Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/464b0d25-9187-36fa-9e31-383447520773.roa
File:                     464b0d25-9187-36fa-9e31-383447520773.roa (raw, json)
Hash identifier:          hW0w/4+bu2zRpMHR+aRuADWHu9yM4urjx/fVgPa1/5U=
Subject key identifier:   3D:89:57:CF:1A:FC:DB:6F:07:E8:6B:5F:03:B2:2D:D7:4B:CB:2B:BB
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037AB0F5B324450146EA9000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/464b0d25-9187-36fa-9e31-383447520773.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20115
IP address blocks:        24.179.32.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:b0:f5:b3:24:45:01:46:ea:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=dcba6db2-4ba2-4fe5-89cd-83a9db96aec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a5:39:cb:83:93:c7:8f:4d:ee:aa:c2:3f:88:
                    1c:31:91:2f:f7:99:b0:fb:b3:fe:76:bf:ab:1d:fb:
                    f1:8a:0e:cc:3a:97:66:a2:08:be:a2:b7:a0:32:15:
                    85:0c:e7:53:85:11:e0:fd:18:a8:92:e5:83:83:d4:
                    56:26:c2:67:66:38:34:4d:fd:30:4d:31:4f:65:4d:
                    b1:21:19:09:c4:b4:b7:ee:08:15:dd:9c:b0:32:e9:
                    97:c7:84:c9:ef:85:c6:a8:c7:79:e6:35:bb:d4:8d:
                    47:53:65:ed:04:c4:09:05:32:c9:66:47:32:c4:27:
                    df:82:f3:ba:87:80:44:65:38:e4:d5:ab:15:19:1f:
                    aa:db:b6:07:b9:bf:71:25:df:8f:bd:4d:91:19:5f:
                    99:f3:a3:02:5a:2a:9c:3d:4c:4a:af:f0:53:69:49:
                    52:b1:20:d7:6f:d1:bb:4b:d2:4e:91:d4:03:bd:f8:
                    0b:52:e7:21:ea:1d:a4:c5:68:86:4a:85:76:32:35:
                    d1:80:81:e8:e2:91:89:b6:d6:c5:f6:6c:3d:b5:7e:
                    36:36:09:c6:96:39:a4:15:fe:26:20:16:60:3b:a0:
                    81:df:78:f7:af:4c:41:f0:bd:bd:dc:3c:90:23:fb:
                    c1:31:73:6d:97:24:cd:00:2b:c0:da:6d:c7:71:36:
                    25:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:89:57:CF:1A:FC:DB:6F:07:E8:6B:5F:03:B2:2D:D7:4B:CB:2B:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/464b0d25-9187-36fa-9e31-383447520773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.179.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:e1:b5:69:bd:42:c6:2b:8c:34:7e:59:d6:8e:2b:e2:a8:26:
         bc:b6:65:37:bf:69:dd:75:35:ac:4c:f4:23:90:ea:9c:e4:f9:
         ff:a3:e1:0b:66:c0:23:b2:3b:8f:8e:3f:89:0d:5a:fd:f7:9a:
         31:58:00:97:0b:74:1f:14:8a:77:74:95:94:b8:4c:c4:30:92:
         7c:d2:9f:f4:5e:cf:f7:ea:83:34:bf:1a:8d:e3:a3:d1:b2:56:
         bb:66:ed:69:7f:a7:2d:80:f1:bb:64:0d:67:b9:cf:65:e8:ce:
         32:7b:ff:21:c9:ba:18:b2:72:ef:8a:cf:aa:ef:1c:30:33:df:
         37:f8:90:55:56:99:ee:28:1a:d7:1a:c8:bf:75:32:5a:57:fc:
         37:a4:8f:23:58:c8:fa:b2:c5:e6:79:93:8c:7f:58:f6:c5:c3:
         d7:c9:5a:7a:15:2b:e1:66:fb:45:b7:19:98:b7:57:78:71:45:
         61:b4:cc:dd:28:f6:88:35:3b:86:72:d0:b1:e7:d3:f4:ba:eb:
         63:4a:26:14:3e:e9:37:8d:d1:ae:69:fb:d9:7e:4f:3c:4c:17:
         d2:71:0c:e1:3f:75:80:2a:bd:4c:fd:14:60:c9:eb:ac:37:4d:
         2c:ed:f4:c1:f7:9a:bb:b1:78:36:20:0e:52:07:76:f0:9a:12:
         88:3d:88:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----