Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73e0fb14-1a5f-3f77-a3c1-c883a7ef6059.roa
File:                     73e0fb14-1a5f-3f77-a3c1-c883a7ef6059.roa (raw, json)
Hash identifier:          LXzjJNFzbJbrCl/jmEaWxe9fSmb0AEWYjcqcL2Skc8A=
Subject key identifier:   AB:1C:E5:CA:97:B8:9A:D3:13:EB:74:97:FA:F7:A3:D2:77:78:25:B2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848424B055900DB6B6CE0AB8F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73e0fb14-1a5f-3f77-a3c1-c883a7ef6059.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     22394
IP address blocks:        141.207.168.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4b:05:59:00:db:6b:6c:e0:ab:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=dfe56a4f-0739-4cd6-8837-d8fec2ed5314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d1:70:76:97:50:16:a4:93:46:5c:6e:43:8f:
                    9e:c0:a2:31:51:9d:4d:58:3e:74:ad:72:ae:d9:bb:
                    c8:39:0e:4e:3f:01:39:fd:d9:e6:53:48:e9:b6:00:
                    e1:e1:67:bc:ba:cc:4c:8a:77:00:83:56:62:b7:cd:
                    eb:06:42:26:d3:9c:8b:77:c4:ba:e7:24:43:fd:0f:
                    1e:5e:f1:5f:d0:9c:8a:72:61:4a:41:ca:dc:90:ae:
                    6c:25:40:cd:0d:10:32:3f:f9:58:d8:6a:0b:01:fd:
                    8f:2b:bd:e7:9a:e1:23:17:56:8f:12:72:75:96:25:
                    a7:2a:3a:be:1d:be:10:2f:12:29:6a:4d:20:64:fc:
                    14:03:53:b0:6d:58:10:88:1f:48:65:87:4d:ce:74:
                    cf:a8:bf:66:8e:5a:99:91:41:b4:79:ab:12:a9:ae:
                    36:0c:9c:21:9a:33:1c:4e:1a:3f:62:bb:a2:bd:0a:
                    93:cc:b3:88:29:57:dc:20:f5:13:35:17:bd:af:70:
                    9b:02:6c:ea:25:de:12:f1:1d:46:19:b1:ba:eb:e2:
                    b3:6f:41:be:0d:04:c5:17:0f:5d:4a:9f:83:22:cd:
                    36:75:82:6c:49:21:c3:e9:f7:71:9c:34:9e:a9:85:
                    12:c9:29:3d:0f:b8:1d:64:d7:7f:3d:5f:34:40:a8:
                    29:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1C:E5:CA:97:B8:9A:D3:13:EB:74:97:FA:F7:A3:D2:77:78:25:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73e0fb14-1a5f-3f77-a3c1-c883a7ef6059.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.207.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:9a:d6:a7:9d:bc:f0:3d:3a:2c:c4:2b:35:dc:6c:26:ce:fd:
         32:6e:db:65:7d:a9:d4:50:52:44:65:ac:dd:ff:06:e1:1e:72:
         55:de:06:f8:2a:60:7f:68:4e:4b:4e:1c:2a:27:4b:8f:1b:32:
         6e:e5:1e:33:89:35:c4:34:07:e2:c0:61:22:fc:67:3b:fe:fe:
         17:87:5a:2f:19:bd:94:33:3a:cc:c1:a0:2a:20:68:e2:e4:25:
         70:52:5a:c9:6c:38:60:a0:1e:96:5b:07:31:22:a5:92:9f:b4:
         21:e3:b4:a9:52:f4:5c:0a:1b:33:c6:22:2f:e0:00:6f:50:29:
         f4:a9:9d:cf:c1:6a:17:59:2c:1c:85:6a:54:19:30:ca:20:5b:
         3c:ec:00:b8:dc:ff:09:9c:1b:71:90:f5:61:13:4d:12:49:ce:
         9a:56:24:35:3b:b5:51:ef:bf:a1:1c:9c:d5:73:db:f5:fe:8f:
         5f:58:82:99:1e:fb:fa:9c:86:0b:c1:ec:f9:9e:83:cb:8c:0a:
         c5:d1:42:b2:7e:70:97:24:26:05:c4:ba:e5:eb:9a:b7:ca:00:
         3f:33:12:0a:fe:be:10:c8:f0:e0:a7:a2:77:f3:f3:6f:57:4a:
         f3:9b:1b:d7:64:91:ed:3d:47:16:71:ea:0a:b6:d6:a2:c7:1e:
         b8:98:e8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:18:58 2025 by rpki-client