Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a5864713-ee72-3646-898e-db4f0bf01898.roa
File:                     a5864713-ee72-3646-898e-db4f0bf01898.roa (raw, json)
Hash identifier:          y7ktFu/Yj+SO76gw+fC0ZHUQfiuopfGkB56n3ENbbsk=
Subject key identifier:   2E:A0:2B:0E:58:3D:1B:52:82:9D:17:5D:72:0B:25:19:44:5B:F8:56
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037ABB0CCC59B1833A881780
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a5864713-ee72-3646-898e-db4f0bf01898.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20115
IP address blocks:        71.13.64.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:bb:0c:cc:59:b1:83:3a:88:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=85e5c010-ac7c-4c7d-b229-fd6188ec194c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c0:6e:b6:df:f4:94:ab:d2:82:bd:3d:6a:dd:
                    5f:4c:84:ea:75:cd:8f:6e:8d:32:63:85:25:91:01:
                    2e:64:a8:6c:8c:07:b3:56:7a:70:bb:20:08:25:96:
                    56:14:e7:72:5b:c1:9a:c2:3c:b3:cb:f6:d5:f2:c2:
                    1c:16:b0:5f:69:9c:fc:28:1f:7a:af:38:53:67:b0:
                    d1:9f:cb:4b:57:0d:a9:24:14:95:3f:97:5c:98:55:
                    40:bc:1a:3a:c5:51:bf:30:86:d0:00:fd:dd:be:91:
                    3e:d6:35:c2:f5:38:1a:13:10:6b:41:c2:5a:02:cb:
                    47:1f:f9:0d:df:ab:80:fb:9f:35:ae:0c:60:a6:89:
                    eb:4a:16:bd:43:ce:88:06:fc:4d:7c:aa:a0:58:e5:
                    3f:51:99:a1:fc:fa:7b:d9:c7:5f:41:d1:dc:67:97:
                    bb:74:90:45:d9:dc:11:40:c8:f0:ea:e5:54:7c:b3:
                    03:7f:85:28:1a:d1:a5:0b:2b:57:4d:7f:41:27:4a:
                    a9:e0:8e:76:58:8c:01:b2:8a:08:4f:09:be:65:74:
                    76:41:e8:6c:a5:48:6f:11:dd:d6:14:ea:31:22:f3:
                    b3:ec:b0:34:c9:5d:7b:2f:69:27:f1:b1:05:f6:c2:
                    a9:3f:11:ac:e4:16:dc:0d:94:00:75:7e:bd:88:f6:
                    ef:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A0:2B:0E:58:3D:1B:52:82:9D:17:5D:72:0B:25:19:44:5B:F8:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a5864713-ee72-3646-898e-db4f0bf01898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.13.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:72:bd:66:cb:16:28:7b:e4:7a:f9:dc:c9:76:90:75:d4:fb:
         1e:76:a0:21:1b:3a:0a:b5:c4:55:f2:bd:b0:a2:91:45:5a:f8:
         a7:c5:03:26:cf:e2:3f:fb:24:b2:66:2c:8f:19:3f:f3:69:16:
         5a:a0:80:89:a8:9e:b7:f4:96:a7:5b:09:37:db:a4:b5:2a:dd:
         4d:46:66:4b:b6:23:67:37:06:a6:dc:4d:ae:bf:76:42:49:cc:
         51:22:34:fa:57:03:60:75:ba:e8:e8:5e:65:38:84:ca:89:c6:
         34:c2:f0:cc:64:f6:fe:8e:a0:28:3d:1b:01:6d:f1:62:10:8f:
         17:02:33:4e:4e:c7:cf:dc:f8:56:59:62:be:ad:f8:3d:50:88:
         11:70:a1:76:4b:47:84:0d:04:35:d8:5e:28:be:cd:21:86:fc:
         ef:74:59:40:8d:28:79:33:a9:20:af:79:85:86:49:6f:a7:88:
         5f:58:69:3a:24:48:ee:bc:87:c8:c6:ff:00:b5:ea:37:0e:92:
         10:d8:04:b5:08:ba:dd:1f:2c:48:6c:b9:0a:6e:64:eb:6a:12:
         59:25:38:75:16:8a:fb:12:fc:54:39:ba:13:fc:b5:53:50:9b:
         8c:8e:3a:f0:6c:5a:49:72:f7:27:ce:58:a5:44:25:8b:9c:eb:
         1a:84:5e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:34:38 2025 by rpki-client