Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b2fc3841-a937-3f13-a911-5d8d1810762d.roa
File:                     b2fc3841-a937-3f13-a911-5d8d1810762d.roa (raw, json)
Hash identifier:          ccf2/e53ic0u+vbiwhxLSqruuPknZ64nXSk6vQSdJds=
Subject key identifier:   75:28:19:33:34:5E:0A:6B:12:08:8C:09:1D:7D:E6:AC:FD:C9:B8:A0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858485E35C7D5E60DA2E72E8D8880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b2fc3841-a937-3f13-a911-5d8d1810762d.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     6167
IP address blocks:        72.108.152.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:c7:d5:e6:0d:a2:e7:2e:8d:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=1a5ae74a-8406-413e-a045-497a2652c126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:01:17:73:e4:21:20:46:d0:9b:28:30:fe:dd:
                    1c:b8:20:9f:63:00:e8:3b:65:7d:65:e1:63:23:b8:
                    5b:9a:5b:df:19:21:e4:ea:ac:0d:1c:7e:8e:f8:e4:
                    25:04:16:ea:06:a5:52:17:44:55:ca:37:2b:09:7d:
                    d6:83:cc:7a:05:d5:ca:f0:f3:7c:56:26:09:be:76:
                    8e:d6:36:ce:d0:08:8c:f2:ef:13:e1:3a:03:f1:c1:
                    1a:20:d9:4b:f5:98:07:48:4f:86:0e:0f:07:8f:38:
                    9c:4e:de:6c:0e:7b:90:ba:bf:9d:37:c8:ed:f6:64:
                    13:ae:ba:8d:da:76:f7:5b:2c:fd:ae:10:d1:aa:ec:
                    5b:08:64:5b:3b:5a:c5:77:2c:cc:87:1c:32:40:99:
                    46:ec:9a:a3:86:dd:a3:16:e4:2e:72:ee:e1:1a:ac:
                    59:6b:92:90:fa:2a:35:d6:55:3a:f5:92:61:89:76:
                    18:48:1c:55:e9:0f:94:a3:bc:b1:17:67:44:a9:d4:
                    c3:b8:6e:b9:9f:93:8d:c1:2f:b0:b5:ce:8d:81:4c:
                    06:82:09:87:48:98:cb:6a:54:5e:db:29:0d:08:78:
                    c2:e3:6b:4a:e7:b4:4b:af:4a:9f:d2:93:11:b8:22:
                    30:69:50:a8:89:86:12:f5:ab:9f:b4:b6:9a:7f:c1:
                    3c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:28:19:33:34:5E:0A:6B:12:08:8C:09:1D:7D:E6:AC:FD:C9:B8:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b2fc3841-a937-3f13-a911-5d8d1810762d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.108.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:6c:a5:05:5e:ce:8f:75:67:ae:ab:f9:d2:f9:5a:ab:bb:29:
         55:6a:95:94:8b:c4:bf:71:bf:aa:b3:bd:4f:36:2c:23:01:82:
         94:be:6f:24:36:66:bd:b8:8a:57:0a:31:c7:9b:d2:16:1a:4e:
         66:5b:3c:17:54:2b:b3:f6:48:e7:7d:53:e2:b0:fb:bb:47:1a:
         ef:30:24:d6:a9:95:55:e7:5a:82:c4:19:9e:91:b2:d4:5b:33:
         d2:85:7a:a5:27:3d:70:eb:87:fe:b3:dc:0e:4f:a1:b6:1e:31:
         8f:89:28:c3:21:89:d8:ae:66:b8:b3:2a:86:ea:87:9e:74:52:
         03:da:be:25:42:0b:f6:9d:b1:c1:4a:1a:d1:64:d4:3c:82:49:
         fd:c2:ff:d3:f3:b9:cd:e5:bf:fd:6c:ca:e7:dd:f0:3c:7f:75:
         59:1e:6f:71:3e:81:f7:61:03:c5:98:47:cd:82:8a:1e:71:9e:
         47:0b:e6:36:96:20:43:ef:e6:a4:7b:e2:9b:77:78:fc:03:6e:
         fd:89:91:f8:14:f9:d4:ba:10:ee:56:4e:9f:b5:bb:72:0b:c0:
         75:38:9d:24:d1:3a:cf:79:9b:c5:50:02:d6:e2:6b:82:39:a0:
         f6:24:4e:f3:e9:4f:db:20:b6:f0:3d:3f:91:78:0f:38:6c:9c:
         e6:48:b6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:03:58 2025 by rpki-client