Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/defb1855-90d4-3255-af3e-6adae8b6e0fc.roa
File:                     defb1855-90d4-3255-af3e-6adae8b6e0fc.roa (raw, json)
Hash identifier:          oGL7BeKpjIUR737eOScCT9NPsl8rTUGKOtrZcnn//Y0=
Subject key identifier:   B7:5A:77:E5:7F:6E:79:B8:F3:C3:0C:21:0E:0E:98:48:BD:47:E2:70
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037AD402910615D6821C0680
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/defb1855-90d4-3255-af3e-6adae8b6e0fc.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20115
IP address blocks:        35.151.144.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:d4:02:91:06:15:d6:82:1c:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=9edf021f-d7e0-4bab-aa37-783603a09127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a1:69:3c:83:30:3c:4d:1e:27:9a:26:50:c6:
                    3e:49:9d:80:8a:97:10:8e:e5:46:12:c6:15:d8:4a:
                    c6:03:09:e5:30:73:4c:15:bf:d0:d6:11:2e:ac:e9:
                    91:4d:c0:5f:df:82:f5:0f:8d:d3:bb:44:7d:c4:08:
                    e0:10:f3:16:ad:89:e3:7b:d7:ab:65:51:39:d0:2e:
                    27:38:63:e7:e5:ec:41:4c:39:4d:bd:29:b6:bc:2e:
                    b3:35:55:40:5d:d2:b8:39:a6:95:60:c5:6d:83:41:
                    87:05:66:23:1b:5d:09:c0:92:88:48:a9:91:9e:63:
                    7c:14:7c:88:2c:0d:3e:4e:ad:14:72:e6:d5:bc:f7:
                    c3:cb:f5:18:3d:b0:e0:33:0d:c5:30:6b:8b:aa:11:
                    7e:d4:40:27:65:e8:53:37:07:6d:58:0f:17:19:dc:
                    cc:57:0c:8c:6d:08:40:c7:7c:f1:c3:20:2f:72:24:
                    f6:e0:f2:10:09:41:5d:4c:ac:7a:d6:c8:c1:7b:0f:
                    f9:01:e1:b5:a6:a8:13:5b:b9:94:d7:86:c7:a5:c8:
                    2f:18:5d:ca:79:28:4d:90:38:a6:65:da:9d:c8:29:
                    7a:70:b3:32:47:38:8c:86:fb:2f:5a:75:bc:df:68:
                    dc:bf:67:3a:32:13:3c:c8:f3:32:f0:0f:51:3d:7b:
                    51:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5A:77:E5:7F:6E:79:B8:F3:C3:0C:21:0E:0E:98:48:BD:47:E2:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/defb1855-90d4-3255-af3e-6adae8b6e0fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.151.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:54:78:42:ff:7f:de:35:16:3c:db:cd:df:93:f4:19:b6:e4:
         8d:c5:81:f7:35:3a:6f:17:b4:f1:c1:65:7a:7e:61:33:d6:45:
         cd:8b:cc:b3:97:56:50:9a:0f:c4:09:60:7a:e5:7e:fe:70:55:
         e9:e0:b1:c6:26:1d:86:3b:e0:4b:3b:b2:24:2c:5a:f7:5c:eb:
         48:54:f1:a8:1d:15:74:b4:80:f6:fd:9c:44:69:cb:f4:c8:e6:
         4e:04:09:98:1c:01:1c:87:3d:5c:28:f1:3b:63:b1:8e:fd:0d:
         fb:20:bf:4f:ec:06:73:e0:e9:19:8c:03:e5:c1:aa:b2:b7:90:
         1e:42:01:e8:39:06:4a:db:d6:40:7a:4f:79:ec:ef:c1:06:e0:
         e3:90:8e:4b:97:de:56:b9:fa:fa:13:a5:a0:77:e8:1f:39:a8:
         b1:13:00:fe:f0:7d:6b:02:f5:99:6e:09:71:b9:2e:24:74:e4:
         bf:0d:10:44:20:4b:10:db:66:dd:01:b0:e0:e8:2c:b6:b8:ef:
         7f:02:21:43:40:61:8c:b5:ee:d2:8d:aa:a1:ac:4c:85:75:c3:
         99:e9:23:cf:90:77:67:8b:0e:3d:09:e7:c2:41:79:0c:88:64:
         64:ec:06:80:e2:9a:bf:9a:26:44:80:de:16:25:2e:cd:1e:55:
         e8:59:d5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:31:44 2025 by rpki-client