Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/324eebe2-1e49-3db0-8f15-2035aeb77723.roa
File:                     324eebe2-1e49-3db0-8f15-2035aeb77723.roa (raw, json)
Hash identifier:          5rW8NY9+bH4s6w2Wn/Xq+aHOfm9MBOIAXM5OiCieUyM=
Subject key identifier:   D0:FA:0F:EA:A1:65:18:08:FD:BE:F5:00:59:0B:C4:DD:07:62:39:4A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037AACC8A5B4B75DAB875DE0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/324eebe2-1e49-3db0-8f15-2035aeb77723.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20115
IP address blocks:        24.159.160.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:ac:c8:a5:b4:b7:5d:ab:87:5d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=d467c24a-0dcf-4d4a-a62d-bc792b9c3163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:17:94:54:14:40:21:bc:bd:07:4f:88:75:65:
                    37:e6:f5:35:44:9d:1a:e8:63:f9:6f:be:f9:b7:81:
                    c0:ba:5d:27:24:9e:83:94:3c:88:8a:f4:2d:11:9f:
                    79:dc:d6:5f:05:b5:ae:1d:d8:c2:da:9a:ca:0f:de:
                    d8:f1:b0:00:06:1a:45:44:36:cf:ae:fa:dd:b0:90:
                    38:1a:e0:76:56:8b:42:da:f3:1f:25:71:78:93:d6:
                    44:84:f7:d4:25:b0:27:97:61:42:76:3b:27:84:4b:
                    f9:43:d9:a9:46:f8:a3:71:7a:aa:48:1d:58:7c:cc:
                    a1:7d:54:1a:04:22:1b:c8:cb:7d:66:49:30:69:3a:
                    fc:e0:aa:7e:bb:5f:d5:54:05:a0:96:57:c3:4c:5c:
                    4f:24:72:c9:9d:06:bd:00:64:85:94:f1:76:cc:5b:
                    13:e9:69:11:4a:c9:44:2e:16:33:fc:82:8e:05:2f:
                    b2:e1:12:8f:7e:f6:ec:79:50:28:25:d9:dc:75:28:
                    df:b1:28:b9:fc:1c:02:50:f1:2d:8c:49:b2:a8:bd:
                    8d:ad:9e:b3:c2:c2:d4:a5:2a:86:02:11:5a:e0:2f:
                    cc:fc:ed:da:90:cb:51:2e:c6:2d:47:d4:69:26:50:
                    cd:aa:6b:6f:04:72:a1:b3:b9:74:0e:b4:11:33:9a:
                    d3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:FA:0F:EA:A1:65:18:08:FD:BE:F5:00:59:0B:C4:DD:07:62:39:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/324eebe2-1e49-3db0-8f15-2035aeb77723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.159.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:18:95:c0:65:99:ce:88:30:16:54:56:02:e7:28:79:3b:a7:
         f7:a8:9f:32:6d:b3:b9:3e:6b:0b:3a:78:9a:0b:d0:30:7a:ec:
         ce:56:12:d8:6f:e5:b6:e9:2d:56:77:f0:ea:f9:46:79:89:1b:
         88:bf:ba:84:a4:76:bf:a3:bf:66:a1:09:f9:bb:0a:c7:e3:ad:
         7b:be:f6:31:a1:6e:9e:dd:83:26:3c:fe:db:cb:b6:30:c8:19:
         48:88:1e:69:e2:15:bf:b7:7d:89:95:5a:3f:9d:7c:81:85:ed:
         b9:8e:b7:be:b8:6d:b7:5e:1a:aa:ae:65:b3:2d:4b:12:34:31:
         0b:f3:14:76:9c:36:66:76:fb:5a:14:56:77:7b:ba:51:77:ab:
         28:06:98:80:e8:0a:6b:23:0d:67:97:13:93:6a:97:0f:b0:c1:
         88:53:a4:c6:4f:c0:32:ba:b7:fd:41:c9:39:6a:94:4d:10:9c:
         db:95:cc:00:01:29:31:88:0d:58:04:e9:74:ee:b4:7b:d5:a2:
         d0:71:70:2e:e0:91:10:92:dc:92:4c:dc:e5:f4:ca:5f:0e:50:
         a8:b6:cd:56:65:db:7b:19:b0:46:15:5f:60:a8:ca:c4:80:2f:
         e0:9d:bb:0a:f2:46:09:28:a8:2c:a2:d7:47:d9:db:77:67:9e:
         89:ef:b7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:23:08 2025 by rpki-client