b:0d:
                    9b:dd:77:fd:48:ae:b4:b0:5e:65:c7:75:20:b6:fa:
                    68:49:4c:26:08:3a:9e:cf:52:1b:33:83:6b:6c:94:
                    0d:30:53:cf:70:ab:08:92:d2:1f:21:9e:58:61:2c:
                    5b:fa:a2:b0:f2:30:42:ab:f3:a3:4e:11:96:29:f3:
                    bf:79:b9:a4:49:c7:f1:ea:63:c3:1e:ad:6c:aa:ca:
                    3f:41:93:e1:02:9d:c0:2c:e5:70:82:ee:91:d4:30:
                    87:57:37:7a:d6:e2:28:15:23:d0:fa:42:4f:bd:69:
                    4d:d3:1f:58:c2:b8:de:16:c9:14:4c:fb:ed:0f:6a:
                    24:cc:b9:9f:5b:31:76:ce:c0:27:25:29:ca:4c:30:
                    2d:53:57:d3:47:c2:e2:f5:70:df:15:1e:1c:a6:43:
                    c2:9f:0f:5a:50:81:13:b3:7e:b3:6d:3d:6c:74:08:
                    60:79:91:9e:5c:bc:47:8c:a8:98:cc:96:aa:60:04:
                    d1:20:87:be:37:27:2e:25:75:bb:dd:bd:c3:85:18:
                    9c:2d:09:6e:a6:35:e5:c0:a1:c4:35:39:0a:a8:73:
                    c2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2E:EC:C4:DC:33:60:FD:CD:E9:51:D8:82:BC:7C:E8:71:43:1C:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71ddb5ab-022f-3aeb-a942-4378922ab984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.241.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:f1:d1:02:73:08:45:3a:08:53:01:04:40:03:0c:ec:42:da:
         8a:5d:9f:c1:80:be:99:97:86:61:60:58:5c:be:fe:57:0c:10:
         c6:2c:ca:49:f6:e0:9d:fc:72:ea:1d:e6:37:b1:40:75:fd:cc:
         62:c3:6c:83:4a:33:73:9c:b1:aa:9e:2b:1b:7b:5f:e1:88:af:
         e2:ce:92:b6:8d:f3:5e:94:39:fd:fc:d0:2e:82:3c:28:4d:d9:
         6d:93:75:eb:94:4e:41:1f:89:6d:d0:fc:87:a0:83:5d:09:1d:
         09:e4:18:87:af:d4:f8:a4:e2:1e:bf:fd:c8:2f:91:77:88:5a:
         19:73:c3:74:11:e5:54:56:e2:82:95:04:e2:35:b1:48:14:62:
         aa:52:24:de:c5:b2:1b:3b:b5:da:7d:01:4e:a9:bc:a0:68:61:
         fe:42:d1:96:59:e4:b5:74:61:50:2a:d6:14:55:b7:49:c5:73:
         82:12:0b:aa:61:ff:97:1f:41:b5:04:74:0f:2f:75:ac:fa:92:
         70:0b:56:ea:99:27:d5:24:f2:1b:61:b4:f8:ea:df:fe:39:a6:
         61:fd:1d:bb:f3:b3:fc:9c:ec:a6:e0:19:2d:c4:d1:a0:1b:14:
         46:46:75:de:da:f4:51:22:d9:a5:bf:e5:64:88:c6:50:0d:80:
         43:c4:7d:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPLdKxBrvcWtxPCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
OTY0NWIzOTItZmYwOC00MDc1LTkwMGQtNzdjYjNhZmQyMTMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1OJmsq5x0l6I63vTVeO+nLxbMOm1GyoGZAD
eMdoLg3GIfcv6fi/wYqNiw2b3Xf9SK60sF5lx3UgtvpoSUwmCDqez1IbM4NrbJQN
MFPPcKsIktIfIZ5YYSxb+qKw8jBCq/OjThGWKfO/ebmkScfx6mPDHq1sqso/QZPh
Ap3ALOVwgu6R1DCHVzd61uIoFSPQ+kJPvWlN0x9YwrjeFskUTPvtD2okzLmfWzF2
zsAnJSnKTDAtU1fTR8Li9XDfFR4cpkPCnw9aUIETs36zbT1sdAhgeZGeXLxHjKiY
zJaqYATRIIe+NycuJXW73b3DhRicLQlupjXlwKHENTkKqHPCowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNgu7MTcM2D9zelR2IK8fOhxQxwLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzFkZGI1YWItMDIyZi0z
YWViLWE5NDItNDM3ODkyMmFiOTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS/FYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAATx0QJzCEU6CFMBBEADDOxC2opdn8GAvpmXhmFgWFy+/lcMEMYsykn2
4J38cuod5jexQHX9zGLDbINKM3OcsaqeKxt7X+GIr+LOkraN816UOf380C6CPChN
2W2TdeuUTkEfiW3Q/Iegg10JHQnkGIev1Pik4h6//cgvkXeIWhlzw3QR5VRW4oKV
BOI1sUgUYqpSJN7Fshs7tdp9AU6pvKBoYf5C0ZZZ5LV0YVAq1hRVt0nFc4ISC6ph
/5cfQbUEdA8vdaz6knALVuqZJ9Uk8hthtPjq3/45pmH9Hbvzs/yc7KbgGS3E0aAb
FEZGdd7a9FEi2aW/5WSIxlANgEPEfUI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:23:46 2025 by rpki-client