Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bf29eb1b-9709-353d-afd7-b38c7ff2107d.roa
File:                     bf29eb1b-9709-353d-afd7-b38c7ff2107d.roa (raw, json)
Hash identifier:          Y/nW2aMxLcR1yksT2kZrg6Nw4sHavAuzSHPVaXjYC1c=
Subject key identifier:   63:4A:4B:62:D7:A1:77:94:59:04:A6:78:85:93:78:FA:E2:6F:89:7F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584837201A7B0A423F2B404B3890
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bf29eb1b-9709-353d-afd7-b38c7ff2107d.roa
Signing time:             Sun 15 Dec 2024 14:00:53 +0000
ROA not before:           Sun 15 Dec 2024 14:00:53 +0000
ROA not after:            Sat 15 Mar 2025 13:00:53 +0000
asID:                     6167
IP address blocks:        72.105.186.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:37:20:1a:7b:0a:42:3f:2b:40:4b:38:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 15 14:00:53 2024 GMT
            Not After : Mar 15 13:00:53 2025 GMT
        Subject: CN=931f5c3a-dd8e-4afb-92d3-8fea634fb315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0d:89:f6:d8:c2:d0:fa:2a:b3:b4:85:c5:13:
                    62:f7:17:7c:49:4c:69:cb:ea:3f:66:92:83:40:59:
                    61:15:b9:c1:fa:6d:61:72:3f:13:82:87:70:38:5a:
                    16:d8:46:53:9f:cf:90:15:95:58:cf:0b:f2:b3:41:
                    27:8b:6a:74:da:45:83:fe:94:76:c7:26:26:f9:c0:
                    96:7d:05:32:ba:49:a0:cf:8d:13:09:e8:49:c7:b6:
                    da:33:33:44:ad:f6:9e:0d:38:e1:40:41:bc:f7:7b:
                    d6:7d:63:08:f3:32:40:3c:33:71:1b:9d:53:3b:f9:
                    ed:a1:b5:89:94:8b:96:91:50:b6:69:4d:f7:ea:af:
                    ea:88:09:bb:82:51:f4:a7:7b:5f:f1:b3:0e:3d:a9:
                    ab:70:43:08:58:08:37:cb:ed:cf:1a:b3:c8:79:bc:
                    d7:43:c3:e7:46:48:9f:9c:99:df:59:d8:f2:dc:82:
                    85:35:83:c3:72:d2:67:00:d4:6d:5f:f3:5c:00:07:
                    a7:52:8e:3c:b1:29:3c:4b:63:60:c9:48:d7:75:fc:
                    be:76:d5:fc:d6:d6:01:e9:6f:e6:2b:1f:7e:be:43:
                    1e:2a:0b:bd:f6:92:11:42:db:53:35:03:01:e8:8d:
                    43:e9:1e:d2:0b:11:28:79:a2:fd:1e:3c:b6:59:ae:
                    51:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4A:4B:62:D7:A1:77:94:59:04:A6:78:85:93:78:FA:E2:6F:89:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bf29eb1b-9709-353d-afd7-b38c7ff2107d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.105.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:94:5a:a1:b2:78:36:6a:51:bb:5a:25:71:e2:b6:92:4a:57:
         79:8c:73:05:c7:46:22:0f:90:4d:aa:44:84:f4:5a:12:dc:76:
         a7:b1:46:2c:d1:e9:78:f2:1d:81:0e:6d:ca:34:e1:ac:9b:85:
         fe:d4:65:83:85:32:03:d3:d9:63:d0:ff:8a:d9:e9:91:1e:f9:
         46:f1:da:d7:0b:12:0b:df:42:71:30:a5:14:8a:3a:46:5e:80:
         92:4e:ad:ae:b5:e8:c2:b3:65:1c:aa:13:c2:e9:88:a7:98:20:
         d5:2c:c4:51:46:b5:57:38:0c:bb:13:ee:fb:2e:1f:38:d1:de:
         30:f4:32:e7:4e:83:a1:64:c4:31:76:a5:dc:ef:81:68:c5:ab:
         0e:c6:ab:31:c8:38:f7:22:43:36:a8:52:85:6c:32:c5:5a:15:
         2d:e3:9a:b1:3c:e7:df:ab:77:c3:39:0f:73:39:66:f2:cd:1c:
         8c:f9:4a:4b:e8:39:7b:3b:a2:b5:eb:b2:06:a7:3f:53:80:f1:
         ee:03:0a:dd:bc:d2:65:e1:fb:3b:21:25:09:f9:4d:d9:b6:1f:
         c6:77:03:07:12:79:ff:89:67:44:ac:98:17:b9:58:6e:5c:a5:
         08:4f:9d:36:13:d6:75:db:70:96:fe:b9:00:4d:1b:2e:8f:8f:
         d9:9a:af:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:49:58 2025 by rpki-client