Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/81141fd5-1584-39e4-b0f5-be2339b67c0e.roa
File:                     81141fd5-1584-39e4-b0f5-be2339b67c0e.roa (raw, json)
Hash identifier:          yLyHnjJ8DjhNQsq0JN9nGjtnpdf/Lp5dULRcp1U2Qu0=
Subject key identifier:   0D:19:EB:E2:25:36:64:A2:C2:E7:DA:86:CF:74:92:4D:25:62:E5:00
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858482BF56BF3BF4D60D760EC4E60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/81141fd5-1584-39e4-b0f5-be2339b67c0e.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     701
IP address blocks:        72.70.192.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:6b:f3:bf:4d:60:d7:60:ec:4e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=55af36b3-239d-4e92-a8f8-0eefaa85c846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:53:af:b5:64:19:4e:a2:35:a9:41:23:ba:4f:
                    eb:6a:fe:a2:d2:e8:6f:ef:5a:08:0a:17:6a:67:37:
                    0c:ae:40:5a:bb:38:6b:7a:54:d1:2f:3f:c0:32:eb:
                    e6:52:28:3b:05:3f:c1:f6:98:44:83:20:0b:5c:36:
                    15:69:d2:ff:7d:31:12:2b:99:97:f6:fa:78:ea:55:
                    78:a4:63:a0:08:a2:c6:81:53:4e:29:0f:3a:d2:d9:
                    2b:43:78:42:a7:ee:78:4b:d0:85:7d:2d:0e:2a:1e:
                    e4:93:fa:40:2d:89:2d:6f:aa:5f:40:eb:52:d4:7d:
                    bf:7d:74:37:4c:13:69:86:39:a0:d9:a2:e8:49:a5:
                    55:60:a4:f8:3b:a4:0d:9f:4b:43:ca:fc:2b:85:07:
                    85:e7:ff:b1:fc:87:1e:77:26:80:1f:dc:4a:d3:53:
                    e5:65:5d:e6:f9:21:be:1e:df:9a:b1:15:b0:df:52:
                    91:d6:3f:c2:ac:46:bd:33:63:87:0f:82:1c:91:90:
                    7c:cb:2f:60:4c:eb:f4:99:dc:e0:bb:a2:5b:0e:b9:
                    cf:bf:60:2b:14:c8:34:a6:e3:20:83:d9:68:4f:79:
                    6b:8f:56:53:a3:ff:9c:d9:33:5b:89:5b:4a:9c:b5:
                    2b:0b:fb:87:39:59:b2:9d:f1:51:6c:7d:c7:b3:5d:
                    a7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:19:EB:E2:25:36:64:A2:C2:E7:DA:86:CF:74:92:4D:25:62:E5:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/81141fd5-1584-39e4-b0f5-be2339b67c0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.70.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:a4:0c:8f:db:64:86:6a:ce:bb:0d:da:23:39:b9:6b:68:76:
         4a:0e:da:e9:e0:f1:0b:1e:88:74:2d:92:47:1b:0f:c2:c8:81:
         d9:06:32:a8:81:d0:88:8c:53:43:41:d2:f6:d4:a6:98:2e:94:
         de:ab:38:76:fe:79:51:4d:29:e7:fb:12:1f:c4:c0:16:40:65:
         0f:c8:12:6e:26:ad:b1:67:ad:b4:c6:63:f6:eb:54:08:95:88:
         01:7c:53:3c:2c:c4:96:96:a4:21:01:3a:8e:81:5b:e3:c7:0b:
         99:23:f6:47:96:f4:eb:c7:a4:35:c6:88:28:a4:cf:a4:ca:52:
         ea:81:50:51:96:95:f9:b3:78:01:e8:33:aa:20:7f:45:29:e9:
         ce:33:c2:a3:c6:79:47:11:51:c3:92:70:f7:1d:5c:6a:c2:be:
         cd:3e:a5:0b:bf:d3:5d:2b:15:98:92:f4:f8:13:da:84:57:7b:
         b4:bb:e4:ae:c6:83:0c:cd:c3:b5:22:64:bf:d0:a2:b6:a3:e8:
         73:76:03:fc:50:97:28:b7:5f:f2:30:31:b0:ae:fa:46:c3:a4:
         d6:b7:d1:5d:90:f7:4e:f8:2e:41:27:8d:26:85:4b:38:3e:3d:
         1e:57:22:0a:54:55:77:bf:f2:91:4a:53:57:19:0f:7c:5e:74:
         a4:25:c3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:30:07 2025 by rpki-client