Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b66f2f36-88bc-351b-b9ac-87d1b6c93d50.roa
File:                     b66f2f36-88bc-351b-b9ac-87d1b6c93d50.roa (raw, json)
Hash identifier:          9h2Eh+IZ3+Jb1UUhWRj8tuIOSD7EiV+eDMqy4PcMQBE=
Subject key identifier:   93:84:71:11:46:16:95:5B:30:6D:74:47:AE:B5:F7:10:15:A9:10:5A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584807AA736AAE4E8AB3A40E5880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b66f2f36-88bc-351b-b9ac-87d1b6c93d50.roa
Signing time:             Thu 28 Nov 2024 14:00:52 +0000
ROA not before:           Thu 28 Nov 2024 14:00:52 +0000
ROA not after:            Wed 26 Feb 2025 14:00:52 +0000
asID:                     6167
IP address blocks:        174.231.80.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:07:aa:73:6a:ae:4e:8a:b3:a4:0e:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 28 14:00:52 2024 GMT
            Not After : Feb 26 14:00:52 2025 GMT
        Subject: CN=f951779f-a3f5-452f-a734-9afa77c0efe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:71:f8:93:0d:53:bd:7b:00:5c:d0:cb:40:5c:
                    0e:fe:bf:00:f1:cd:64:8c:07:9a:e3:f4:6f:b2:c6:
                    47:d9:af:41:8b:d0:cb:2f:7e:2a:bd:d5:4d:97:93:
                    48:46:20:95:1d:2d:fc:5a:5e:5e:fa:dc:1c:a2:7d:
                    30:70:d4:f2:29:12:ad:3a:8f:71:1b:1e:94:6f:e9:
                    e1:77:cf:b8:54:59:a5:78:6d:35:8f:82:1f:d2:9c:
                    22:96:5f:a1:8f:75:99:f5:72:73:19:19:3f:7a:88:
                    6c:d3:2e:87:39:de:2a:1c:f7:f5:c4:ee:1a:cf:3a:
                    1b:4e:89:b3:a6:9d:20:a5:4c:8b:d8:6b:72:4e:86:
                    46:a8:fb:0c:c1:35:48:fe:da:b8:2a:a5:59:9f:41:
                    d1:f1:9f:7a:14:60:69:20:d7:f0:3c:e5:7a:62:64:
                    65:8c:87:cb:5d:02:63:db:de:20:2f:24:82:92:2f:
                    14:c9:ab:28:87:79:39:ec:de:bd:f9:60:06:c4:b4:
                    3f:26:bf:fb:b8:5b:94:9b:42:58:93:bf:d8:a9:d2:
                    c7:58:5f:c5:7a:d2:3e:88:b4:f1:53:16:4f:13:77:
                    f7:7e:ea:7f:e4:d1:bc:c5:5c:9b:e9:27:97:34:3d:
                    ba:76:2e:45:ba:ea:3f:4d:12:ac:b6:40:53:4e:33:
                    7f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:84:71:11:46:16:95:5B:30:6D:74:47:AE:B5:F7:10:15:A9:10:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b66f2f36-88bc-351b-b9ac-87d1b6c93d50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.231.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:96:fb:e7:92:c7:28:b4:eb:f3:aa:62:e8:44:29:13:c3:6e:
         85:c3:ba:7a:5d:e2:0b:70:1d:c3:68:df:c0:77:57:65:34:c3:
         4b:9f:c7:e8:dc:11:76:da:6f:1e:45:63:fa:82:48:9b:66:96:
         b2:f1:44:d4:d7:47:ca:f8:23:73:f3:f7:a4:52:57:fa:97:92:
         79:42:ae:c1:6f:29:26:84:1b:5e:7c:8d:6d:3b:98:5d:2a:ff:
         e8:ce:19:69:4f:8a:c1:ee:f9:7e:66:cb:32:80:20:1b:46:d7:
         dd:22:65:1c:51:f9:9c:19:d1:10:9b:53:8e:0a:db:ec:b7:bf:
         43:81:cb:4a:e8:fc:48:3c:26:06:1f:8c:bc:26:1d:2e:01:d6:
         1d:f5:9f:d5:d7:fb:4f:d6:07:86:73:15:24:06:f5:b0:22:83:
         88:b6:d4:a1:47:6a:92:c0:0e:6d:26:53:07:0b:da:5d:18:d3:
         ea:a1:aa:ae:15:25:d8:14:06:6f:7e:87:da:93:08:2b:82:a5:
         e9:46:93:da:98:d8:c6:40:33:fa:ea:c2:e5:85:9d:5d:0a:f0:
         a7:a8:40:84:55:e7:d3:31:74:7b:9a:f0:c8:05:5c:c3:b8:52:
         e1:9a:e0:02:d8:f4:ad:a7:1f:26:fc:3e:9b:e2:5b:fc:7a:bf:
         cf:4b:91:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----