Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7c6989bf-f197-3fa0-a6ed-8e6d468c10b8.roa
File:                     7c6989bf-f197-3fa0-a6ed-8e6d468c10b8.roa (raw, json)
Hash identifier:          Dl5msgQezvpSHax7VeHS7Wmkc/eQj4lbEIaD62Bgg24=
Subject key identifier:   65:D8:B3:FC:1C:60:1B:17:53:E8:4B:12:B6:9E:2E:A3:D1:FC:19:1B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858482395552980F781282544B280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7c6989bf-f197-3fa0-a6ed-8e6d468c10b8.roa
Signing time:             Sun 08 Dec 2024 14:00:51 +0000
ROA not before:           Sun 08 Dec 2024 14:00:51 +0000
ROA not after:            Sat 08 Mar 2025 14:00:51 +0000
asID:                     701
IP address blocks:        67.90.63.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:23:95:55:29:80:f7:81:28:25:44:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec  8 14:00:51 2024 GMT
            Not After : Mar  8 14:00:51 2025 GMT
        Subject: CN=3f96f805-ab7f-418e-b9b3-bbd658f81ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:58:93:c9:53:71:29:7b:b6:c0:b5:83:5c:1f:
                    d5:be:a8:5c:6d:3d:48:0b:a4:b1:64:e9:61:a7:30:
                    e5:74:78:03:b5:6e:73:27:e8:5a:13:cd:a3:59:a7:
                    38:40:a0:08:96:2b:51:1f:96:e0:37:eb:82:5f:41:
                    64:9e:ba:8a:1f:04:0b:fb:81:a2:29:61:9a:79:88:
                    db:89:5a:97:73:fd:d1:c0:91:72:09:30:60:f0:b6:
                    22:54:98:a2:56:ba:6b:9e:c1:95:b6:ca:8c:d2:e6:
                    ad:b4:c3:35:d3:2c:2c:64:31:12:77:f4:58:82:47:
                    4f:27:51:bb:f0:41:54:45:c0:1f:30:ca:1f:24:d6:
                    02:40:f4:e7:d7:18:c2:df:95:f0:dd:aa:a7:18:17:
                    21:74:32:a7:98:38:ef:a1:48:bf:58:6e:68:b9:76:
                    89:4d:b1:5e:fa:62:a5:52:f3:2c:d1:38:3e:53:c3:
                    18:5d:14:b9:d9:02:e0:68:ab:c1:91:8f:d0:2f:8a:
                    7c:ce:66:67:36:7e:39:44:a5:90:cb:c6:65:fe:43:
                    c7:d1:2c:15:28:f2:65:6f:25:c1:3f:67:e7:e5:b4:
                    1a:7a:dd:2c:3c:48:89:ed:6d:ff:b2:a3:77:ef:ec:
                    ef:c5:a7:22:86:e4:1f:61:72:71:5a:b5:29:7f:d3:
                    43:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D8:B3:FC:1C:60:1B:17:53:E8:4B:12:B6:9E:2E:A3:D1:FC:19:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7c6989bf-f197-3fa0-a6ed-8e6d468c10b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.90.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:e0:c7:62:cc:2b:2c:a4:6f:a0:ed:a2:f1:72:61:5d:66:a1:
         21:6b:3f:0e:61:12:6d:20:50:19:fc:c6:2b:53:77:3a:98:fa:
         96:df:e8:72:92:d5:3a:47:6e:8f:02:89:8a:59:40:3b:81:d1:
         f8:78:d8:eb:32:94:88:99:47:01:c6:cc:25:36:8e:a7:76:6a:
         68:8b:8b:d0:ea:2d:cf:d3:b3:01:e4:34:40:62:ef:1d:35:cd:
         48:fe:4d:48:b7:7a:c3:64:03:b4:e2:1d:e2:f2:d3:04:bc:bf:
         69:7d:f2:2c:b5:22:5d:ec:a8:b3:48:51:ea:6c:da:a5:1c:5e:
         a5:d1:fb:8e:92:b1:ee:5e:7f:6a:8e:4f:a0:84:bb:6e:91:2a:
         55:6c:35:fa:4b:24:1e:2f:d2:0b:f5:11:28:5c:55:18:bf:82:
         6d:14:b5:68:75:72:89:e8:15:95:3c:6f:09:d5:3b:a6:e9:15:
         2f:af:21:9a:64:e8:d6:d2:91:59:aa:3f:c9:8c:93:b4:aa:ca:
         b5:39:af:a2:ea:10:f8:53:bd:dd:a6:75:f1:a1:96:da:72:b0:
         04:70:6b:9b:77:12:3c:52:ef:04:76:14:05:5e:6e:1c:f7:5f:
         9c:79:8f:dd:3e:66:bf:56:78:4b:37:b5:06:2b:38:f0:95:ee:
         67:19:d9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:18:37 2025 by rpki-client