Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de0ae164-e3d5-364e-964a-19a724ad7e8e.roa
File:                     de0ae164-e3d5-364e-964a-19a724ad7e8e.roa (raw, json)
Hash identifier:          KDxHbcY4LQfeLXX9NXUPDyJGji1r3gxGjK2yYKiy1ok=
Subject key identifier:   E5:60:21:2F:B7:05:D3:26:42:95:31:1D:27:A0:2B:1F:E5:38:D1:E8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584837202359EBE609FE1FB0C240
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de0ae164-e3d5-364e-964a-19a724ad7e8e.roa
Signing time:             Sun 15 Dec 2024 14:00:53 +0000
ROA not before:           Sun 15 Dec 2024 14:00:53 +0000
ROA not after:            Sat 15 Mar 2025 13:00:53 +0000
asID:                     6167
IP address blocks:        72.96.224.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:37:20:23:59:eb:e6:09:fe:1f:b0:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 15 14:00:53 2024 GMT
            Not After : Mar 15 13:00:53 2025 GMT
        Subject: CN=d94f41d0-6e57-46e7-86ec-09fc84acdaca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:16:98:de:e2:e9:31:59:c0:6c:b1:dd:33:90:
                    d1:fe:37:c4:20:b4:8f:6f:a7:af:7b:8b:4e:70:e5:
                    5d:bd:0f:e2:88:26:71:6c:4f:6d:69:76:b3:8b:f5:
                    61:42:c7:75:2f:1f:5c:c1:84:3a:e4:b4:d5:58:33:
                    93:ce:00:8a:1a:55:44:ad:ca:f5:61:a0:b9:49:d3:
                    a1:91:ad:fd:a9:1f:6c:0d:41:c3:97:b2:b4:71:33:
                    0b:bf:d9:b4:96:2c:db:a6:2c:44:9a:2a:b1:a9:4c:
                    59:e0:00:ad:66:0c:59:9b:47:68:93:b4:e5:df:a2:
                    47:df:38:7e:02:33:34:2e:e1:04:6c:40:d8:6e:e4:
                    c3:44:a9:71:8c:3c:1b:95:f7:81:3a:b0:7a:f4:59:
                    6d:e8:34:66:3c:ff:e3:b6:ef:e3:f4:9a:cd:c4:1a:
                    cf:0d:81:d5:ec:a7:80:f3:e4:70:f1:a3:06:d6:d6:
                    89:4e:e9:1a:f4:5a:bc:a7:16:0a:cb:b8:e8:f8:f7:
                    5c:be:ab:52:87:2f:be:09:06:18:20:35:6d:1f:aa:
                    c6:f7:ee:80:44:01:77:15:29:d1:86:2c:38:c5:d5:
                    b3:bd:ec:ed:17:66:ce:78:ba:b5:be:4d:48:a3:6d:
                    46:9c:9d:55:b9:a9:6c:b6:e9:9d:02:58:65:8a:fa:
                    df:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:60:21:2F:B7:05:D3:26:42:95:31:1D:27:A0:2B:1F:E5:38:D1:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de0ae164-e3d5-364e-964a-19a724ad7e8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.96.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:7c:12:09:c2:b6:ee:5d:8b:06:94:d8:06:96:53:19:a5:da:
         31:f2:20:94:2c:5b:fc:c5:23:f2:69:3e:7b:3e:c2:72:f2:c0:
         cb:57:55:04:5b:8c:d3:51:a6:52:d9:47:51:ae:d6:dc:fe:ec:
         06:93:f2:73:64:93:57:bb:c4:70:24:c9:0b:38:99:9a:a5:b4:
         28:dc:bc:39:1f:26:1d:e4:9a:a6:fb:81:d7:5d:4e:95:fa:97:
         6b:a7:d6:11:21:34:f9:e6:80:e2:32:94:6d:21:94:b2:63:2c:
         1f:5a:aa:6d:ef:1a:9d:9d:75:ec:24:ff:4e:fc:17:4b:59:28:
         f4:b7:c4:64:5c:92:2a:62:81:5b:d8:4c:f0:57:e7:2d:71:51:
         c1:40:91:c1:c6:ae:a5:f2:dc:36:6d:ae:33:e8:95:6b:1d:65:
         0e:42:e3:9c:12:cf:e6:8d:4f:a9:c5:b5:da:d0:5f:99:10:7c:
         5e:d9:68:c6:54:3d:3b:d8:51:fe:50:c4:20:af:ee:ea:e3:88:
         c7:2e:25:5c:7e:69:ce:ae:96:ec:15:91:92:29:04:e8:f8:40:
         2e:67:41:59:e2:d2:0c:cf:be:d8:5e:f1:85:89:31:f8:8c:27:
         aa:26:18:67:56:a4:1b:5a:47:d3:ae:68:80:ad:28:cf:38:37:
         43:2e:ce:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:16:19 2025 by rpki-client