Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/e7fc0022-9bfa-36eb-83b7-c5de5ad92462.roa
File:                     e7fc0022-9bfa-36eb-83b7-c5de5ad92462.roa (raw, json)
Hash identifier:          jw/sieR6EnbPyTENzJJNyLEtsKnaKZSZvFwNpf1up9A=
Subject key identifier:   BA:6B:10:9B:BF:D2:27:83:45:AD:45:F2:09:CD:0E:F2:DD:7F:CB:3B
Certificate issuer:       /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
Certificate serial:       010D0C9F432858482A8FD8F0415A0ECB0517A7A0
Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/e7fc0022-9bfa-36eb-83b7-c5de5ad92462.roa
Signing time:             Wed 11 Dec 2024 02:00:38 +0000
ROA not before:           Wed 11 Dec 2024 02:00:38 +0000
ROA not after:            Tue 11 Mar 2025 01:00:38 +0000
asID:                     393233
IP address blocks:        173.0.72.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2a:8f:d8:f0:41:5a:0e:cb:05:17:a7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
        Validity
            Not Before: Dec 11 02:00:38 2024 GMT
            Not After : Mar 11 01:00:38 2025 GMT
        Subject: CN=cb26d1cf-5619-4081-a7b6-807babcc5015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:51:2d:c5:1f:87:c6:e1:83:60:bf:80:0d:7d:
                    d2:0f:84:ce:5b:c4:47:0a:14:09:b6:e0:0e:96:50:
                    78:d8:b3:fb:53:0d:d2:66:db:ee:e5:2b:11:4e:20:
                    2e:fc:fd:de:e4:ed:f1:f4:7c:b9:57:db:c2:3e:1a:
                    8c:a1:89:e5:97:2d:67:da:db:3d:59:a7:03:68:7d:
                    8a:8f:1f:a2:4b:83:ae:a2:9c:b7:e0:79:f7:51:bd:
                    c6:b0:b8:36:4d:c5:4e:61:cf:68:24:d6:bd:60:c2:
                    e5:91:80:f1:9b:fa:8f:b1:20:cb:9e:a0:e9:38:7f:
                    0d:63:79:74:a5:fd:21:2e:94:cd:73:ca:66:17:b0:
                    91:ec:21:38:c6:52:53:ec:73:c9:97:75:5a:73:a2:
                    d2:38:aa:43:b5:df:71:5b:1d:ba:4e:76:42:87:4a:
                    aa:2f:ca:5e:7b:35:5f:f1:a9:e7:79:07:b6:dd:01:
                    76:c5:b5:30:bc:b8:57:66:ef:11:99:24:72:0b:73:
                    da:15:35:ea:76:61:17:b8:b7:2c:44:c4:09:ce:06:
                    93:6a:92:c9:f0:60:3f:1a:ef:0d:af:01:eb:37:d6:
                    78:5c:03:53:55:af:fb:9d:a4:96:2c:4c:a0:8a:0a:
                    9e:85:48:3a:43:a5:57:92:58:29:bc:fe:37:52:36:
                    f0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6B:10:9B:BF:D2:27:83:45:AD:45:F2:09:CD:0E:F2:DD:7F:CB:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/e7fc0022-9bfa-36eb-83b7-c5de5ad92462.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl

            X509v3 Authority Key Identifier:
                keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:e0:80:b3:2a:d9:1c:70:2a:ff:21:42:5e:66:8e:d8:e4:c0:
         96:f5:74:54:73:d1:c4:d5:6d:80:77:36:1f:5c:ef:e4:c9:d0:
         ff:74:b1:38:6d:97:58:5b:e4:c3:3a:de:89:38:78:c0:e6:45:
         70:56:c6:2d:a4:74:bc:3e:cc:a4:42:d8:f2:3a:bf:9d:a7:1b:
         80:f9:b6:83:45:16:14:23:fd:28:45:c6:a1:0e:fe:6f:14:ff:
         c8:b5:89:66:f5:3f:6e:a2:76:d3:a4:5c:4d:3e:d6:e2:b2:e7:
         b1:f6:30:ac:06:4f:c7:cb:bb:a1:c5:79:89:ed:f0:d4:b7:de:
         43:71:8e:7f:3d:47:f4:10:9c:f1:5f:99:0c:06:a4:3b:c2:e8:
         3d:02:f0:51:ce:f0:91:c7:18:dd:89:f8:94:f8:a5:b2:7b:e0:
         ec:54:05:e7:ca:a0:59:64:a4:8a:f7:ea:13:36:98:4b:d1:47:
         27:7d:cb:40:39:a6:b6:b7:17:f1:bd:e6:2b:0c:74:19:12:ad:
         bb:fd:e1:e8:54:24:ea:90:4a:f6:21:f6:a5:51:bf:41:e8:84:
         55:d1:ca:8d:e2:c6:85:27:0d:e3:18:a7:e5:9b:c6:5d:c2:be:
         68:06:47:b2:1b:47:39:1c:84:00:fb:5d:bb:cd:89:3e:b2:b8:
         6e:25:6d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:22:45 2025 by rpki-client