Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a2161ffd-7f7a-34c7-bd84-a6d3c6dcc936.roa
File:                     a2161ffd-7f7a-34c7-bd84-a6d3c6dcc936.roa (raw, json)
Hash identifier:          NrnifEouZRX8esBTMQUdbx7mj2T2HaTV6LfZIhnrCIU=
Subject key identifier:   4D:4D:9D:E8:74:E0:D9:CC:FE:6B:A2:41:3C:76:E8:41:B2:A4:4C:BD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037B2F2FCC4191ECC7B73780
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a2161ffd-7f7a-34c7-bd84-a6d3c6dcc936.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20115
IP address blocks:        24.151.0.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:2f:2f:cc:41:91:ec:c7:b7:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=09ad75c8-3de9-469e-8764-f014c155dabc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:86:50:bf:28:a2:1f:a7:06:d2:c1:e8:b5:7f:
                    be:c5:68:4d:5d:c8:49:81:f9:bf:21:cb:e1:fa:7b:
                    c5:6a:3d:5c:41:f5:4c:40:ea:eb:f2:78:81:df:45:
                    1d:14:57:13:8a:2c:8b:5a:b0:04:4c:29:92:45:d1:
                    c3:39:af:e3:b3:e2:e7:13:2b:bc:07:92:c0:2f:e8:
                    79:34:0e:1e:d0:8f:a2:73:ae:b5:ee:fb:8c:bf:0d:
                    e5:a9:71:25:ee:23:db:15:dc:4f:b4:ef:df:bd:64:
                    eb:83:e7:f7:82:6c:9e:a0:b2:a1:69:93:3e:00:95:
                    c6:52:04:61:9c:fe:3a:d1:9e:8f:b8:1c:b1:84:e1:
                    37:bb:fe:cc:52:22:7a:d2:0c:c5:b2:84:ca:a3:03:
                    67:d9:f2:93:0a:20:f4:fa:3e:e4:3f:6c:0d:96:2e:
                    e0:e2:33:cf:45:17:1b:aa:26:c2:70:18:55:f6:9a:
                    1b:74:fa:42:82:9f:96:b3:a5:32:ed:ab:25:86:96:
                    41:cd:d9:12:28:55:77:da:d1:09:e9:ac:69:8c:b2:
                    ae:7e:1d:1c:a6:6e:0c:6a:96:b4:2a:0b:e8:2a:7b:
                    dc:40:b9:7f:61:35:18:f5:47:7c:0c:62:f8:36:cc:
                    a3:6f:90:7f:51:d5:ff:48:49:1e:93:ba:2c:c4:e4:
                    9b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4D:9D:E8:74:E0:D9:CC:FE:6B:A2:41:3C:76:E8:41:B2:A4:4C:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a2161ffd-7f7a-34c7-bd84-a6d3c6dcc936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.151.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:c6:b0:b8:0c:41:d3:15:47:99:6b:aa:06:0d:ee:3c:3e:7d:
         7a:67:6c:d8:81:6c:b0:58:e8:87:0b:14:73:f4:24:36:fa:20:
         fe:a1:ca:68:19:0c:31:41:3b:7d:73:f1:58:7a:78:19:4a:67:
         47:7a:f3:b5:d9:20:4f:8a:d4:3b:98:83:bf:89:58:ed:38:26:
         f4:24:5b:08:9e:51:35:12:a7:35:bd:69:ce:63:6a:e7:2e:42:
         b9:a7:db:12:99:8f:e5:e9:ee:de:82:1a:de:79:3f:1d:42:81:
         ae:74:19:23:22:4e:b3:f0:1e:72:ee:f7:c2:d3:40:a8:22:bb:
         e6:3a:64:a7:c2:16:7e:d9:ce:91:84:e7:5f:bb:00:00:4c:16:
         22:4e:b0:a2:46:13:cb:a0:70:d8:eb:20:d9:42:c3:7b:f1:0b:
         20:82:ae:69:31:6f:bb:f8:23:11:6e:bf:5d:78:d7:a1:3b:a6:
         22:33:f6:8b:fe:82:17:35:8c:9d:dd:cd:c6:92:43:bb:b8:75:
         80:11:7a:73:d4:6d:b8:6f:81:65:26:2a:0f:9a:ef:61:10:3f:
         eb:d5:b6:da:bb:35:26:9e:53:7f:b8:a7:6d:ea:83:50:a4:e4:
         a8:dd:10:e2:b3:da:77:2e:33:25:48:58:0f:8b:ae:68:a5:be:
         80:9f:ce:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:35:00 2025 by rpki-client