Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b1601996-b300-33cd-a7c7-720d86412bf5.roa
File:                     b1601996-b300-33cd-a7c7-720d86412bf5.roa (raw, json)
Hash identifier:          jui2k7QrQ2B2zw3KiKZpi+J6ysQCrOWSQZfS1ZuZD4s=
Subject key identifier:   43:B4:26:A5:4F:D6:55:A2:2F:AD:2F:58:D6:84:53:65:4D:22:5F:61
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584832F04D899165125BB109B100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b1601996-b300-33cd-a7c7-720d86412bf5.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     701
IP address blocks:        71.245.240.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:4d:89:91:65:12:5b:b1:09:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=74b786cc-ebae-402d-a047-7d9f4c1ad33c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:13:0f:2a:51:81:6b:30:56:59:85:6a:33:07:
                    31:e6:9a:4e:e0:0a:83:39:60:b3:47:e3:30:a5:19:
                    8b:cf:05:4a:86:d2:0a:78:4a:f4:1d:10:a6:f4:96:
                    d9:00:cd:f9:0a:dd:ef:51:da:c1:67:19:7a:1c:00:
                    74:bf:3f:e9:2d:f0:e9:3c:1d:be:27:dd:fd:83:55:
                    fe:ea:ba:b8:89:80:16:4a:e0:7b:bf:d8:3d:87:0d:
                    3b:da:fd:58:8e:f7:af:04:59:56:e9:4f:3c:43:76:
                    c4:d9:d1:1c:26:04:6a:46:77:70:f5:27:4f:28:8f:
                    7f:5d:92:1f:b0:2a:b1:b2:16:af:7c:f8:b1:ec:d5:
                    dc:2a:9e:8b:fd:67:80:2b:2a:83:01:66:95:81:0a:
                    05:f8:e7:f4:35:7b:dd:97:0e:e8:05:72:c8:0c:50:
                    cc:30:89:98:64:ab:7d:73:6e:44:c1:d0:24:19:9a:
                    9e:46:e0:7c:b3:61:22:4e:29:06:18:8c:be:ab:88:
                    f3:c5:69:13:dd:20:9f:ca:7b:fc:29:9b:ce:01:8d:
                    07:09:85:f0:df:0c:f6:01:17:c4:25:1d:d4:83:3e:
                    57:d4:39:21:ea:28:e3:d7:63:80:a6:ae:d0:2d:d0:
                    fc:f5:ca:1b:4f:cc:46:d4:e7:ef:72:4c:74:67:b8:
                    5b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B4:26:A5:4F:D6:55:A2:2F:AD:2F:58:D6:84:53:65:4D:22:5F:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b1601996-b300-33cd-a7c7-720d86412bf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.245.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a9:6e:dd:22:2c:3e:c3:fa:48:53:70:dd:72:cf:b6:61:5e:
         ca:01:2f:02:5f:51:72:a7:6b:1a:8a:fa:7d:03:62:b3:87:63:
         fe:6b:12:1e:c8:1f:b3:5e:02:3c:ce:90:cf:02:24:19:e4:9f:
         32:94:9e:9e:0b:76:e9:c1:f0:9a:f7:ab:29:95:5a:89:f4:ec:
         ac:d4:ec:57:e2:49:0e:94:c5:c4:ae:0a:11:26:15:15:ea:52:
         94:65:ba:16:b1:9a:d5:c8:0b:84:13:04:96:a9:83:0a:eb:d3:
         8f:de:df:4a:45:3e:cb:cd:c6:3a:34:80:fc:8b:32:95:98:fc:
         40:3b:4d:64:e2:37:cd:57:e8:40:d5:b8:e9:15:bf:ba:64:75:
         a8:e7:5c:2b:7a:94:10:2e:82:ea:10:dd:07:a2:7c:5f:4c:ea:
         89:d4:89:e0:d9:20:3a:81:b6:d5:0f:54:24:10:8f:22:4a:e1:
         2a:02:a6:aa:1b:75:bf:24:80:52:8a:7c:59:5c:85:79:ec:7e:
         6b:45:db:64:21:75:c0:af:15:d8:7c:44:59:cb:be:1c:c0:af:
         75:f4:cf:3c:55:0a:fa:0c:e9:10:34:4c:1f:cb:3e:b0:36:e3:
         ed:de:85:7c:8e:53:cd:34:01:a2:b1:e2:01:6b:0a:bc:ae:83:
         b6:84:e3:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8E2JkWUSW7EJsQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
NzRiNzg2Y2MtZWJhZS00MDJkLWEwNDctN2Q5ZjRjMWFkMzNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BMPKlGBazBWWYVqMwcx5ppO4AqDOWCzR+Mw
pRmLzwVKhtIKeEr0HRCm9JbZAM35Ct3vUdrBZxl6HAB0vz/pLfDpPB2+J939g1X+
6rq4iYAWSuB7v9g9hw072v1YjvevBFlW6U88Q3bE2dEcJgRqRndw9SdPKI9/XZIf
sCqxshavfPix7NXcKp6L/WeAKyqDAWaVgQoF+Of0NXvdlw7oBXLIDFDMMImYZKt9
c25EwdAkGZqeRuB8s2EiTikGGIy+q4jzxWkT3SCfynv8KZvOAY0HCYXw3wz2ARfE
JR3Ugz5X1Dkh6ijj12OApq7QLdD89cobT8xG1Ofvckx0Z7hbNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEO0JqVP1lWiL60vWNaEU2VNIl9hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjE2MDE5OTYtYjMwMC0z
M2NkLWE3YzctNzIwZDg2NDEyYmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/XwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHKpbt0iLD7D+khTcN1yz7ZhXsoBLwJfUXKnaxqK+n0DYrOHY/5rEh7I
H7NeAjzOkM8CJBnknzKUnp4LdunB8Jr3qymVWon07KzU7FfiSQ6UxcSuChEmFRXq
UpRluhaxmtXIC4QTBJapgwrr04/e30pFPsvNxjo0gPyLMpWY/EA7TWTiN81X6EDV
uOkVv7pkdajnXCt6lBAuguoQ3QeifF9M6onUieDZIDqBttUPVCQQjyJK4SoCpqob
db8kgFKKfFlchXnsfmtF22QhdcCvFdh8RFnLvhzAr3X0zzxVCvoM6RA0TB/LPrA2
4+3ehXyOU800AaKx4gFrCryug7aE43c=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:21:44 2025 by rpki-client