Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5d5873-043c-3b99-9095-ad60a8b913af.roa
File:                     db5d5873-043c-3b99-9095-ad60a8b913af.roa (raw, json)
Hash identifier:          EsMWfdI9E/bXpivrFVS2qqpyxmm8mcG+8kPqLRCUl+U=
Subject key identifier:   32:C2:10:DB:CC:60:86:F3:EE:25:05:FE:B7:B6:21:CD:15:58:2A:5F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848424B165EEF9BC4288BA50040
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5d5873-043c-3b99-9095-ad60a8b913af.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        97.191.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4b:16:5e:ef:9b:c4:28:8b:a5:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=ea2eb864-2724-4981-88da-d9d85789a98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fc:df:aa:cb:75:38:bd:c7:9b:a2:0c:95:bc:
                    68:17:89:ed:db:7a:64:cd:03:9d:9f:28:d1:b4:e5:
                    30:c0:ed:46:be:5f:a2:93:91:4e:ff:12:02:cf:76:
                    78:fa:0f:b9:21:31:d1:a8:0f:d9:2b:ba:07:a8:c9:
                    f2:89:d4:e6:54:8a:06:7e:e3:07:7d:41:64:5f:8b:
                    f7:49:bd:fa:01:5c:81:5e:e0:74:be:e3:83:db:25:
                    1d:4e:a7:37:fb:50:f9:62:7b:4a:60:16:45:11:58:
                    57:0a:95:50:4f:d8:96:9c:22:77:66:5f:da:8c:db:
                    b9:d1:d4:e5:f2:c2:dd:39:f6:f0:d5:f5:93:a8:ed:
                    0e:34:55:3b:d3:16:75:da:37:4b:89:fd:28:0c:c8:
                    ff:c9:b6:88:31:3f:ef:50:a7:af:76:bd:de:07:ef:
                    1e:1c:a6:2f:93:c6:5d:63:8f:63:43:b5:e3:39:5a:
                    19:63:49:58:50:be:79:ed:a6:4c:1a:d5:84:d8:33:
                    f2:d4:50:2c:08:47:5a:40:47:ad:88:20:0b:f1:75:
                    02:f8:99:3f:2d:98:2b:be:5b:98:39:57:10:03:a0:
                    7e:65:ee:1c:a2:7a:88:05:ba:5f:14:da:8d:00:e5:
                    0f:71:83:2f:bf:55:0c:19:5a:2e:5c:b6:2d:9c:ea:
                    5f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C2:10:DB:CC:60:86:F3:EE:25:05:FE:B7:B6:21:CD:15:58:2A:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5d5873-043c-3b99-9095-ad60a8b913af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.191.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:d4:29:57:e8:a9:68:a8:d0:ff:f3:1f:6d:de:e2:95:63:24:
         1c:b3:02:22:f1:8f:6d:ac:03:50:e5:40:d7:01:54:50:d3:4f:
         f7:00:de:a9:cb:03:75:27:b6:10:15:32:d1:97:30:9c:33:3e:
         48:b1:e5:3c:25:e5:8b:23:c2:e2:2e:af:e3:45:bc:45:a7:2c:
         50:bd:51:be:79:8c:80:e0:49:55:41:19:0b:e5:69:f1:a4:61:
         19:eb:72:e0:7f:46:9a:71:8c:19:ce:21:d2:f8:3f:3f:47:38:
         a8:6e:65:80:ef:43:f1:0a:8f:d1:16:76:5f:ff:27:aa:4e:c5:
         49:27:0d:4a:f1:1a:fb:b3:7f:7b:35:bd:09:88:4c:f6:c2:96:
         c1:68:69:d1:94:39:3f:8e:1f:73:76:3c:8a:af:05:24:40:08:
         9c:04:cb:6e:e2:3e:c8:13:d2:a8:d6:1e:2d:18:e1:c0:37:5b:
         52:88:04:2a:0e:d6:7c:89:d1:a0:60:af:51:84:85:4e:bd:8c:
         48:4a:06:fa:10:1a:5f:05:9c:1b:62:fa:e3:77:bc:50:3b:36:
         2c:00:c8:82:fb:4a:96:0b:45:cd:23:17:90:1f:7c:9c:dd:b7:
         df:5e:e2:b8:41:1a:fc:8c:d2:56:fa:ec:ae:17:e7:98:7a:e6:
         7d:06:15:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:18:06 2025 by rpki-client