Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1296449e-bdb5-346e-8e33-2500b7e9d0cf.roa
File:                     1296449e-bdb5-346e-8e33-2500b7e9d0cf.roa (raw, json)
Hash identifier:          XgrGI/l4kef3ebvnUZekwUi35doglbPTnhB8dx/kgzA=
Subject key identifier:   FE:0F:6A:02:B1:8E:B8:CD:8C:F2:71:B3:4A:46:7C:81:6E:AF:30:CE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584917DC070DA226180D33D0FB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1296449e-bdb5-346e-8e33-2500b7e9d0cf.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        72.104.56.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:07:0d:a2:26:18:0d:33:d0:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=efe99bdd-f9c1-4ddf-99a3-143bbc81c18c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:69:f9:f8:bc:6b:71:4f:7d:96:84:12:21:33:
                    47:79:c3:92:1b:5e:ea:2c:95:54:ab:68:31:6f:84:
                    f6:3c:3c:3a:c0:de:4b:32:3d:44:ad:f3:1c:7a:c7:
                    fe:2f:ce:e0:5e:be:a1:a0:53:0e:ae:66:e9:43:89:
                    25:65:ca:68:de:63:79:9e:e1:a7:2b:44:ba:d9:1c:
                    4f:da:f5:55:4b:14:ba:71:3b:b3:6e:9d:8c:e1:e5:
                    79:69:fe:ca:46:22:29:8d:02:29:9b:83:15:d2:d3:
                    a7:b0:98:da:99:43:a7:05:55:a6:2c:80:2e:0c:85:
                    c4:ee:bc:81:fe:51:79:12:11:31:dc:a2:fe:a6:12:
                    82:d0:ec:96:2f:c2:0e:aa:78:46:b4:07:70:a3:da:
                    a6:19:d0:3e:61:e4:56:f2:d7:fc:24:68:3c:80:01:
                    99:60:63:4c:c9:c7:30:f7:95:8c:20:5b:c2:31:1a:
                    69:df:9e:24:e7:ae:ca:3a:03:38:8e:ff:6e:5a:44:
                    97:12:36:86:32:b5:a4:13:43:1f:42:35:a3:5f:50:
                    ba:c7:2e:80:31:73:47:c4:12:d3:02:e5:b7:37:f8:
                    a2:6c:9e:41:14:96:56:2b:0e:7b:4e:c6:72:94:fb:
                    9a:9c:af:2a:28:3d:da:1b:b6:07:b1:30:42:3f:99:
                    ba:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0F:6A:02:B1:8E:B8:CD:8C:F2:71:B3:4A:46:7C:81:6E:AF:30:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1296449e-bdb5-346e-8e33-2500b7e9d0cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.104.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:5e:6e:16:bf:58:36:1e:22:d5:82:67:e1:8e:2b:bd:32:cf:
         49:ab:72:b2:bb:ef:15:22:4c:61:a0:24:e3:48:2b:78:ba:38:
         06:9c:53:db:9f:0f:14:78:a4:1a:f8:04:58:67:9e:c7:cc:1d:
         e5:ec:76:c4:da:85:d7:b4:51:26:66:8d:c9:ad:75:42:96:26:
         68:e5:3c:2b:68:85:9d:58:99:3d:fb:22:32:aa:ee:03:d7:bd:
         cc:0d:25:ae:28:61:66:1a:72:11:b1:5e:a9:d6:4e:dc:1b:84:
         11:ca:c5:35:c4:3e:f7:e2:7b:a6:e4:87:ce:49:1e:53:fa:12:
         a2:4b:61:6d:69:39:a2:a1:24:94:ef:e7:da:6a:16:53:de:29:
         80:10:98:d7:4d:71:75:c8:cb:92:e4:fa:75:05:45:43:61:3d:
         15:73:2a:85:88:42:8d:6c:9f:68:b3:ee:a8:cd:d3:8a:c1:53:
         55:be:02:94:1c:f8:a9:dd:12:fd:c2:ca:a6:29:2e:5a:00:c2:
         70:1d:3a:1d:02:d5:3e:64:2b:a2:1b:fa:58:2d:a4:10:09:d0:
         ef:98:32:cc:00:79:e8:21:5f:b2:fe:55:26:91:a0:40:66:15:
         6d:6b:50:c8:55:c4:aa:bc:0a:46:7b:45:ee:d6:58:6d:3d:ce:
         c1:73:4f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----