Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9059080e-24f4-3362-860f-bf9f07a2c7af.roa
File:                     9059080e-24f4-3362-860f-bf9f07a2c7af.roa (raw, json)
Hash identifier:          8HhBcnayppfpsgciXSy02WFZsgdvw+b2E2hJYAC+Z3U=
Subject key identifier:   70:F4:C2:1D:A3:AA:0B:61:21:7C:79:7E:2A:E5:D9:57:56:AF:DD:7E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858485E35C9ACF24084A13D7DEA28
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9059080e-24f4-3362-860f-bf9f07a2c7af.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     6167
IP address blocks:        72.108.128.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:c9:ac:f2:40:84:a1:3d:7d:ea:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=6d28d90b-4724-4f49-a512-aaded4b0d7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b6:a4:90:31:db:b4:2c:95:06:93:35:89:c3:
                    cc:3f:2f:6a:e3:9e:38:58:3d:db:46:d9:ae:2c:e3:
                    e6:2d:a2:5e:c0:65:40:a9:b9:66:9e:9c:9f:6e:bc:
                    dd:26:42:49:b7:b5:71:e0:09:b1:73:c1:71:81:e6:
                    5e:49:43:64:7c:35:b0:6f:45:42:0d:de:9a:b5:1f:
                    90:13:7d:74:be:cb:ff:b9:af:b9:cb:e0:98:fc:d4:
                    a9:74:5e:21:f0:d6:1a:2f:84:7a:5a:38:1d:57:12:
                    02:39:62:c4:1d:cc:f3:cd:d3:47:40:bc:50:b5:9c:
                    0d:8a:e7:72:b1:3a:3a:d2:70:0f:03:3c:f8:b2:e6:
                    6a:c1:ad:38:52:98:2e:30:39:ad:d0:6f:2d:da:82:
                    94:b3:12:5a:84:87:f5:ea:bc:55:7c:c8:d4:2e:e5:
                    6e:1a:36:2e:28:da:7e:cc:11:79:fd:47:d0:99:c1:
                    60:de:b7:86:77:59:18:c3:5c:df:65:61:c3:d7:e0:
                    07:b4:ce:2d:6d:1a:cd:eb:a6:2b:d0:1b:2f:a9:7c:
                    6f:84:cf:73:ea:0a:e7:f3:5a:e8:c5:3d:f4:bc:08:
                    f7:07:00:c0:09:42:44:88:9d:be:d7:fc:bc:28:b4:
                    db:53:a4:82:09:23:6e:34:15:77:f3:e0:75:51:54:
                    e6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F4:C2:1D:A3:AA:0B:61:21:7C:79:7E:2A:E5:D9:57:56:AF:DD:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9059080e-24f4-3362-860f-bf9f07a2c7af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:d1:e3:cb:a3:9d:2d:ce:ce:20:ae:78:0c:b0:2d:5e:97:da:
         10:ea:78:2a:10:c6:6f:d7:57:3a:5a:ac:8d:3b:41:43:f9:bd:
         de:0b:13:9f:c1:14:01:0d:28:a1:3b:b0:ca:bb:bd:75:3e:4f:
         b7:99:b0:f3:ed:9c:64:e6:ae:68:a2:60:9c:71:87:91:1a:cc:
         cd:b5:a4:e8:36:00:ef:15:9f:09:5a:11:9b:e3:76:22:5e:74:
         cb:44:44:fc:d9:1f:31:fd:86:66:4e:81:1c:d1:e2:a4:44:1e:
         9b:ff:f2:f2:b7:a2:2e:d9:0b:cd:fc:02:81:a1:c4:72:b9:ff:
         9d:1c:ce:7b:53:1a:24:b7:ad:0a:8e:13:c6:fe:e8:82:4f:d6:
         5f:86:d1:e4:89:93:4d:f3:04:31:0b:af:40:84:2d:e3:90:58:
         b5:7a:ab:bf:dd:22:e2:ce:e4:64:15:d3:0c:77:8c:31:4f:06:
         91:33:40:89:7c:02:cc:14:57:17:97:ea:81:52:dd:28:67:a3:
         5e:88:c7:0f:af:1c:5d:d7:07:f3:d8:b6:39:53:5c:b8:97:55:
         b1:05:98:c1:07:fc:52:b1:4d:9d:e5:5b:8c:23:15:0d:e7:28:
         38:73:85:ca:e4:c4:54:8e:1b:51:5e:ce:c2:17:eb:d4:bc:f1:
         c2:93:2b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:27:27 2025 by rpki-client