Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3ee58b9-e01d-3aaa-8b4c-c9aa7b2f9989.roa
File:                     e3ee58b9-e01d-3aaa-8b4c-c9aa7b2f9989.roa (raw, json)
Hash identifier:          GXriEEFRw+iIMnUFXfYdEBeebHvKEv2f9rDpTzfuNNk=
Subject key identifier:   29:3D:19:9D:FB:80:C4:79:EA:B2:17:43:BC:D8:55:3A:22:CC:BB:3B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858482BF569B86B6CB204B7D7C880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3ee58b9-e01d-3aaa-8b4c-c9aa7b2f9989.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     701
IP address blocks:        70.106.16.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:69:b8:6b:6c:b2:04:b7:d7:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=a41b5ddd-3b2b-4049-8232-daf5668d7f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c2:26:e3:7d:b3:4e:ff:a6:29:cd:53:c8:15:
                    b7:d3:6d:84:94:7a:af:57:c7:68:32:c2:b8:f0:9a:
                    e0:41:c0:54:04:32:26:92:0b:db:58:c7:06:e5:12:
                    2d:8d:2f:b2:07:84:b7:cd:5b:17:b5:c9:44:99:d9:
                    e1:67:c0:65:e1:99:79:b1:89:32:23:e8:55:06:fd:
                    af:41:90:ac:a7:4d:40:50:45:bc:b9:2c:bc:17:c3:
                    22:72:a6:54:ee:d0:93:6b:63:b1:32:7b:84:43:bc:
                    2c:2e:77:41:23:d5:88:90:7a:aa:05:ab:ef:c6:65:
                    8a:60:b7:60:e7:70:7f:0f:83:b6:95:78:b4:16:4c:
                    1d:9a:e6:4d:73:dd:10:45:26:e5:b2:c3:52:e7:c2:
                    da:78:28:41:a3:a4:46:c5:89:f4:b2:e6:f9:a5:b4:
                    7d:cc:ac:a0:5f:61:27:6a:1f:ac:34:20:9d:da:9f:
                    e0:d0:2b:6f:00:2a:75:5d:ac:68:a2:b0:09:56:8d:
                    70:a3:7c:54:31:c9:3b:ab:d4:49:6f:c5:7d:84:56:
                    b8:21:f0:e2:ff:9f:7b:22:96:f7:d9:27:aa:db:9c:
                    df:7e:d0:50:4b:0e:66:86:ed:46:1f:fc:a9:45:b8:
                    6f:87:0a:17:f6:b2:1e:8a:01:c1:ec:a0:eb:25:84:
                    48:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3D:19:9D:FB:80:C4:79:EA:B2:17:43:BC:D8:55:3A:22:CC:BB:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e3ee58b9-e01d-3aaa-8b4c-c9aa7b2f9989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.106.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ad:fc:c5:bb:f3:e7:14:6e:a2:67:43:c1:52:1a:cd:9d:c6:
         21:5e:95:f7:19:97:de:96:e9:aa:db:0c:90:71:a1:61:a6:ba:
         a5:39:42:c6:8a:75:f6:e7:14:e2:a3:97:0d:e5:a8:cc:44:e0:
         03:fe:f0:57:7a:30:ce:13:8e:8f:cf:88:64:1d:5b:30:31:cd:
         e6:3f:be:b2:1f:e0:4b:31:9d:dd:f0:86:51:95:d2:ac:5e:fe:
         27:3c:c6:d1:ea:92:38:b5:a7:fa:ab:e4:42:3f:76:28:c2:c9:
         0c:7e:5f:fc:f1:92:5d:77:e9:70:7f:88:05:aa:43:84:94:fa:
         bc:56:0c:d2:7a:81:ee:0d:c9:40:12:23:57:72:f0:8c:4c:f0:
         85:97:60:2a:3b:2a:44:e5:c7:b7:d3:2c:4a:21:1b:ad:d8:90:
         18:56:df:c7:41:9d:65:50:a6:bd:18:e3:85:9b:ec:41:a3:9d:
         ea:64:45:1a:df:0d:37:1b:4d:db:87:35:ba:fb:dd:25:b9:4c:
         78:08:6e:cb:fb:c5:3c:0d:44:35:09:73:4b:86:7d:97:13:6a:
         cc:12:4d:a2:57:db:fa:03:81:aa:84:14:69:d9:fb:54:16:19:
         cc:f7:72:87:2d:74:e5:ed:fb:0e:06:fe:1a:f0:2d:4e:a4:4c:
         c1:af:e5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:46:56 2025 by rpki-client