Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/29e546c1-7f24-3e99-ad75-36b88fa282c4.roa
File:                     29e546c1-7f24-3e99-ad75-36b88fa282c4.roa (raw, json)
Hash identifier:          I/VhrEl7EEZzIMxu9LYsdyrXyaiZxLcehHnd6Xnz9yg=
Subject key identifier:   89:78:1F:3D:00:F9:3C:86:36:8C:0B:A0:1F:8D:E5:23:11:15:DB:EB
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037AA61E254146F4C1F5F480
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/29e546c1-7f24-3e99-ad75-36b88fa282c4.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20115
IP address blocks:        156.19.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:a6:1e:25:41:46:f4:c1:f5:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=8a35076f-8193-4d12-8188-9be5bd844cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d2:73:cb:38:21:82:b5:72:29:fa:53:34:96:
                    ac:bf:c4:ad:7d:81:d4:fb:77:b8:4f:77:23:b5:c6:
                    e9:d6:64:32:52:19:f7:9a:bf:6c:df:13:3b:a8:8b:
                    6a:94:b9:eb:92:79:61:73:d3:e0:b9:bc:71:39:c6:
                    ec:39:40:2c:18:b6:19:eb:74:b0:b0:10:2c:f9:a2:
                    67:eb:7a:4b:d3:59:39:dd:e7:4d:b3:21:ee:7b:64:
                    2b:c4:20:85:4c:8f:5c:3b:6a:61:ab:6c:44:b1:fe:
                    b5:70:7d:1c:12:6e:80:f3:ea:0d:26:83:4e:db:e2:
                    7e:dd:cd:4f:4d:db:43:e2:01:56:4e:1e:9f:86:1c:
                    ce:c4:21:0c:e0:44:9c:5f:2d:57:6f:36:62:5c:7f:
                    c3:b9:f0:3d:78:d6:10:38:4d:9a:d1:2c:04:d9:64:
                    6f:b7:95:77:4e:c8:fd:1d:57:d1:7a:7a:cd:f1:9e:
                    13:cc:29:1c:89:bf:4d:64:38:28:5b:c3:c8:00:46:
                    0a:3a:8c:61:3f:fb:7f:25:02:ca:81:cf:90:45:4c:
                    92:19:b5:94:a5:e7:7e:29:40:b5:da:91:3e:53:5a:
                    b7:05:74:08:8a:60:04:7b:7a:b8:66:75:86:1a:87:
                    35:02:21:8c:cc:8e:de:c0:46:dd:49:b1:69:fe:a7:
                    e5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:78:1F:3D:00:F9:3C:86:36:8C:0B:A0:1F:8D:E5:23:11:15:DB:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/29e546c1-7f24-3e99-ad75-36b88fa282c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.19.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:d0:3f:fc:39:b4:dd:2a:8e:6b:4a:bf:87:1b:e8:6c:b2:c1:
         59:49:2f:fa:ea:78:f7:03:12:8d:2f:a1:a0:73:c7:1e:61:60:
         5e:1b:f6:1c:b7:01:f8:69:79:a6:0a:60:10:b8:fa:38:74:52:
         d8:92:b2:4c:b0:e4:de:24:dd:0a:53:c5:a2:30:c6:2e:5b:bf:
         b3:21:0e:b4:0d:08:0e:78:35:d4:b1:31:03:a8:f7:7c:c6:15:
         da:ee:c3:26:3c:54:ac:ca:88:37:60:7f:59:78:bf:6c:c0:4c:
         30:24:5d:48:a4:ee:9b:0f:45:df:dd:4a:01:cc:f7:27:ee:f2:
         6d:91:86:ae:4a:c2:ca:09:71:9f:54:24:a5:b8:33:3e:32:ef:
         28:8c:62:f0:c9:1a:f8:94:8f:5d:44:81:5e:76:0e:0a:15:0b:
         ef:e0:fc:8d:78:92:ce:97:08:bc:52:9f:f1:d2:03:7c:87:0d:
         ef:87:93:a7:87:88:bd:ed:d2:87:0a:18:6b:3a:a8:93:73:b7:
         9b:ab:df:e2:3e:68:af:db:d0:5c:fb:d1:e0:3c:55:b2:5c:07:
         ec:f3:d7:f0:ef:e6:ad:15:4c:67:74:00:48:d4:e2:94:fd:a6:
         07:3c:a3:14:ba:66:2b:db:1f:df:81:7a:b7:06:98:a2:86:0a:
         0c:89:76:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----