Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fbc1ca9c-5890-3bbc-b959-ca179d2706c6.roa
File:                     fbc1ca9c-5890-3bbc-b959-ca179d2706c6.roa (raw, json)
Hash identifier:          dRm/xjO7EnDfbZiY6Z+465dEGInzd9qjLTunRaxNfiw=
Subject key identifier:   E7:72:75:08:CE:CE:8D:AF:B0:40:4B:BC:FD:CD:0D:A8:72:86:BE:C8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858485E35C88DA3AD0902CD4D7340
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fbc1ca9c-5890-3bbc-b959-ca179d2706c6.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     6167
IP address blocks:        72.106.240.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:c8:8d:a3:ad:09:02:cd:4d:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=fa6bbfe0-a8da-4530-86ba-e36fdb88d766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5a:17:af:a7:b5:6c:dc:63:e4:d2:a0:46:14:
                    ef:e6:c0:14:87:8b:c1:07:ab:64:07:c2:22:bd:29:
                    58:fe:d5:df:76:b1:0c:4c:57:7d:86:b0:22:6d:04:
                    ed:0f:af:fb:b8:8b:82:02:db:b2:12:23:12:3f:e4:
                    59:5e:61:a9:0e:69:6d:2c:31:a7:59:ca:0e:47:54:
                    4b:ae:90:21:ee:98:17:da:a7:cd:03:28:fd:d8:82:
                    da:78:25:02:2e:1c:51:25:a2:1f:8f:19:3a:c7:4f:
                    6d:8f:25:f7:da:4d:4e:12:15:90:45:a3:10:c3:5c:
                    2a:25:69:19:0a:58:7a:f9:d2:d1:36:89:23:7d:34:
                    32:06:c1:88:fa:ca:0c:15:51:a4:1b:e2:f6:98:bc:
                    7a:af:57:d5:7c:8f:1e:67:15:43:37:73:aa:e5:43:
                    85:4c:d7:d0:c5:9e:58:60:cd:1f:70:ef:47:08:29:
                    83:86:e6:94:1f:c2:6b:c9:8b:b9:f5:e9:db:ee:03:
                    d7:4c:ba:64:ac:00:a4:9d:82:f8:65:92:c8:45:d2:
                    a5:43:89:8a:4a:b3:ba:49:68:26:4d:23:f5:66:33:
                    d5:96:4c:e5:0d:f2:42:50:d0:de:3b:b6:6a:ac:89:
                    02:36:b4:7e:34:33:7f:c8:03:41:ac:3a:42:eb:95:
                    78:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:72:75:08:CE:CE:8D:AF:B0:40:4B:BC:FD:CD:0D:A8:72:86:BE:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fbc1ca9c-5890-3bbc-b959-ca179d2706c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.106.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:6e:03:fc:64:56:04:01:cd:a3:4f:51:84:fb:2d:a0:c1:35:
         89:18:e6:5e:4d:21:a3:ef:bd:ed:61:ad:ee:47:e8:dc:ef:59:
         f0:c9:74:8f:b7:c7:f8:49:3e:9d:31:b3:f7:4f:95:28:75:17:
         86:d3:04:12:5a:60:81:97:8b:26:a0:de:8f:7f:dd:bc:34:22:
         c0:ab:5f:d2:77:78:4c:45:5d:5c:c0:fa:52:81:2a:4c:02:49:
         82:01:55:5c:7f:33:46:bb:d3:bd:49:d6:60:5a:a7:74:27:f7:
         ab:0e:72:c8:f6:5c:02:97:c0:f7:96:ea:29:2a:99:73:c4:b0:
         db:04:49:ad:18:75:63:b9:9e:c4:1a:b5:90:a8:d3:40:01:4f:
         01:27:74:5a:d9:c0:6e:30:40:58:8f:08:87:3b:ad:4d:1e:e5:
         25:33:a8:be:a8:db:62:dd:78:c8:81:6b:b0:64:c1:66:1a:15:
         0e:ab:b8:28:a4:de:35:e4:37:ee:fe:b1:ad:ad:e8:13:49:8a:
         31:67:b0:dd:80:12:9a:bd:3e:89:2d:6a:79:7c:79:36:fa:9e:
         3a:23:f0:08:a4:73:6e:ab:9b:a6:b8:2c:a6:e7:fc:dc:0b:2a:
         59:44:8d:cc:98:16:a1:70:9a:78:5f:2c:fe:2d:c7:13:22:91:
         e9:c1:fb:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEheNciNo60JAs1Nc0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk
ZmE2YmJmZTAtYThkYS00NTMwLTg2YmEtZTM2ZmRiODhkNzY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VoXr6e1bNxj5NKgRhTv5sAUh4vBB6tkB8Ii
vSlY/tXfdrEMTFd9hrAibQTtD6/7uIuCAtuyEiMSP+RZXmGpDmltLDGnWcoOR1RL
rpAh7pgX2qfNAyj92ILaeCUCLhxRJaIfjxk6x09tjyX32k1OEhWQRaMQw1wqJWkZ
Clh6+dLRNokjfTQyBsGI+soMFVGkG+L2mLx6r1fVfI8eZxVDN3Oq5UOFTNfQxZ5Y
YM0fcO9HCCmDhuaUH8JryYu59enb7gPXTLpkrACknYL4ZZLIRdKlQ4mKSrO6SWgm
TSP1ZjPVlkzlDfJCUNDeO7ZqrIkCNrR+NDN/yANBrDpC65V4/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOdydQjOzo2vsEBLvP3NDahyhr7IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmJjMWNhOWMtNTg5MC0z
YmJjLWI5NTktY2ExNzlkMjcwNmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGrwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJxuA/xkVgQBzaNPUYT7LaDBNYkY5l5NIaPvve1hre5H6NzvWfDJdI+3
x/hJPp0xs/dPlSh1F4bTBBJaYIGXiyag3o9/3bw0IsCrX9J3eExFXVzA+lKBKkwC
SYIBVVx/M0a7071J1mBap3Qn96sOcsj2XAKXwPeW6ikqmXPEsNsESa0YdWO5nsQa
tZCo00ABTwEndFrZwG4wQFiPCIc7rU0e5SUzqL6o22LdeMiBa7BkwWYaFQ6ruCik
3jXkN+7+sa2t6BNJijFnsN2AEpq9Poktanl8eTb6njoj8Aikc26rm6a4LKbn/NwL
KllEjcyYFqFwmnhfLP4txxMikenB+8A=
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:43:15 2025 by rpki-client