Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8e793501-da3d-38d9-9684-ac1fa2360b41.roa
File:                     8e793501-da3d-38d9-9684-ac1fa2360b41.roa (raw, json)
Hash identifier:          cdfT4wOFqrH4KVRKC1MVMbvfuhVg4wAO9SMABjDSkyQ=
Subject key identifier:   70:51:6B:22:54:42:EF:2B:E4:63:7A:EC:50:53:1B:72:EC:34:FD:D8
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037B2DE1E1E245E868CE8A00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8e793501-da3d-38d9-9684-ac1fa2360b41.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20115
IP address blocks:        47.32.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:2d:e1:e1:e2:45:e8:68:ce:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=c685d75a-6764-4fdf-8cea-153d72a6babd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5c:64:0e:e8:c7:f2:9d:5c:63:44:22:27:b8:
                    74:74:d7:7c:04:1c:b6:1b:5f:be:2b:f0:df:30:ee:
                    0b:84:11:64:e9:eb:2c:dc:14:3e:a4:5f:0b:90:5d:
                    47:b2:65:b9:f3:20:6f:d8:86:2c:e2:8f:a7:03:5b:
                    dd:74:c2:cb:99:ae:4c:fd:00:56:e5:c1:6f:38:64:
                    ec:54:f5:0f:3f:bc:df:1e:f8:f4:9d:82:89:7f:47:
                    b2:27:3f:f4:05:37:58:d3:43:37:76:a8:de:c0:4d:
                    09:8e:9b:3b:c9:c1:f5:6b:e1:7c:b9:d8:69:0f:df:
                    2f:0f:f3:97:67:bd:e5:95:23:96:0f:48:fd:93:fa:
                    fa:2a:bd:2d:ac:f4:2c:63:2b:5a:cd:10:97:c8:a7:
                    e1:45:5e:bf:2a:ae:38:fc:bd:85:b0:15:dd:bd:33:
                    a9:8e:02:44:9f:e6:ad:7e:4c:70:43:e5:54:16:d2:
                    5d:3e:5b:2e:19:01:19:ec:e0:be:05:b4:8c:0d:e3:
                    31:c0:98:61:ff:6d:85:fb:1b:02:12:7f:65:a8:21:
                    d3:ac:f3:50:82:3a:b5:fd:a0:76:64:9e:85:94:ec:
                    49:49:89:6c:29:b6:bf:87:17:9d:3f:5e:eb:98:a8:
                    61:17:47:8a:10:b6:d1:19:98:5e:f0:99:20:72:b7:
                    06:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:51:6B:22:54:42:EF:2B:E4:63:7A:EC:50:53:1B:72:EC:34:FD:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8e793501-da3d-38d9-9684-ac1fa2360b41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.32.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:52:31:cb:e3:7b:28:fc:90:8f:76:41:2e:15:5c:a3:04:ff:
         93:77:eb:e9:8a:84:b2:d0:b5:8a:b4:01:f7:3b:91:32:e4:32:
         07:24:f0:9f:a2:fa:31:7b:a7:c1:0b:6b:eb:05:08:47:0c:51:
         ff:c0:19:32:d4:59:00:c3:b5:03:c1:56:33:7a:75:d8:08:44:
         1b:9b:ee:bf:dc:1c:bb:72:5c:7f:ae:3a:1b:ef:73:14:75:80:
         6a:81:65:c7:f8:4e:7e:17:9f:de:81:06:1a:51:a2:48:34:3d:
         e9:14:ab:5a:78:97:ac:27:37:91:b7:a3:11:75:a4:df:a9:1b:
         4e:3a:7e:f1:5c:e6:27:34:a6:48:6f:24:43:2d:6a:07:7b:bc:
         30:6c:36:74:cd:d5:7f:47:25:9c:5d:b7:b9:a1:51:35:40:a4:
         f6:62:dc:e6:64:6b:d0:f8:64:97:ef:e6:1f:ab:27:f4:ad:6d:
         c8:03:12:ef:72:6a:dc:13:3c:59:ed:a1:c4:4d:77:3d:f0:b6:
         c4:fd:cf:52:b5:94:29:9e:20:7f:5d:33:f7:48:cd:6c:2b:b6:
         bc:e9:41:41:eb:27:3e:c9:b8:be:84:6c:32:88:03:6e:30:62:
         7e:a9:fa:b4:27:19:21:49:f3:11:3e:f0:c3:f1:a8:fc:09:e4:
         e6:5a:2d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:43:09 2025 by rpki-client