Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eadf705a-86d4-3b7e-a0b0-b1d6b7b3f84b.roa
File:                     eadf705a-86d4-3b7e-a0b0-b1d6b7b3f84b.roa (raw, json)
Hash identifier:          I+pNjgV5g1MFe0n/QptFidrbH1G6CdHpoa2dU4AQLAg=
Subject key identifier:   1A:5A:5F:D9:F6:A9:26:1B:C1:AE:E5:AC:D1:05:DE:04:C8:C2:33:92
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037B1EB041FEF6F4A0DA0F10
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eadf705a-86d4-3b7e-a0b0-b1d6b7b3f84b.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20115
IP address blocks:        24.240.64.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:1e:b0:41:fe:f6:f4:a0:da:0f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=1b1aa80c-6ae5-4904-ba36-b1f4c610f118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:08:b3:16:98:7a:6a:15:c7:9d:a6:61:6d:c4:
                    8b:9b:bb:0d:b5:89:ea:e7:32:1b:df:6f:71:a4:c0:
                    e5:88:e6:8c:cb:a2:28:f7:04:37:2d:b7:a8:77:cf:
                    83:89:b8:e1:44:40:f9:d2:4f:53:83:ff:a6:8c:3e:
                    f5:6c:8f:cf:6d:7b:f3:ae:23:5c:3a:68:70:eb:2a:
                    ff:0a:12:35:63:c9:47:d3:a2:cd:78:81:b6:19:8b:
                    4f:a7:e2:e8:fb:38:b6:59:c6:9d:9a:c9:48:25:bf:
                    7d:46:80:75:48:9c:81:94:d2:f1:96:dd:59:5a:55:
                    d5:9c:ee:b8:dc:56:a5:12:df:58:4f:0f:46:30:9e:
                    cd:17:2a:0b:4d:0f:2f:15:e9:d4:12:f0:25:e0:a3:
                    57:62:7f:cd:c7:2c:38:3a:c6:38:58:52:3f:8a:fb:
                    6a:f1:63:4d:d9:b7:96:36:3e:1e:ee:f7:17:0e:91:
                    3f:72:09:94:3c:7b:3e:94:97:01:c5:c3:92:eb:36:
                    59:27:51:38:e9:7f:f9:05:5a:a4:2e:4f:0c:be:b0:
                    c0:06:89:30:91:8d:18:38:56:7e:2b:6e:75:de:0c:
                    f8:5a:cb:d7:4d:8e:ff:7e:e0:eb:4f:78:88:13:c1:
                    bc:e7:e4:17:e0:d3:9a:5d:d4:e2:1e:eb:25:1f:73:
                    ae:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5A:5F:D9:F6:A9:26:1B:C1:AE:E5:AC:D1:05:DE:04:C8:C2:33:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eadf705a-86d4-3b7e-a0b0-b1d6b7b3f84b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.240.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:b6:47:69:18:7d:fa:05:e9:96:bc:02:0a:5e:cc:c4:ee:d6:
         44:2b:4b:31:30:cd:60:5b:52:d4:82:7a:5e:9e:90:58:8e:bd:
         82:25:3e:cf:25:47:32:02:7f:20:3c:8c:a8:95:ca:0f:3c:52:
         67:ef:65:ec:c6:d1:09:1b:0d:56:b8:5c:74:b3:6a:c2:28:52:
         3c:a5:ea:3b:6b:0e:53:a5:1b:2e:82:cf:fa:c2:49:56:26:29:
         fd:cb:42:1f:42:b9:c2:bf:45:75:5a:ec:3c:f4:bd:a6:44:fb:
         42:3d:eb:19:21:67:f3:b2:b7:bd:23:95:3f:65:9d:0b:22:bc:
         d0:6a:7b:33:08:4b:64:e4:9b:2e:6c:62:ad:f0:b3:58:06:6c:
         9e:8f:48:9a:98:ef:88:03:04:0d:f2:79:49:93:a0:d4:f3:95:
         1f:40:60:03:ee:b0:5f:51:ce:22:f7:f8:8a:6f:2d:84:ae:84:
         cc:b7:1f:b0:e7:c7:ca:98:45:d1:68:51:13:05:ff:cc:f1:c7:
         ca:4d:8e:06:77:22:c7:ad:7f:ba:99:79:0b:3a:00:c5:3b:40:
         d3:98:70:28:58:c7:75:29:15:96:a5:43:8f:6b:aa:16:3a:ca:
         8c:11:7e:85:63:95:a1:63:7d:6b:e3:d3:b6:41:4e:2d:ed:af:
         7d:d7:93:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:22:48 2025 by rpki-client