Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e25287a9-27bc-3f32-bd5e-c30749c05bd1.roa
File:                     e25287a9-27bc-3f32-bd5e-c30749c05bd1.roa (raw, json)
Hash identifier:          0cWoJCD8Ep2wHWoN5TPUoMGTOk7VNvxon12Yan6OjoQ=
Subject key identifier:   0F:12:33:3E:86:2C:50:0C:A9:53:0F:42:32:C2:54:AA:07:9C:39:E2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848144087514C3622EF33CF8840
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e25287a9-27bc-3f32-bd5e-c30749c05bd1.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     6167
IP address blocks:        75.232.70.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:40:87:51:4c:36:22:ef:33:cf:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=fcf6dfb3-4199-4f6e-9e7e-4f973ba712f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7a:f1:94:1d:f3:2a:0a:95:0d:e9:55:98:72:
                    39:9f:82:31:56:84:87:87:ce:c3:ad:90:65:16:15:
                    f4:7a:9d:e9:56:ee:d1:7d:76:9a:e8:12:1f:1c:c4:
                    71:d9:2b:f9:1f:50:20:0f:2c:6b:96:97:fa:56:fc:
                    16:97:8d:62:2e:50:2c:ba:c6:db:79:33:a1:80:73:
                    75:93:f8:f6:08:9c:f8:56:4a:8f:51:11:60:58:24:
                    6b:10:34:d1:1a:11:8c:c2:76:9b:22:be:af:5c:b4:
                    70:4a:ea:82:bf:30:97:68:4e:4d:cd:15:d7:9b:34:
                    91:f2:6f:5e:bc:fa:50:00:81:b0:6a:58:e3:b0:03:
                    fe:04:49:e2:0b:4e:70:9e:d9:fa:ed:7c:79:73:53:
                    13:94:72:c0:10:6c:00:a6:c4:40:87:6d:3d:2b:fc:
                    08:8c:cd:2b:d9:e7:fd:a4:ea:97:62:91:4a:cd:9e:
                    a8:1a:df:a5:aa:5f:a5:bc:8d:71:90:9f:c5:f6:13:
                    76:f2:88:13:a4:20:b1:71:ba:9a:51:5d:9f:39:d0:
                    55:e4:85:83:8e:ed:e3:14:a0:39:17:1a:9f:a6:4a:
                    9e:6e:83:12:c1:79:bc:e3:97:a3:87:80:f4:1c:79:
                    8b:80:59:44:30:92:c1:00:9c:27:2f:5a:3e:f7:17:
                    1e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:12:33:3E:86:2C:50:0C:A9:53:0F:42:32:C2:54:AA:07:9C:39:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e25287a9-27bc-3f32-bd5e-c30749c05bd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.232.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:9f:b0:eb:ac:4c:b0:eb:8f:00:c6:1b:2d:68:f4:bf:c2:db:
         34:29:70:0d:2f:b1:70:19:d8:d7:d5:c2:bd:0a:4c:e1:01:e3:
         53:e1:f0:5c:14:d4:83:8c:ab:5d:09:51:d9:3a:92:a2:10:b8:
         8e:57:1b:6b:05:af:8e:19:fc:26:3c:7f:f0:a9:9f:96:03:1c:
         44:30:a5:1d:27:c4:24:24:b1:2b:90:32:ae:bd:0b:41:cf:b3:
         77:55:9a:d1:06:35:a7:6d:57:8d:2c:b2:69:22:c3:3c:d5:12:
         9c:01:ae:9b:56:07:d8:9b:23:f4:52:97:2f:de:af:a0:65:f4:
         a3:61:4c:82:b8:dd:57:d1:ee:be:4d:cb:78:30:a1:63:9a:91:
         6b:e3:c0:05:11:4d:72:ca:88:28:c0:f6:46:41:20:e8:d1:2f:
         66:ce:c2:59:8a:ff:e9:5f:90:e8:20:cb:b2:78:7a:fa:b0:d3:
         3f:cf:40:76:a6:ce:e2:f7:d1:c9:3c:2d:bc:9a:33:d5:0c:6c:
         19:22:9a:b1:78:64:1f:6e:cd:51:84:5f:eb:6a:5b:0c:6e:9f:
         52:f4:26:ba:b3:24:48:b1:40:27:d8:0e:c0:34:58:a2:a4:0e:
         12:53:3e:84:db:41:5f:5f:1c:fb:c4:4c:15:c1:e9:81:eb:d1:
         6f:b3:6b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:13:44 2025 by rpki-client