Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/13d01cea-2801-3989-8246-aaeea60371b4.roa
File:                     13d01cea-2801-3989-8246-aaeea60371b4.roa (raw, json)
Hash identifier:          NCH0g/r3bETo6qyX08qYW1lOwACCe2/9DLHpG5xONzU=
Subject key identifier:   1B:BB:C5:26:EC:DE:A5:5D:A6:A1:35:8B:B8:DE:93:23:4D:01:51:60
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037ADD5BEBD36897267C04C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/13d01cea-2801-3989-8246-aaeea60371b4.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     33588
IP address blocks:        159.111.8.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:dd:5b:eb:d3:68:97:26:7c:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=864743b4-a8db-42d1-97d0-4039800f6b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7c:ef:7e:f7:50:2a:b5:19:ac:95:b4:69:a0:
                    4e:4e:3b:9c:15:31:e8:ca:b0:0a:61:35:f1:6d:ee:
                    07:52:91:d8:36:c7:af:47:51:3e:e5:ff:bb:c1:ee:
                    6c:77:8f:ec:be:b1:13:09:89:fc:65:c3:8e:74:37:
                    9f:68:54:63:ed:61:79:f1:15:72:f3:8f:03:02:c9:
                    13:53:2a:0b:98:6f:1c:bd:7d:a8:39:44:7c:67:fb:
                    a7:8c:cf:12:07:25:3d:44:78:a2:47:db:af:04:5d:
                    6f:e4:09:c7:27:c6:e9:18:64:f5:5e:4e:78:e2:dc:
                    c8:9e:21:9a:32:81:ab:7d:2f:9d:47:df:b1:4a:3b:
                    bf:f4:e6:80:b8:8d:1c:82:af:3c:2a:53:3b:23:35:
                    61:80:4d:f4:1b:40:d5:33:07:a9:5c:93:c2:79:8d:
                    be:c1:95:d0:a8:a9:22:18:86:02:78:47:3c:47:80:
                    ca:f4:83:63:12:58:47:f4:90:87:04:42:88:10:7e:
                    75:3a:96:71:b3:be:8d:d3:6d:a5:cb:3f:25:f5:54:
                    e8:2c:02:cf:84:f2:3c:df:d2:35:31:10:e1:14:d4:
                    2a:eb:30:fc:31:03:a2:cf:8f:5d:38:a8:29:24:a5:
                    44:77:be:a8:60:0b:29:be:42:d2:51:56:cd:01:1d:
                    93:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BB:C5:26:EC:DE:A5:5D:A6:A1:35:8B:B8:DE:93:23:4D:01:51:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/13d01cea-2801-3989-8246-aaeea60371b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.111.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:f9:19:91:81:a7:8b:5e:53:fa:a0:1a:e6:25:5f:3b:6f:3a:
         bf:36:0b:71:a5:c6:ea:92:17:b7:dc:76:82:dd:63:0e:70:2e:
         b5:63:52:38:87:33:a5:ef:42:24:6d:9a:02:3a:db:5f:66:24:
         69:f3:6e:c3:71:69:6f:0f:b3:64:f5:6c:a0:f0:ff:93:c7:b6:
         f5:02:f6:78:f5:a1:59:dd:67:f8:1b:e4:c4:6c:e0:34:9b:37:
         db:16:dc:cf:e6:ab:88:fb:7e:56:be:f7:16:fb:d8:78:36:19:
         42:d9:73:4e:b3:29:e6:d1:db:d7:18:57:ab:63:a9:7c:8e:d2:
         a9:b7:c4:65:58:bc:cb:a2:7d:fe:3d:72:46:26:31:a9:c3:82:
         c3:4d:54:4c:22:64:99:b0:f2:8e:ef:0f:92:78:ee:b8:90:81:
         59:a2:a9:52:b2:5b:d8:3c:1b:24:72:3d:e5:af:f5:9c:af:00:
         5d:9f:d0:04:11:ab:d0:64:fc:de:51:1f:f0:63:7a:0f:10:e2:
         0f:cf:fe:4d:63:c7:d2:cf:98:9a:eb:ac:42:44:5a:0f:f0:ae:
         e7:da:38:5b:6a:f6:82:2b:a9:ee:30:62:5e:fb:26:13:fd:a0:
         c6:f3:ef:04:93:fd:b6:c4:88:af:a6:05:2a:82:eb:6c:bc:06:
         97:0f:27:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:58:06 2025 by rpki-client