Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f000b9d7-b094-3aab-9211-1a3d2ac86fe6.roa
File:                     f000b9d7-b094-3aab-9211-1a3d2ac86fe6.roa (raw, json)
Hash identifier:          GjOhL046ls+qlltX4rHmQvZ7lRLfbUXw8NwLox5E47M=
Subject key identifier:   2C:17:AF:5F:D4:3A:52:47:42:F0:25:D2:34:9C:35:04:2C:DE:3C:A8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584807AA8390C14119D6E0D93A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f000b9d7-b094-3aab-9211-1a3d2ac86fe6.roa
Signing time:             Thu 28 Nov 2024 14:00:52 +0000
ROA not before:           Thu 28 Nov 2024 14:00:52 +0000
ROA not after:            Wed 26 Feb 2025 14:00:52 +0000
asID:                     6167
IP address blocks:        174.240.48.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:07:aa:83:90:c1:41:19:d6:e0:d9:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 28 14:00:52 2024 GMT
            Not After : Feb 26 14:00:52 2025 GMT
        Subject: CN=b72ca4da-db8f-45cf-a765-f8ad7e30c08e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:61:b1:44:e8:74:01:d5:ba:f6:37:da:11:8f:
                    f7:e6:0c:0c:6e:b1:70:35:0f:57:f4:d2:a6:ef:69:
                    2a:31:cc:03:52:50:c0:63:fb:8b:77:8a:05:d4:34:
                    13:c7:b2:13:46:b7:1b:1f:02:d0:7f:f9:2c:18:4f:
                    66:7b:41:8a:08:ba:ab:05:ba:fc:94:99:b2:73:9a:
                    6e:8c:c1:af:e1:74:bd:c0:10:79:90:10:82:b4:2c:
                    e8:1e:a3:84:d3:11:5e:4d:1e:7f:c9:6e:dd:cb:75:
                    91:62:6a:ea:aa:85:36:f7:00:c0:20:cf:06:b8:da:
                    45:d3:d8:91:d8:9e:99:26:c0:42:da:99:ca:0e:ea:
                    25:30:06:e6:17:ed:c6:c0:e7:8d:64:c3:70:f1:85:
                    5d:ef:2f:eb:c0:ae:e0:9d:69:43:7a:c3:43:e1:a4:
                    d8:2c:a2:e5:68:07:da:3c:62:39:f8:60:c0:82:2c:
                    e1:c8:1e:4f:00:4c:01:26:60:84:3a:b3:14:ae:d8:
                    64:59:9a:99:e6:a9:73:7b:0e:e0:89:e9:2c:58:19:
                    af:e8:41:55:14:22:88:b9:16:cd:d2:23:40:7f:6c:
                    d5:5d:b9:fe:3c:e1:69:3d:83:4c:7c:88:75:42:32:
                    46:d2:52:db:7d:a0:ce:68:22:12:ca:00:7d:2f:fd:
                    21:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:17:AF:5F:D4:3A:52:47:42:F0:25:D2:34:9C:35:04:2C:DE:3C:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f000b9d7-b094-3aab-9211-1a3d2ac86fe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.240.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:92:5f:e7:19:c8:b0:e6:54:75:69:82:28:25:22:fc:e2:92:
         f0:bc:77:47:45:b5:c6:9a:11:d5:60:2c:99:3e:a5:f3:8c:a7:
         4d:1e:8a:af:b3:15:de:cb:57:de:69:a7:72:4e:5b:5c:c9:10:
         14:d9:b8:8e:80:07:de:40:9c:9a:0c:40:79:c0:fe:ac:1c:8c:
         ff:98:d8:da:e5:16:55:5a:7a:7f:59:f9:15:a6:48:4d:03:1c:
         c1:65:11:8c:6d:74:b2:2c:f3:04:58:47:d7:eb:09:cc:6f:a6:
         cf:94:36:6d:f9:ff:58:91:fc:38:e0:f5:08:95:a4:3c:db:85:
         18:5a:b6:51:87:f5:b0:90:90:7f:b3:5f:27:c9:b0:d1:ff:0d:
         18:62:ed:01:f1:31:2b:de:2c:8d:c8:d9:f9:21:6b:ed:15:40:
         b9:36:fd:23:a6:6c:ee:84:0e:65:ab:c0:20:31:42:3c:8a:4b:
         4e:b8:17:45:6f:cb:53:72:30:5c:87:6f:ae:68:3c:ef:77:c8:
         7b:f7:f5:05:a5:2f:a6:6d:68:49:81:a3:e9:38:cf:c4:86:5c:
         9d:1b:6b:e9:95:71:e4:81:e8:75:66:88:14:ac:79:de:00:2b:
         fd:46:f7:8e:75:17:ed:ce:86:fb:a0:58:c3:da:d7:48:c9:55:
         10:b7:a3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:33:39 2025 by rpki-client