Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee7d9cfd-ee1a-3eb9-8285-056c8918365a.roa
File:                     ee7d9cfd-ee1a-3eb9-8285-056c8918365a.roa (raw, json)
Hash identifier:          Hm5nKE6iLI7mZyz3vb3JkWylsDHM/yH+RtqthXsn/pI=
Subject key identifier:   0B:22:FF:80:65:4D:74:A2:B1:CA:72:8B:1B:3A:32:15:3E:AC:D6:00
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858485E35C903DAE3140E87765C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee7d9cfd-ee1a-3eb9-8285-056c8918365a.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     6167
IP address blocks:        72.107.192.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:c9:03:da:e3:14:0e:87:76:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=761f6aa0-38e5-4ef9-a364-c3bc290808db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c3:42:37:09:6b:98:9e:96:5e:9d:bc:ea:62:
                    69:60:fe:5f:6a:bb:11:a0:14:4e:69:98:63:0c:ce:
                    ea:84:ba:a7:e7:d7:94:f1:78:43:19:ca:64:34:a2:
                    72:da:05:81:2d:79:6c:32:83:7b:ba:60:a3:44:ea:
                    03:c8:11:5c:21:4a:00:d1:ad:4d:3a:a5:9f:d2:d1:
                    1a:bd:a9:bf:1c:19:8d:df:b3:41:de:d3:f3:c4:83:
                    f9:2e:87:a3:02:fa:c1:7b:65:0c:e1:59:90:10:44:
                    84:d6:f3:de:88:d4:99:da:c8:2f:a3:fc:63:7c:59:
                    b6:56:b7:b2:07:bd:7e:1c:b7:8f:32:d1:97:01:49:
                    2f:81:d2:3e:2a:42:22:66:cf:5a:bb:df:7f:39:42:
                    a2:86:22:e1:73:31:5f:65:43:46:af:dc:54:1c:5c:
                    57:c4:54:77:0e:53:d0:cc:7e:99:7a:7a:17:ec:48:
                    24:e0:3e:3c:11:1b:63:6c:d1:2a:c9:20:a0:60:29:
                    77:d2:8d:e4:5e:18:2f:01:a4:35:05:35:9c:27:58:
                    a6:e5:d2:bc:44:ea:d8:09:0f:24:39:da:73:64:48:
                    5d:4f:59:0f:9f:ff:48:2f:20:cf:27:c2:f7:69:54:
                    f3:8c:90:8c:71:85:fd:7a:30:64:1c:a5:03:79:f2:
                    7d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:22:FF:80:65:4D:74:A2:B1:CA:72:8B:1B:3A:32:15:3E:AC:D6:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee7d9cfd-ee1a-3eb9-8285-056c8918365a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.107.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:30:f5:0b:21:45:08:9a:d1:15:67:19:8f:c9:48:d8:b4:fa:
         2a:d7:d4:1b:65:f5:25:46:51:93:5d:3c:1a:9a:e2:2e:77:56:
         c0:cc:b0:a8:94:8d:53:1e:4b:82:c1:97:12:ea:d5:3d:2a:6f:
         66:f0:0f:1a:77:88:8d:d3:c2:82:48:4f:88:53:4c:91:74:00:
         00:18:f5:e1:0c:c9:d1:d7:fa:a0:cb:42:63:8b:8b:2a:1b:f4:
         e3:4b:03:91:b9:fe:b5:65:3b:e4:21:89:0a:7f:48:87:b6:69:
         2d:2b:94:f5:22:bd:51:1d:16:17:cd:45:64:d7:16:e7:da:4f:
         83:98:fe:df:41:95:a2:23:1c:f4:82:01:66:d4:7c:db:b7:31:
         b5:af:9b:3c:0d:d5:69:37:71:73:7e:0e:63:c7:e2:24:20:50:
         a4:76:9b:92:69:e1:c5:53:e3:6d:26:ba:4d:5a:c4:a9:a0:60:
         b2:c2:79:82:5e:d3:91:e0:d7:8c:b0:35:e5:11:b6:85:33:42:
         08:7d:1c:77:12:4e:7a:87:5b:5c:fe:55:ac:89:ed:4f:ef:76:
         94:82:4a:e9:00:21:88:15:17:35:e4:6f:d3:17:b5:0d:aa:29:
         80:68:c4:2a:3d:7b:1e:51:20:80:19:7a:21:13:41:5f:88:27:
         38:8a:c1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:03:57 2025 by rpki-client