Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b9bb15c1-194d-3170-8f77-bbde3dbbcd27.roa
File:                     b9bb15c1-194d-3170-8f77-bbde3dbbcd27.roa (raw, json)
Hash identifier:          DoCoozOoaatG+AU2+LBpJAFBMxJp6HKTURdcZ80Rr4w=
Subject key identifier:   A2:1C:AD:34:91:AA:53:9D:81:41:D8:86:7C:1E:14:87:92:49:01:B8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858482BF56E69AF324458EFBC0E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b9bb15c1-194d-3170-8f77-bbde3dbbcd27.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     701
IP address blocks:        74.101.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:6e:69:af:32:44:58:ef:bc:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=88127ffc-c2c8-49ff-9abe-cf19af4c1a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e1:3b:a8:52:2e:0b:b0:09:df:15:f4:2b:df:
                    bb:92:1b:ec:f5:26:f1:bc:91:81:ef:e0:fe:64:c3:
                    54:c1:58:de:a2:e7:c8:c3:a9:ce:f0:35:82:30:32:
                    e4:91:51:28:26:01:79:59:81:e9:aa:35:4e:66:4d:
                    d8:e6:9d:db:0e:07:fd:00:b8:92:f2:34:3e:6b:2e:
                    8c:76:9c:22:cc:a8:c0:b4:c6:40:d2:d3:5e:81:5f:
                    a4:5c:9b:a0:19:27:20:b7:2f:c0:3b:c4:f3:56:c7:
                    a6:96:dc:b9:07:db:09:d7:bb:12:e9:47:83:dc:bb:
                    d9:58:38:72:57:b0:e4:8e:cf:f8:15:cf:ff:f9:0a:
                    2f:61:50:d0:1d:9e:d3:ee:e2:00:db:9b:8f:ee:b6:
                    a5:1b:d1:1c:93:43:80:56:9e:32:b1:ba:98:32:0b:
                    7a:fe:a8:bd:04:e5:57:c4:2d:66:18:88:94:2f:db:
                    e0:4c:45:86:e6:d6:1d:31:b9:e5:78:08:a7:11:c2:
                    a4:a0:e2:fe:d8:52:08:56:37:d7:38:8c:94:0d:8a:
                    09:a8:1c:fa:26:6f:20:21:78:3a:ec:42:f3:8e:7d:
                    84:e5:ac:ee:88:06:e8:62:45:8d:fb:60:2e:4b:70:
                    78:27:80:16:3c:88:37:0f:f4:39:6f:9f:72:fe:fe:
                    be:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:1C:AD:34:91:AA:53:9D:81:41:D8:86:7C:1E:14:87:92:49:01:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b9bb15c1-194d-3170-8f77-bbde3dbbcd27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.101.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ba:1f:6e:fb:8b:d1:36:18:cf:3b:9f:5d:4a:47:16:90:07:
         12:26:9e:9d:09:4d:30:3b:2d:7c:9b:2c:57:32:1c:74:27:87:
         65:db:2b:8a:00:0a:ce:f1:6b:13:e0:9a:66:2c:cc:4e:7a:c5:
         d9:68:be:1d:c7:87:02:db:68:6b:c8:0d:89:0f:bc:71:41:ef:
         43:7d:70:7e:3b:9d:2e:27:a7:50:21:47:ca:e5:73:1c:c1:ed:
         8f:48:79:64:24:05:e8:4c:71:9d:b1:d3:85:c6:9c:b7:41:03:
         79:81:d3:15:79:22:e2:6a:f5:4f:f2:16:45:b2:67:18:55:1b:
         0d:fc:4d:09:f6:39:14:e0:90:ef:e2:fb:0e:a2:8e:60:90:cb:
         0a:f6:5c:b9:ff:da:f0:7b:28:31:5f:9a:a0:a6:68:88:eb:8b:
         bd:1f:97:be:04:a0:08:f0:e5:d7:84:73:c5:83:e2:97:0d:51:
         cb:b2:61:7f:d1:2d:f4:e2:87:16:bb:cf:69:6c:99:d7:b7:dd:
         32:a3:cc:aa:38:90:8d:9c:3f:d7:78:04:ac:68:17:1e:09:0f:
         3d:81:bf:6e:48:e5:46:ee:c8:89:5f:2b:46:35:85:da:03:82:
         93:43:33:61:39:de:64:91:3a:75:77:15:87:42:f0:a7:75:37:
         9c:1c:bd:ce
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgr9W5przJEWO+8DoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxMTE0MDA1MloXDTI1MDMxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ODgxMjdmZmMtYzJjOC00OWZmLTlhYmUtY2YxOWFmNGMxYTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+E7qFIuC7AJ3xX0K9+7khvs9SbxvJGB7+D+
ZMNUwVjeoufIw6nO8DWCMDLkkVEoJgF5WYHpqjVOZk3Y5p3bDgf9ALiS8jQ+ay6M
dpwizKjAtMZA0tNegV+kXJugGScgty/AO8TzVsemlty5B9sJ17sS6UeD3LvZWDhy
V7Dkjs/4Fc//+QovYVDQHZ7T7uIA25uP7ralG9Eck0OAVp4ysbqYMgt6/qi9BOVX
xC1mGIiUL9vgTEWG5tYdMbnleAinEcKkoOL+2FIIVjfXOIyUDYoJqBz6Jm8gIXg6
7ELzjn2E5azuiAboYkWN+2AuS3B4J4AWPIg3D/Q5b59y/v6+kwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKIcrTSRqlOdgUHYhnweFIeSSQG4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjliYjE1YzEtMTk0ZC0z
MTcwLThmNzctYmJkZTNkYmJjZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMASmUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAK7ofbvuL0TYYzzufXUpHFpAHEiaenQlNMDstfJssVzIcdCeHZdsrigAK
zvFrE+CaZizMTnrF2Wi+HceHAttoa8gNiQ+8cUHvQ31wfjudLienUCFHyuVzHMHt
j0h5ZCQF6ExxnbHThcact0EDeYHTFXki4mr1T/IWRbJnGFUbDfxNCfY5FOCQ7+L7
DqKOYJDLCvZcuf/a8HsoMV+aoKZoiOuLvR+XvgSgCPDl14RzxYPilw1Ry7Jhf9Et
9OKHFrvPaWyZ17fdMqPMqjiQjZw/13gErGgXHgkPPYG/bkjlRu7IiV8rRjWF2gOC
k0MzYTneZJE6dXcVh0Lwp3U3nBy9zg==
-----END CERTIFICATE-----