Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d7c1c95e-e513-339d-a40a-1e6459eb16b7.roa
File:                     d7c1c95e-e513-339d-a40a-1e6459eb16b7.roa (raw, json)
Hash identifier:          1Fs4ejYQy4uYEjGSC1yZkeqT1ByEivXTVYnp8y/mJDU=
Subject key identifier:   16:DD:F3:3B:3A:53:D6:82:7B:1A:F8:D5:37:91:C5:CE:89:98:6D:64
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584832F04BA58255884E5CBA5C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d7c1c95e-e513-339d-a40a-1e6459eb16b7.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     701
IP address blocks:        173.79.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:4b:a5:82:55:88:4e:5c:ba:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=5f448793-f3e8-431b-bd19-15e66f13816e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8d:fa:b3:ba:cd:da:cc:a4:16:3b:70:67:35:
                    ff:a7:7c:6c:ae:ba:fc:a4:c9:48:3a:e8:98:83:80:
                    e6:d5:99:e9:ed:bd:38:c4:77:df:6d:00:dd:a8:74:
                    83:26:cc:85:07:b7:53:11:15:50:4a:3b:ff:8f:b3:
                    9f:df:db:25:0e:4a:99:2d:84:ec:52:5f:02:33:8f:
                    69:69:d7:c6:eb:18:15:36:fd:e9:b9:1f:ab:49:8d:
                    80:5c:e1:b0:7f:35:70:e9:2a:c1:6e:5d:94:4e:00:
                    11:2c:ca:fb:04:69:99:b7:bc:da:db:8f:f7:c1:04:
                    91:31:a5:81:c4:20:6d:96:9d:31:51:ba:76:63:a1:
                    b4:60:02:ee:26:44:59:4c:1c:7d:8d:2b:97:7a:e6:
                    fd:80:6f:ba:ae:17:fb:c5:35:d3:66:ef:7e:d3:2e:
                    d8:47:72:c4:18:3d:1c:10:43:ab:a5:3f:2a:50:b7:
                    37:40:89:52:e7:3b:38:d9:1e:92:16:57:e7:f7:1c:
                    30:9e:4d:c0:c4:e1:76:02:40:27:dc:97:5a:08:ba:
                    1a:9f:9c:76:7f:24:29:6c:6d:98:bb:c8:5d:97:8f:
                    fa:05:64:57:07:0a:1d:74:7c:2c:c7:b9:20:6f:a8:
                    df:2e:80:29:ea:e0:a7:0f:38:6a:8d:f9:8d:82:39:
                    bc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DD:F3:3B:3A:53:D6:82:7B:1A:F8:D5:37:91:C5:CE:89:98:6D:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d7c1c95e-e513-339d-a40a-1e6459eb16b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.79.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:ca:96:2b:20:b0:dc:b9:1d:9d:87:f9:6e:d3:23:81:13:d9:
         f6:ad:97:c7:37:ae:cf:7b:2a:d0:a1:5b:7a:59:de:db:7c:44:
         bc:1c:04:52:d4:58:48:7c:71:4f:6e:9a:69:20:e1:65:74:03:
         bf:0f:de:5f:f5:21:93:6a:29:57:e7:34:58:33:51:6c:86:c5:
         ad:04:55:66:26:3f:01:ef:8d:2e:58:f5:11:7d:13:44:d4:c9:
         f3:37:f1:c6:72:0c:ee:f8:af:b8:53:20:9c:a1:58:f2:a8:f0:
         82:16:4e:d3:54:b4:19:f6:38:97:31:ba:70:28:db:57:30:82:
         cc:46:70:11:8c:96:a6:94:1f:7b:19:e7:5e:bb:8f:52:4f:22:
         7f:c0:5d:41:56:e2:3e:98:08:bb:c5:fd:97:7b:37:f1:16:78:
         11:06:74:4a:d9:8e:66:e5:57:08:a4:77:fc:bf:21:bf:d8:21:
         93:a2:36:19:55:e9:60:6d:83:42:e0:e1:93:0b:72:14:84:bd:
         93:07:25:fe:48:e7:44:84:5b:55:86:a3:ab:05:de:04:8a:49:
         75:8b:a3:a5:de:12:cd:da:e5:c7:42:4d:29:02:40:1f:64:07:
         55:a8:84:cd:1d:05:b3:8a:86:66:dc:97:7b:96:fc:b3:a2:9e:
         1f:a6:93:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:13:25 2025 by rpki-client