Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a38188b4-c020-3fea-8761-b1b4a7b55f44.roa
File:                     a38188b4-c020-3fea-8761-b1b4a7b55f44.roa (raw, json)
Hash identifier:          u71g3jbN88XEGdUzw+bJVMe8qtWi8djGyw5C1t7x1xs=
Subject key identifier:   91:C8:7B:9A:AF:E4:7B:22:13:67:83:E6:BC:E5:6E:1D:DB:D3:3E:FC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848854B6B1D5F0A7EB6E3A5D880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a38188b4-c020-3fea-8761-b1b4a7b55f44.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     6167
IP address blocks:        75.248.104.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:6b:1d:5f:0a:7e:b6:e3:a5:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=59bc1721-3cd5-45bd-beb9-09fbf6bc5838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5c:35:ec:7d:77:8c:bb:33:4b:9c:da:9e:9e:
                    61:f9:91:4e:25:ac:34:49:ea:83:72:e3:f2:ef:db:
                    ab:d5:81:33:e2:1e:90:40:89:4d:8f:16:b8:21:af:
                    5e:7e:38:b4:a4:80:8b:05:fc:3d:9e:04:5e:2c:0e:
                    11:8f:d6:eb:0b:e9:0f:58:9b:48:00:24:63:70:0a:
                    78:86:b6:7b:a3:2a:f7:6a:5b:d1:51:ae:93:bf:71:
                    df:0b:1e:98:5e:b0:6f:68:73:3a:fd:ae:c2:56:99:
                    31:ad:60:5d:30:69:4e:24:78:e1:0d:1f:aa:71:1d:
                    ae:5b:e7:39:65:4d:3f:ad:62:f7:d2:df:67:08:0c:
                    d7:9f:f3:6f:27:b2:27:71:fb:3c:00:77:71:5d:a4:
                    0f:99:c1:37:1f:e5:1d:e1:0f:27:bc:c9:ca:f5:60:
                    a5:fa:33:d2:9b:20:b5:88:3d:a0:53:8d:95:ef:ec:
                    a0:63:b6:cb:10:45:52:b3:68:ab:0b:b3:9e:4b:7c:
                    05:9a:84:f4:d4:32:b3:67:4f:68:ba:fe:a1:cf:fd:
                    4c:3d:93:c9:08:4e:bc:bf:01:63:46:49:f0:2e:9b:
                    6c:15:fd:66:64:57:95:49:1a:9c:3c:df:5e:38:97:
                    6d:ce:43:5b:29:ea:c1:85:31:17:da:f8:2c:6d:31:
                    21:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C8:7B:9A:AF:E4:7B:22:13:67:83:E6:BC:E5:6E:1D:DB:D3:3E:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a38188b4-c020-3fea-8761-b1b4a7b55f44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.248.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:fc:fe:19:65:35:08:5c:ea:07:a8:20:8b:8b:c9:8a:33:76:
         6b:b8:be:d2:75:28:39:85:51:2a:ca:49:00:03:ed:3e:62:3a:
         4e:ed:40:13:24:c7:54:1d:0a:9a:9c:8d:8f:38:df:7f:28:9f:
         b6:c5:aa:0d:01:0e:6d:2d:03:80:ae:d3:46:4c:e1:52:77:5e:
         b4:0c:ed:ea:28:ae:d4:d7:dd:37:33:a9:2d:fc:26:e6:d4:77:
         af:4b:13:05:f6:06:3b:6e:31:2f:66:61:d7:17:fa:e5:82:bf:
         61:5d:14:84:43:73:21:7e:d7:29:f5:7d:29:74:a0:12:68:23:
         96:1a:9e:7a:4b:85:9e:95:22:bd:dc:a2:59:e7:48:c0:58:33:
         39:a3:5f:b0:53:2e:ab:67:0b:93:52:11:a0:8f:a4:c6:36:31:
         67:76:62:25:a2:93:42:be:ff:b4:09:9b:3b:fe:f1:76:34:1c:
         53:17:00:be:c5:e0:84:37:47:a7:0d:42:1b:31:a5:ed:7c:58:
         82:39:79:1a:6a:09:70:ad:c2:8a:fb:81:94:c9:6e:c2:ba:22:
         21:d0:87:69:24:e9:76:5b:28:5e:c1:91:9f:a9:a7:c0:c4:5d:
         99:08:92:34:dd:d9:85:90:55:16:1f:af:de:21:13:73:96:c9:
         6f:ba:a5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:23:07 2025 by rpki-client