Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/26df6a8a-9ff4-3616-be9b-84857281e9ae.roa
File:                     26df6a8a-9ff4-3616-be9b-84857281e9ae.roa (raw, json)
Hash identifier:          QINRL/Xio5SxKKypu0/cSc2TNUQ7RWamPHbm4RF6EbQ=
Subject key identifier:   23:FB:1B:71:5B:00:51:CC:7F:1E:3F:D9:DC:7D:37:A7:12:97:03:5D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584886B07EEB44B3CCAB8B38E180
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/26df6a8a-9ff4-3616-be9b-84857281e9ae.roa
Signing time:             Mon 13 Jan 2025 02:00:40 +0000
ROA not before:           Mon 13 Jan 2025 02:00:40 +0000
ROA not after:            Sun 13 Apr 2025 01:00:40 +0000
asID:                     11351
IP address blocks:        150.224.246.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:86:b0:7e:eb:44:b3:cc:ab:8b:38:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jan 13 02:00:40 2025 GMT
            Not After : Apr 13 01:00:40 2025 GMT
        Subject: CN=ba9638e9-a73f-4bcb-baa3-3f1ec253a01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1c:7e:82:86:39:3f:bd:09:14:9e:fc:0e:e7:
                    57:b1:7f:c9:6a:23:dd:29:19:b7:85:48:af:c9:d6:
                    f2:7a:6e:26:b0:1b:70:1a:00:13:f2:d0:e7:b5:1e:
                    66:12:e5:16:47:b8:73:8a:28:a0:7d:30:f7:c7:ec:
                    23:b3:7f:8c:11:04:bb:29:4d:47:af:56:07:8c:2c:
                    e0:8d:04:cd:40:5a:c5:65:35:89:8c:bb:8e:e6:d5:
                    aa:a0:c9:ca:ff:a1:e0:48:0c:55:32:42:58:2a:4e:
                    92:74:55:ff:25:bc:96:6d:ee:89:72:dc:12:83:64:
                    19:60:21:b4:28:7b:22:ce:2d:b7:33:a9:88:69:9f:
                    12:46:92:71:7f:ce:fa:a8:98:26:8f:f1:a8:56:b4:
                    38:35:47:04:c9:6d:61:8d:c3:14:3d:db:b5:d3:63:
                    b6:9e:f8:25:31:ed:b5:2e:4b:81:a2:24:4a:b6:59:
                    cc:c5:9d:c2:64:f3:04:4a:b7:b8:71:aa:38:79:ca:
                    f7:0f:48:09:19:7f:a8:4f:fd:23:ec:9f:e2:3a:7d:
                    8b:03:e7:1e:56:ea:b8:18:eb:23:da:3d:1e:48:70:
                    1b:27:50:f0:ea:22:06:50:47:eb:11:4e:ec:46:49:
                    53:89:ec:ab:ba:95:e5:37:e7:b5:59:de:9c:c8:98:
                    93:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FB:1B:71:5B:00:51:CC:7F:1E:3F:D9:DC:7D:37:A7:12:97:03:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/26df6a8a-9ff4-3616-be9b-84857281e9ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.224.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:5a:40:a7:8e:02:f8:3e:80:53:0c:07:82:be:06:bf:55:db:
         47:61:b6:ae:83:2f:36:a0:97:d8:c7:0d:29:d6:00:e8:94:01:
         5a:22:86:8a:82:04:d3:64:b5:03:e1:b0:d4:a8:82:7b:06:4a:
         2b:ed:2c:30:c2:f9:7a:e8:f7:cd:62:f8:58:f6:20:4d:4e:a2:
         63:a3:2b:c1:8f:1c:f8:3b:3c:f3:cd:24:23:34:9b:3c:ae:f6:
         43:12:e3:64:68:08:22:b5:66:68:28:0e:6b:ad:9c:9f:39:1c:
         44:0b:62:6d:da:88:1f:06:3f:b4:ea:c4:d8:34:85:95:dc:ed:
         1e:f1:6d:3f:ea:d4:59:33:95:24:c4:16:d4:93:03:72:82:f7:
         66:85:d8:29:6c:92:25:71:93:06:d4:ad:73:18:cb:d7:40:95:
         83:a4:fd:68:c4:24:ca:af:13:9b:84:fc:2b:d8:de:93:46:43:
         7c:a2:8e:07:e9:06:30:bf:c2:79:2e:7c:47:a0:57:ec:c9:97:
         e7:2c:9f:40:d3:b8:46:f3:e9:df:77:25:62:3f:68:13:5e:1c:
         09:17:a1:d2:a4:88:48:6d:eb:0b:1e:30:af:1e:c8:7c:1b:1e:
         67:6a:e6:42:03:45:9e:92:46:df:25:88:69:e7:12:07:f7:75:
         6f:b7:09:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:44:22 2025 by rpki-client