Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c8de6e2a-61c3-3755-9c46-a36cc02e1ce9.roa
File:                     c8de6e2a-61c3-3755-9c46-a36cc02e1ce9.roa (raw, json)
Hash identifier:          pAyayQNIjXk0JZrBySmMGZMuQopBzT1kDMufn+rzal8=
Subject key identifier:   8D:D0:96:12:F5:D9:E6:3A:8F:C8:A2:8A:C1:F0:90:40:E7:6A:49:A9
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037B21CFDD729021F87D6D00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c8de6e2a-61c3-3755-9c46-a36cc02e1ce9.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20115
IP address blocks:        24.158.96.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:21:cf:dd:72:90:21:f8:7d:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=a314766a-4a29-4096-8423-c86c78d9f968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:73:8c:e8:f1:fd:83:cb:a7:7c:bb:b3:b2:96:
                    1f:61:5d:cb:68:b8:14:9c:8f:16:34:e8:59:52:5c:
                    88:84:5b:ac:19:b0:4f:fc:05:44:22:8a:e1:db:43:
                    f6:ec:ad:0b:28:06:c6:29:fc:73:43:59:39:17:21:
                    82:d9:d6:ea:b1:03:42:e1:82:1a:57:85:73:3f:bf:
                    c8:9d:1b:40:8e:ac:36:f8:08:2c:0b:3e:fe:1b:3c:
                    7c:2a:09:8e:77:f9:ac:7c:ce:8e:9c:05:b7:1e:1d:
                    77:c8:96:cd:df:28:94:19:70:65:79:36:d4:72:f1:
                    be:23:4a:4a:4f:ae:f3:1c:43:b3:29:e1:44:c5:70:
                    b1:34:14:1e:db:cb:2e:68:57:98:97:e9:4c:6f:27:
                    be:22:8b:16:41:98:56:4e:d1:62:5e:cd:a3:6c:c3:
                    38:03:10:90:87:00:15:e6:de:92:72:ea:ea:2d:8c:
                    54:76:f8:4b:74:34:ba:40:d5:47:12:6b:08:4a:1b:
                    96:1f:96:d3:69:97:da:08:78:8b:9b:99:0f:4c:e1:
                    e0:14:8c:03:9a:f9:43:d0:70:6f:cb:ee:48:15:2f:
                    63:83:e0:07:bd:0f:9b:8e:ea:51:da:fc:ef:cb:cd:
                    39:7e:6c:87:7f:7e:9c:40:d5:2a:a2:f2:85:b2:54:
                    03:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D0:96:12:F5:D9:E6:3A:8F:C8:A2:8A:C1:F0:90:40:E7:6A:49:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c8de6e2a-61c3-3755-9c46-a36cc02e1ce9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.158.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:d4:0a:02:00:73:4e:b4:2e:b3:a8:fe:5b:f6:eb:73:e8:8f:
         9b:e1:f0:2f:83:e0:30:71:78:27:3d:78:01:49:77:22:66:dc:
         0d:3f:aa:b5:0f:80:13:0c:77:26:c6:ff:c2:41:89:c8:1d:27:
         86:05:c6:75:83:66:24:ea:a5:33:89:1e:50:4e:1f:e2:f9:d0:
         3f:63:50:a1:e7:45:ac:56:cd:53:66:c2:9d:1e:52:12:e1:11:
         3e:8a:7a:a5:0c:55:94:33:b7:dd:94:0e:d2:1c:31:1f:ea:80:
         7b:65:a9:35:33:01:d1:39:31:c8:33:3f:62:d5:9b:b7:10:ac:
         67:d0:16:4d:66:82:c4:7a:29:ae:79:a7:bb:57:85:3b:f5:de:
         6d:5a:af:20:cc:ba:6a:37:5a:48:0c:bf:b2:c6:21:77:4f:50:
         04:e6:18:ea:59:f2:6e:8e:fc:ff:ab:40:f2:80:01:e6:88:5c:
         e5:a2:e5:bb:e0:84:2a:ca:2c:d8:93:bf:d8:fe:af:73:c7:02:
         f9:e1:ff:a7:8b:25:cd:75:f0:5a:36:0b:45:5a:bc:87:52:7f:
         81:c4:a1:d2:57:aa:06:fe:7b:27:91:31:ac:9f:42:6f:ee:2f:
         42:d6:88:84:e3:fb:78:16:95:c0:b2:f3:cd:98:3e:5d:f8:5a:
         1c:64:b4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:19:45 2025 by rpki-client