Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1efad69d-48f2-373a-8701-e9db488683b1.roa
File:                     1efad69d-48f2-373a-8701-e9db488683b1.roa (raw, json)
Hash identifier:          xm2VeOkwy8Ub/Q/nWEhfN2WzYj+tnnYX06/bZg8ZdXs=
Subject key identifier:   72:E6:52:13:33:33:2B:35:31:FA:33:7F:F9:B3:64:7B:8C:C0:A0:8E
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D204922F2CE380BAA167E0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1efad69d-48f2-373a-8701-e9db488683b1.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        71.14.112.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d2:04:92:2f:2c:e3:80:ba:a1:67:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=222bc9ff-3841-4806-97c5-0b8cc6f37431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:07:9a:15:d4:04:02:b1:bf:cb:d0:43:9e:d2:
                    d2:ca:f2:4d:b3:fd:d6:78:05:9c:f6:39:b9:43:c1:
                    7b:9f:df:47:ff:fc:ba:c3:06:0d:30:34:05:d7:e8:
                    2c:f7:f5:ff:67:37:e3:43:f5:08:db:c4:37:d4:88:
                    19:ec:5f:32:29:f3:89:1f:9b:69:7f:f3:53:e2:52:
                    ea:44:75:ea:76:26:87:ee:73:a3:46:59:9f:39:6f:
                    bc:43:44:2d:2d:a7:47:0e:15:32:5e:44:76:90:57:
                    6e:12:67:29:61:c3:55:54:9a:08:f4:2d:77:ff:59:
                    c6:ac:c8:8a:c3:35:f9:4f:89:90:fc:56:c0:09:53:
                    49:68:3c:cd:ac:96:12:8d:7c:93:86:06:74:38:3f:
                    e1:9a:2f:6b:b0:cd:60:a2:29:fc:bb:f7:c0:40:1d:
                    05:11:14:d9:9d:64:db:96:f3:7a:26:85:4d:86:d9:
                    fe:1f:07:6b:d2:c2:b3:26:6a:b3:10:9c:1f:6e:9d:
                    5a:99:fd:bc:f7:57:9c:23:c0:36:33:a3:15:a6:e6:
                    ab:2a:da:43:56:33:ad:6b:0e:a1:e2:a2:35:75:59:
                    53:cf:dc:89:81:b5:7c:79:fb:df:96:58:c3:ea:38:
                    22:a3:2e:f2:82:7c:31:5f:18:24:bf:a5:d8:aa:e7:
                    cb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E6:52:13:33:33:2B:35:31:FA:33:7F:F9:B3:64:7B:8C:C0:A0:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1efad69d-48f2-373a-8701-e9db488683b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.14.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:33:db:c6:1d:9a:08:a2:5a:03:6c:a3:b5:26:99:6b:17:55:
         60:d6:fc:8a:64:6f:ff:eb:69:89:a6:8d:03:a6:0d:bc:d0:ad:
         ef:96:68:9d:04:70:82:27:7b:3f:5f:5d:ec:f6:e5:95:c1:db:
         82:da:83:ef:bf:ab:1d:1e:d4:ca:9c:63:e7:8e:e5:26:61:0e:
         e3:9e:62:48:35:81:f7:48:d6:bc:5e:bc:0e:95:08:f8:0b:4a:
         4a:db:cb:bb:af:38:76:96:a0:68:1d:82:38:44:40:6f:de:55:
         58:8f:b4:9f:43:71:60:ac:10:ed:e0:40:af:57:cf:c2:d6:0a:
         26:8b:a4:65:68:1d:ff:35:a1:a2:e8:1a:02:ba:86:d0:6f:37:
         38:cf:c5:4d:4e:87:1f:10:78:a2:15:82:bc:5f:2f:c8:a0:d1:
         6f:d3:70:09:57:7b:30:eb:50:a6:c2:7d:88:de:e4:d9:c1:34:
         40:a6:2f:7e:70:b3:97:95:7d:51:6f:89:7f:ec:7e:77:f7:09:
         be:7e:56:40:2f:c2:15:46:42:de:ca:43:27:d3:4f:06:ef:4b:
         20:44:37:c9:5f:76:98:54:b7:19:b6:7d:1b:a9:e8:a4:6b:2e:
         84:06:03:e4:be:6b:29:8f:de:2f:2a:13:f6:1e:90:22:db:0e:
         fd:a4:99:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0gSSLyzjgLqhZ+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
MjIyYmM5ZmYtMzg0MS00ODA2LTk3YzUtMGI4Y2M2ZjM3NDMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAeaFdQEArG/y9BDntLSyvJNs/3WeAWc9jm5
Q8F7n99H//y6wwYNMDQF1+gs9/X/ZzfjQ/UI28Q31IgZ7F8yKfOJH5tpf/NT4lLq
RHXqdiaH7nOjRlmfOW+8Q0QtLadHDhUyXkR2kFduEmcpYcNVVJoI9C13/1nGrMiK
wzX5T4mQ/FbACVNJaDzNrJYSjXyThgZ0OD/hmi9rsM1goin8u/fAQB0FERTZnWTb
lvN6JoVNhtn+Hwdr0sKzJmqzEJwfbp1amf2891ecI8A2M6MVpuarKtpDVjOtaw6h
4qI1dVlTz9yJgbV8efvflljD6jgioy7ygnwxXxgkv6XYqufLFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHLmUhMzMys1Mfozf/mzZHuMwKCOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMWVmYWQ2OWQtNDhmMi0z
NzNhLTg3MDEtZTlkYjQ4ODY4M2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERw5wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANcz28YdmgiiWgNso7UmmWsXVWDW/Ipkb//raYmmjQOmDbzQre+WaJ0E
cIInez9fXez25ZXB24Lag++/qx0e1MqcY+eO5SZhDuOeYkg1gfdI1rxevA6VCPgL
Skrby7uvOHaWoGgdgjhEQG/eVViPtJ9DcWCsEO3gQK9Xz8LWCiaLpGVoHf81oaLo
GgK6htBvNzjPxU1Ohx8QeKIVgrxfL8ig0W/TcAlXezDrUKbCfYje5NnBNECmL35w
s5eVfVFviX/sfnf3Cb5+VkAvwhVGQt7KQyfTTwbvSyBEN8lfdphUtxm2fRup6KRr
LoQGA+S+aymP3i8qE/YekCLbDv2kmds=
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:20:55 2025 by rpki-client