Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5c3530db-46df-356d-aa2a-fda2b639d4c9.roa
File:                     5c3530db-46df-356d-aa2a-fda2b639d4c9.roa (raw, json)
Hash identifier:          EPhMro3WbnnYyflc+SldCN8Mv+ix3HNQK/T7vlHX3k0=
Subject key identifier:   B6:B8:C2:FC:46:92:AD:64:71:2F:81:2F:2C:0C:18:0F:43:91:36:E5
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F432858480214FE15353D62FCEF8D9200
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5c3530db-46df-356d-aa2a-fda2b639d4c9.roa
Signing time:             Tue 26 Nov 2024 14:00:39 +0000
ROA not before:           Tue 26 Nov 2024 14:00:39 +0000
ROA not after:            Mon 24 Feb 2025 14:00:39 +0000
asID:                     715
IP address blocks:        2001:500:15::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:14:fe:15:35:3d:62:fc:ef:8d:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Nov 26 14:00:39 2024 GMT
            Not After : Feb 24 14:00:39 2025 GMT
        Subject: CN=ee6257d7-1518-4cb7-8e4c-e0d56aea09e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:38:f6:89:0f:97:ec:36:0c:e2:97:4e:a3:83:
                    69:f1:8b:40:4c:ba:4a:f3:cc:8a:91:9f:18:48:55:
                    58:04:a6:aa:e9:06:16:ef:74:2d:5f:dc:bc:d0:a0:
                    fa:3e:88:b5:c5:88:ce:61:54:c3:01:ec:86:05:d6:
                    aa:15:68:03:a1:e9:91:50:1a:de:ef:8e:69:62:9c:
                    16:ba:36:9b:ba:14:b2:60:55:f0:97:22:67:ab:be:
                    a8:2b:6f:2b:07:78:5d:b9:9d:93:8a:f1:a2:0b:8d:
                    d9:06:da:d0:b4:6f:b3:a6:27:c6:78:3c:47:9c:5b:
                    45:b6:4f:95:5b:02:52:2b:98:38:f1:06:27:fa:e6:
                    a0:15:1e:03:58:59:51:16:a9:05:9e:6a:6e:b7:03:
                    56:e0:e0:1e:67:db:b5:3d:58:41:23:e4:65:da:5e:
                    fa:1d:d4:27:36:14:86:22:13:79:ac:f8:9b:05:62:
                    c0:ba:a7:f8:1e:a9:24:0c:43:01:15:de:39:db:77:
                    1b:a8:72:f3:4c:e3:43:3f:41:99:96:4e:43:85:53:
                    04:da:e0:5c:5c:f3:53:09:47:56:4d:ba:79:cb:a2:
                    fb:d6:f8:8c:4f:52:22:b2:71:70:b5:97:33:07:87:
                    94:fc:38:cc:03:c8:db:84:18:d1:20:d2:ed:12:80:
                    13:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B8:C2:FC:46:92:AD:64:71:2F:81:2F:2C:0C:18:0F:43:91:36:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5c3530db-46df-356d-aa2a-fda2b639d4c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:15::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:15:86:db:4a:7a:84:3f:72:fc:92:8d:1a:e7:25:66:89:ba:
         fb:a0:2a:6e:52:57:84:72:92:5e:25:82:05:d8:8f:1b:3b:74:
         48:7c:e8:6a:e5:cb:46:61:82:81:8e:57:d9:e1:7a:78:0f:9f:
         36:77:b7:a9:12:e4:70:01:a7:30:7e:1d:80:90:d3:03:0e:c8:
         60:6d:82:0f:e3:8b:a9:70:bb:3a:d6:f1:ec:1a:be:cf:73:f0:
         39:bf:01:36:e1:b8:7e:d2:96:6c:21:a8:21:98:93:d8:58:9c:
         58:6c:d7:d3:ef:4b:92:20:4b:9b:fb:19:f1:bc:07:4e:7d:a9:
         8b:6e:92:5d:7b:b0:f3:c3:ae:74:3e:c6:fb:66:38:2b:6c:97:
         59:ee:23:08:e4:0f:c7:7f:77:1e:7c:f0:81:d2:52:43:5c:75:
         4b:44:73:c8:b4:ac:8e:59:04:65:40:6d:09:65:e6:44:df:3a:
         21:03:48:f8:dd:32:81:3a:03:09:25:5f:43:2c:e7:c4:85:70:
         ec:d8:58:63:91:ee:f0:9f:73:58:4e:d6:74:b9:11:88:b1:3f:
         90:c6:08:65:f0:16:56:94:fb:54:d5:54:bf:9f:3b:3d:0a:35:
         9f:42:b8:06:65:e4:c7:fe:f0:ad:90:48:c7:8a:7b:38:45:3c:
         6a:dd:4d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----