Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c4834573-7165-343d-ad00-34d5b101e637.roa
File:                     c4834573-7165-343d-ad00-34d5b101e637.roa (raw, json)
Hash identifier:          bA6IfCHp8MqveGmHUNj7oejGoW+Q8EHaYX6g3wKKTxo=
Subject key identifier:   9C:54:12:E9:6E:54:8B:EC:B1:C0:F8:86:2A:05:90:69:68:4D:77:72
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037B2C973121B734F5136A80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c4834573-7165-343d-ad00-34d5b101e637.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20115
IP address blocks:        71.81.32.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:2c:97:31:21:b7:34:f5:13:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=9b774046-fc37-4ca1-a7bb-255ad4359f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7e:c3:59:12:d5:3f:a9:8a:65:c1:aa:88:fb:
                    ea:f0:b9:fd:f3:df:21:c7:ff:ab:2b:93:60:6b:6f:
                    7d:b7:60:1c:de:26:75:cf:97:83:cc:79:c6:08:94:
                    3b:8a:4a:3a:e2:3d:96:54:3c:13:85:82:45:25:23:
                    4c:88:c4:18:5b:74:e1:e2:13:55:01:46:f7:99:9a:
                    d4:86:ff:c6:b4:a4:87:e3:5f:40:f1:45:78:1e:d2:
                    fd:12:7c:c4:70:99:f1:33:d5:0b:72:5f:58:e8:b5:
                    b7:37:8c:06:cf:40:6a:7b:3b:33:77:60:b5:d1:4e:
                    d9:42:e3:e1:2b:20:09:ee:ff:86:82:5f:9b:6d:36:
                    a4:c6:91:8e:3d:0f:71:d5:0f:6a:cf:01:b6:e2:47:
                    5c:34:63:55:8a:ad:f3:71:7f:ab:28:2c:3a:ea:4a:
                    ca:0c:0d:dc:f1:4c:2c:22:1d:31:2f:bd:f5:66:c0:
                    ae:2b:6a:2e:e3:31:8b:4f:e4:79:3c:ea:b2:2d:7b:
                    24:c4:96:a6:ca:29:1d:89:21:fa:a4:42:e4:d3:35:
                    3d:8d:1a:2e:ad:e6:88:82:6b:51:6b:2f:f9:76:15:
                    72:a5:ee:ac:6c:69:ae:a4:d3:74:a3:4c:ba:5e:46:
                    53:36:b8:e4:7c:aa:14:f1:cc:c3:40:eb:08:06:aa:
                    da:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:54:12:E9:6E:54:8B:EC:B1:C0:F8:86:2A:05:90:69:68:4D:77:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c4834573-7165-343d-ad00-34d5b101e637.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.81.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:fb:75:f7:fc:f8:a0:15:25:bc:11:f1:2e:51:10:fa:ae:fb:
         ea:19:f6:e7:9a:fa:d7:81:2a:55:df:a3:0a:c6:3a:9c:e0:9a:
         97:77:4f:a9:1f:d4:f9:08:5e:12:03:52:75:a9:77:06:e5:f7:
         6c:70:0c:87:df:b0:f8:c9:fa:98:e6:c3:05:f5:80:96:38:ed:
         37:33:9b:53:d5:81:f1:05:80:5f:07:33:5d:2e:b1:91:81:f6:
         72:84:2a:bd:1f:1d:9f:03:0d:3e:86:32:e9:1b:04:fb:c6:98:
         5d:bc:46:09:20:e1:ad:8a:67:02:1f:56:51:7a:d9:42:9b:f4:
         64:be:b3:89:1c:27:b5:41:d9:76:1a:01:5e:9b:56:19:cd:59:
         10:dd:2d:7c:f7:4f:b9:39:ee:f6:5e:57:14:63:51:d4:a2:df:
         cb:c0:6b:ed:10:3c:c5:d0:eb:0b:94:3c:c3:60:63:2a:75:e4:
         b8:b5:e5:e2:fa:ff:67:eb:25:68:37:2b:ce:fe:26:6d:2a:54:
         83:2b:95:a0:b8:9c:5a:08:91:d2:d2:fc:c1:24:21:60:e0:da:
         d1:7a:f3:8e:86:d5:08:a8:af:19:46:ba:9c:a4:bb:0e:1c:2c:
         48:db:8e:73:2c:49:ef:d9:d3:55:7b:f5:a5:95:43:f4:b1:88:
         99:50:b8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----