Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878/b74a5fc8-c634-38b6-a444-c9619522d48d.roa
File:                     b74a5fc8-c634-38b6-a444-c9619522d48d.roa (raw, json)
Hash identifier:          KFG1hHxaSyIxqNtAjlJ1tgYAOiZE5sPlysj7yJHIj0I=
Subject key identifier:   20:11:62:5D:42:60:A9:0D:5B:93:5F:00:DC:01:D0:13:EE:EF:07:58
Certificate issuer:       /CN=f90be2e1-b57b-4e04-bd16-0b4a08488878
Certificate serial:       010D0C9F4328584849456E56AE2112FB2BB7DA20
Authority key identifier: 0E:48:E4:C3:2E:C0:3B:51:EE:4B:9B:6E:9C:60:C1:52:85:1B:78:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878/b74a5fc8-c634-38b6-a444-c9619522d48d.roa
Signing time:             Sun 22 Dec 2024 02:00:39 +0000
ROA not before:           Sun 22 Dec 2024 02:00:39 +0000
ROA not after:            Sat 22 Mar 2025 01:00:39 +0000
asID:                     32161
IP address blocks:        74.119.30.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:45:6e:56:ae:21:12:fb:2b:b7:da:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f90be2e1-b57b-4e04-bd16-0b4a08488878
        Validity
            Not Before: Dec 22 02:00:39 2024 GMT
            Not After : Mar 22 01:00:39 2025 GMT
        Subject: CN=67ce6b30-abb7-4475-a991-baadb8315d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:be:f2:1a:88:c5:f1:d0:a2:f4:6d:4a:10:b2:
                    94:50:e2:0b:8d:6d:7f:47:4e:16:d7:e7:4f:49:86:
                    58:28:ae:f4:ba:f9:2b:22:95:6f:68:02:56:b6:b3:
                    28:47:58:3e:43:98:61:b3:34:1e:f6:48:8e:3c:f5:
                    f2:55:d7:5d:07:d2:de:ba:5d:05:2c:2b:f7:d8:2a:
                    12:76:87:71:66:9d:78:c2:bd:7c:c6:f7:08:aa:35:
                    39:1f:23:d4:72:20:bf:87:93:6b:0d:6d:91:6b:9b:
                    fc:e1:97:d0:ae:fa:fe:63:ee:9c:fe:02:05:63:c0:
                    55:ff:08:fe:03:1c:b3:b0:83:37:dd:f3:b1:a2:16:
                    c3:af:84:1c:51:95:94:ff:e9:54:a4:78:9c:24:e8:
                    3b:5f:a0:05:47:7f:a5:4e:32:7d:b1:0f:eb:37:6c:
                    87:52:bd:6a:07:64:6d:c1:cf:38:90:c6:5b:5b:34:
                    fb:01:7a:b8:21:51:8f:cb:b5:cb:e0:d1:85:ae:bd:
                    29:fc:ae:fc:79:ae:f7:2e:b9:2e:18:22:67:65:04:
                    77:d7:d7:9a:ee:06:ef:62:95:fa:cf:88:21:83:2d:
                    b0:12:32:0f:8d:02:d4:3f:d3:50:a6:08:bd:aa:7c:
                    e3:ba:ce:4d:ae:fe:b4:bf:6b:ed:e7:98:1c:d9:ce:
                    bb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:11:62:5D:42:60:A9:0D:5B:93:5F:00:DC:01:D0:13:EE:EF:07:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878/b74a5fc8-c634-38b6-a444-c9619522d48d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878/f90be2e1-b57b-4e04-bd16-0b4a08488878.crl

            X509v3 Authority Key Identifier:
                keyid:0E:48:E4:C3:2E:C0:3B:51:EE:4B:9B:6E:9C:60:C1:52:85:1B:78:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:9e:02:15:09:01:ef:73:ed:37:32:37:0f:94:63:84:e6:62:
         e4:57:58:bf:43:4a:a4:aa:55:9e:48:12:f8:a7:68:0e:cd:e8:
         c9:d1:c4:e7:a3:fa:08:26:80:67:33:aa:ea:e0:b8:1b:c7:70:
         19:b8:75:84:95:39:14:96:91:b4:6d:47:db:ed:36:5a:78:79:
         72:7a:88:0a:58:b1:a7:8e:fe:c3:a6:61:08:05:0d:e3:c4:c5:
         80:44:2e:df:64:f3:fd:8a:b7:2c:32:bb:62:40:af:bb:39:2d:
         69:44:cd:5c:a0:0d:c4:9a:6e:7d:72:ad:4f:59:e5:6a:12:94:
         ee:5f:68:27:77:21:61:0c:21:73:1a:2d:f2:65:fe:14:a3:98:
         19:27:74:b9:ef:aa:08:22:1d:65:09:aa:94:cf:60:f9:76:88:
         7c:49:a2:3f:6c:10:8f:8c:38:a0:16:ac:28:e4:73:b0:0f:c8:
         0f:99:65:fd:68:21:5c:54:59:d8:b9:e8:7b:3c:ac:3b:23:80:
         f5:0b:4f:09:b2:23:b5:2f:30:a5:d1:83:f5:1b:cc:4c:da:fd:
         4f:86:45:e8:3d:29:26:8a:93:88:d8:df:45:18:f1:99:11:58:
         ca:2b:92:86:c4:31:88:97:a9:09:0e:e5:cf:21:ba:4b:24:65:
         eb:41:8c:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhJRW5WriES+yu32iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjkwYmUyZTEtYjU3Yi00ZTA0LWJkMTYtMGI0YTA4NDg4
ODc4MB4XDTI0MTIyMjAyMDAzOVoXDTI1MDMyMjAxMDAzOVowLzEtMCsGA1UEAxMk
NjdjZTZiMzAtYWJiNy00NDc1LWE5OTEtYmFhZGI4MzE1ZDFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb7yGojF8dCi9G1KELKUUOILjW1/R04W1+dP
SYZYKK70uvkrIpVvaAJWtrMoR1g+Q5hhszQe9kiOPPXyVdddB9Leul0FLCv32CoS
dodxZp14wr18xvcIqjU5HyPUciC/h5NrDW2Ra5v84ZfQrvr+Y+6c/gIFY8BV/wj+
AxyzsIM33fOxohbDr4QcUZWU/+lUpHicJOg7X6AFR3+lTjJ9sQ/rN2yHUr1qB2Rt
wc84kMZbWzT7AXq4IVGPy7XL4NGFrr0p/K78ea73LrkuGCJnZQR319ea7gbvYpX6
z4ghgy2wEjIPjQLUP9NQpgi9qnzjus5Nrv60v2vt55gc2c67xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCARYl1CYKkNW5NfANwB0BPu7wdYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mOTBi
ZTJlMS1iNTdiLTRlMDQtYmQxNi0wYjRhMDg0ODg4NzgvYjc0YTVmYzgtYzYzNC0z
OGI2LWE0NDQtYzk2MTk1MjJkNDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjkwYmUyZTEtYjU3Yi00ZTA0LWJk
MTYtMGI0YTA4NDg4ODc4L2Y5MGJlMmUxLWI1N2ItNGUwNC1iZDE2LTBiNGEwODQ4
ODg3OC5jcmwwHwYDVR0jBBgwFoAUDkjkwy7AO1HuS5tunGDBUoUbeI8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mOTBiZTJlMS1iNTdiLTRlMDQtYmQxNi0wYjRh
MDg0ODg4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSnceMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALeeAhUJAe9z7TcyNw+UY4TmYuRXWL9DSqSqVZ5IEvinaA7N6MnRxOej
+ggmgGczqurguBvHcBm4dYSVORSWkbRtR9vtNlp4eXJ6iApYsaeO/sOmYQgFDePE
xYBELt9k8/2Ktywyu2JAr7s5LWlEzVygDcSabn1yrU9Z5WoSlO5faCd3IWEMIXMa
LfJl/hSjmBkndLnvqggiHWUJqpTPYPl2iHxJoj9sEI+MOKAWrCjkc7APyA+ZZf1o
IVxUWdi56Hs8rDsjgPULTwmyI7UvMKXRg/UbzEza/U+GReg9KSaKk4jY30UY8ZkR
WMorkobEMYiXqQkO5c8hukskZetBjPQ=
-----END CERTIFICATE-----