Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e150b470-1521-35c3-a72e-d41a37e9a2d7.roa
File:                     e150b470-1521-35c3-a72e-d41a37e9a2d7.roa (raw, json)
Hash identifier:          0uV8Fs2Tb2cInAPizZskjDig82Kx+ZRXnJx6eJtdPMQ=
Subject key identifier:   11:E3:7E:4E:A3:D2:9B:BB:40:77:7D:BE:46:2E:46:93:88:89:2F:EE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584832F05661ED5235C97BD19200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e150b470-1521-35c3-a72e-d41a37e9a2d7.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     701
IP address blocks:        100.35.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:56:61:ed:52:35:c9:7b:d1:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=8bb8a3d6-24eb-4d60-b4ce-a206ba355a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e0:be:97:f2:b6:08:90:92:59:85:8d:e0:24:
                    bd:24:11:18:61:86:3b:ec:c6:5f:33:43:99:b6:ec:
                    28:f4:bd:43:78:8c:d2:80:6f:71:52:75:a9:88:ba:
                    21:e4:58:6b:5b:8c:6c:94:21:23:54:0d:e2:72:98:
                    26:af:70:4e:00:b5:f3:ea:f6:09:fb:1c:75:bf:d7:
                    36:c0:3f:9b:30:ac:ad:0a:71:a1:07:93:87:cf:a2:
                    4c:0b:a4:b5:09:1c:cb:2c:e3:7c:54:bf:42:f9:71:
                    3b:cc:8e:9e:01:bc:c5:1b:2d:da:76:c8:ec:12:90:
                    cf:c1:5d:3b:14:bb:6f:42:09:1f:83:02:8d:ff:bd:
                    db:bf:fc:f4:8e:93:c3:72:d5:a5:0d:2f:87:46:a1:
                    6a:5a:fe:d1:18:cd:92:6b:df:8c:36:0e:34:64:65:
                    78:5b:ef:77:4a:a8:8f:d6:4e:33:e5:0f:db:e1:65:
                    79:6d:09:5b:80:c4:44:d1:00:c1:ed:e6:cc:c4:0e:
                    08:07:98:7f:66:36:8d:a0:9c:48:3b:d9:98:ab:02:
                    e0:f8:d1:be:c2:87:d6:7f:17:7d:9c:a8:53:06:d0:
                    bc:0e:06:3f:72:70:fb:fb:4b:46:7f:44:fb:64:d0:
                    ff:97:9b:2d:cf:57:d0:6a:9d:3f:da:7f:87:b7:5e:
                    d0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E3:7E:4E:A3:D2:9B:BB:40:77:7D:BE:46:2E:46:93:88:89:2F:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e150b470-1521-35c3-a72e-d41a37e9a2d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.35.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:c6:4a:46:10:a2:92:12:0e:f5:46:16:82:cc:6e:ff:71:19:
         b8:d8:92:d3:ba:36:50:b3:86:5d:a0:7e:33:8c:d1:10:47:46:
         45:02:bb:70:91:40:c7:06:e3:55:39:1c:65:a7:59:be:0a:0f:
         3c:ff:0e:e0:ac:9f:ac:d2:db:ae:16:87:1e:98:48:04:cc:d6:
         35:7f:49:1e:32:73:71:f2:fd:a1:45:8b:e8:02:21:9d:0a:95:
         4e:17:53:56:32:1b:ab:b0:c8:29:b6:53:9b:73:be:6b:cf:c8:
         76:60:35:4a:aa:4f:4e:f0:ce:f3:dd:a0:05:22:98:86:35:0f:
         b7:16:bf:af:83:12:9b:92:1d:e7:fb:df:e3:73:6f:ec:ad:43:
         ea:b4:b2:f8:0c:3f:21:92:80:83:af:00:fd:38:93:02:02:a4:
         d8:ff:8a:49:f1:f1:40:6f:9e:ac:4f:d7:71:b3:e3:f6:c9:05:
         cc:22:44:51:5b:96:f3:82:dc:3b:e2:7c:ee:0e:eb:e7:8a:2f:
         f1:e5:53:b4:ef:44:0a:9b:b9:f6:af:d8:67:c8:c7:bb:a3:b9:
         d6:50:ff:01:0e:b2:8b:79:2e:3b:9a:24:7c:58:9f:ba:14:d1:
         73:1b:71:d3:f0:65:18:27:d0:60:11:12:34:8d:61:9e:4c:5c:
         d9:96:72:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:10:16 2025 by rpki-client