Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7d41127a-566b-3b5a-8936-349000ce78a5.roa
File:                     7d41127a-566b-3b5a-8936-349000ce78a5.roa (raw, json)
Hash identifier:          zZmo/OpZai4lRtxvLq53EFIV+AzSxw6BGn9+11TOSn8=
Subject key identifier:   AB:57:0A:ED:AB:A2:2A:C8:16:C0:95:BC:A4:0E:48:31:B1:71:78:89
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037A9CB1C8AB4BCC5172E280
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7d41127a-566b-3b5a-8936-349000ce78a5.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20115
IP address blocks:        24.159.16.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:9c:b1:c8:ab:4b:cc:51:72:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=b47182fc-1965-4cbe-a307-1de5f12b9bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:63:57:88:6c:ba:d4:fb:c4:24:60:9f:d7:ee:
                    28:f4:62:a6:07:46:7b:e2:7a:5c:14:80:56:95:96:
                    ab:06:b8:70:6a:f3:bf:91:fb:93:5c:40:96:f9:65:
                    61:eb:7f:83:b3:3d:33:6b:69:19:1e:56:b7:43:b7:
                    37:3a:57:06:45:3e:d5:be:57:8c:89:c7:49:5d:a9:
                    fa:29:6b:85:97:aa:c6:6f:78:1b:9b:c8:97:08:f1:
                    34:58:01:6a:5f:e8:ba:5d:b2:d3:db:96:e6:57:e2:
                    ed:0a:83:fe:7d:bc:e5:25:99:82:db:7e:36:98:49:
                    15:00:2c:5b:3e:42:81:a1:68:b9:db:91:79:f7:3b:
                    d6:8a:0a:cc:4f:91:10:92:02:16:fb:0b:e3:86:4e:
                    6a:c9:b7:6d:27:dc:87:0a:78:1e:16:80:48:53:7c:
                    d4:4f:73:a2:8e:43:58:b2:e5:63:4a:fb:a5:ea:db:
                    00:2c:de:f8:c7:74:45:2c:df:7e:e0:58:7e:01:14:
                    d5:b7:2c:e8:99:08:4d:10:1b:7f:c9:73:e7:e4:6d:
                    45:d9:cb:86:ec:52:65:58:c5:43:51:9a:88:4a:fb:
                    0f:00:d2:49:bc:a5:69:30:a0:4b:ba:7b:62:39:02:
                    71:8d:9e:40:0e:d8:76:32:9a:a0:49:a2:cf:c9:2b:
                    7d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:57:0A:ED:AB:A2:2A:C8:16:C0:95:BC:A4:0E:48:31:B1:71:78:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7d41127a-566b-3b5a-8936-349000ce78a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.159.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:c1:c6:50:08:82:42:b3:6d:46:ff:ae:b7:60:ad:c2:ac:bc:
         5f:65:98:a8:e9:7c:6b:a5:32:1f:58:ad:ea:79:83:6e:fe:5f:
         db:c8:dd:52:73:92:16:77:cb:8c:a7:ae:be:fa:e7:f0:c2:95:
         5a:ae:96:c8:4c:ac:9e:50:f6:83:39:1e:b9:5b:5f:92:0b:03:
         f5:f6:11:46:31:85:57:54:d2:4c:1d:c4:70:a2:2e:17:69:c8:
         6d:fd:d7:c6:b9:2a:c6:13:bd:ce:76:69:a0:6a:59:2b:3a:ec:
         cd:3f:33:a7:13:79:b3:6d:e3:2c:42:70:1d:da:cb:eb:3c:45:
         33:da:8b:39:4a:d7:1d:b4:d2:e1:33:8a:67:9b:97:8b:0a:64:
         75:f3:26:c5:9e:5e:5f:b4:75:4d:fe:a5:fa:05:88:4f:34:3c:
         8b:7f:a3:2e:c3:50:19:84:b0:a7:87:c5:15:87:54:66:08:98:
         d3:32:27:7a:31:7c:eb:c2:17:f3:18:ce:0e:fd:f9:1d:97:c3:
         58:a8:c9:8e:62:4a:0e:30:9f:86:3a:8b:70:23:8c:3b:ed:a9:
         cb:66:92:44:e6:f1:ab:2d:24:ef:d8:fe:87:41:8a:34:34:ae:
         b5:c2:8f:e3:78:61:4b:65:b0:ce:4c:aa:04:57:12:3c:9d:cd:
         98:70:a8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:57:50 2025 by rpki-client