Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d158b943-4484-3272-9c55-ad65b454b43c.roa
File:                     d158b943-4484-3272-9c55-ad65b454b43c.roa (raw, json)
Hash identifier:          EMWXsYCryn94iSyKQHcK8gY68epi/ABHo/reO/nyxBg=
Subject key identifier:   62:81:EE:35:7C:72:EF:40:33:1E:7F:92:40:DF:75:9D:06:E6:FB:8A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858485E35C044F8B66DA8F337D580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d158b943-4484-3272-9c55-ad65b454b43c.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     6167
IP address blocks:        72.106.104.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:c0:44:f8:b6:6d:a8:f3:37:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=4a2217aa-710d-477d-80eb-6a379b488445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:14:b7:c8:ed:49:ff:d3:eb:6e:04:be:bb:bf:
                    62:99:14:c1:49:41:5a:c1:78:8f:bc:52:9a:03:00:
                    54:8a:9c:28:f6:b4:96:74:c5:31:43:83:45:34:40:
                    51:b7:2e:c6:1d:e6:8a:45:4f:67:d4:76:de:1e:7e:
                    b0:d3:7f:b2:43:a4:3a:ee:63:2a:26:78:21:e2:ca:
                    5f:ae:e2:27:b6:d1:f8:ab:1d:38:99:b6:ae:67:8a:
                    ab:1b:84:10:f9:d8:ea:c1:f1:30:f2:2e:14:56:c1:
                    f1:00:65:06:3c:72:db:2e:e4:a2:d0:9f:7a:cf:ed:
                    97:85:6e:c6:0b:49:26:cc:21:5d:68:b8:0c:53:b2:
                    e8:39:2d:38:ac:15:3e:07:f1:7e:77:f9:53:48:cc:
                    34:7b:32:22:78:d9:8b:98:80:40:55:d3:d5:ac:c7:
                    ea:d3:21:05:d0:c8:d3:02:bc:09:df:aa:c6:b4:f0:
                    f5:01:fd:94:37:14:17:89:84:c3:9b:de:6c:6e:cd:
                    c0:97:e5:17:91:4f:97:40:84:04:b1:6f:1a:b3:c8:
                    28:e3:1a:d6:7e:bb:1e:4e:42:a9:02:18:eb:b5:bd:
                    6f:45:c8:cc:7c:52:00:e1:4d:20:11:30:f4:e4:b1:
                    41:d5:36:ff:f5:2c:fe:06:ed:60:64:bf:ab:e0:6c:
                    f0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:81:EE:35:7C:72:EF:40:33:1E:7F:92:40:DF:75:9D:06:E6:FB:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d158b943-4484-3272-9c55-ad65b454b43c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.106.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:ad:11:82:b1:ce:3f:a7:58:ef:23:b4:00:67:18:46:0e:0f:
         56:f5:c8:28:9b:5e:92:e9:bd:c0:dc:04:2d:09:43:cb:2b:d2:
         dd:6e:f2:9a:3f:42:19:05:8d:6d:86:14:72:5b:c4:d7:99:10:
         24:5d:3d:6e:55:fd:45:09:49:66:79:53:02:4c:ca:c7:76:c0:
         3a:c2:e9:a2:4c:c3:f7:6d:4b:09:73:9d:f3:26:95:c9:c2:88:
         0a:0b:fc:4d:80:56:58:f9:f4:eb:48:e6:51:58:3b:1e:3c:71:
         72:23:a8:a9:47:d6:86:d4:c1:46:54:32:41:20:de:90:27:ef:
         25:95:12:ef:df:1a:c5:33:cc:f1:44:d8:3d:ec:bf:4d:6b:0a:
         94:21:58:eb:90:04:ae:97:28:94:9b:81:f1:9e:27:3d:8f:4b:
         99:aa:9e:d5:75:a8:0e:fd:ff:d5:f9:22:eb:c2:06:c9:e5:a0:
         bc:b2:77:2e:de:a2:eb:92:91:6d:1d:35:d5:9c:75:f9:ed:15:
         7b:08:78:f5:da:0b:e3:63:9e:f7:4b:42:e3:d7:78:fa:1c:c2:
         62:44:3c:ae:84:f2:64:ca:67:eb:57:f6:d1:b5:a3:c5:2f:c9:
         29:0b:d9:90:c6:34:f1:f2:a2:83:b8:2a:41:1d:2c:bc:94:72:
         f8:67:ac:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:51:07 2025 by rpki-client