Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/43c057bb-75b3-349e-a802-2639770d97c7.roa
File:                     43c057bb-75b3-349e-a802-2639770d97c7.roa (raw, json)
Hash identifier:          s+O9OJWXfEhd+HZ+RNeIk5cuDuQ9Vu/nmoDFKbwnP3U=
Subject key identifier:   86:52:0A:F2:C6:8C:26:4F:77:85:17:88:73:F4:6F:32:87:CA:C8:D6
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D1E86DAB0432F1EBC6C4C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/43c057bb-75b3-349e-a802-2639770d97c7.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        71.81.4.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:e8:6d:ab:04:32:f1:eb:c6:c4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=b9ac64da-760a-4bf9-bb0d-fe44852be143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fa:29:82:10:8e:cc:ed:84:d0:8b:8b:25:ce:
                    77:f7:18:e8:41:30:01:24:4f:07:e6:af:42:88:fa:
                    ff:2e:64:b5:24:af:fe:57:4d:5d:67:24:a8:24:5c:
                    99:5e:12:fc:eb:0d:47:fd:62:e5:9e:95:1f:0a:1d:
                    bf:2e:3d:c2:88:e5:86:c7:42:16:5e:2b:9d:7d:eb:
                    93:c2:1d:cd:ad:1a:21:f7:7f:9b:da:42:6b:77:12:
                    f3:48:e6:ad:af:8b:47:bb:1a:e8:14:ac:14:ee:87:
                    21:51:4a:f5:ea:8c:a4:ee:e7:df:f8:41:e5:8b:d2:
                    6d:da:05:f5:a2:32:19:fe:c5:47:c8:95:d3:40:4b:
                    41:1e:76:8a:20:0d:17:bc:8e:b6:96:1b:f0:66:c1:
                    29:c0:b7:4f:1d:cf:7d:05:bd:05:f9:06:ae:18:ac:
                    b5:54:81:3b:41:73:af:61:89:25:c5:34:08:40:4b:
                    c1:2c:6f:d2:36:e5:6b:cb:7c:69:ec:ff:05:3d:67:
                    6d:ea:c2:5f:4b:f9:65:d5:05:48:4d:3b:e5:71:8a:
                    5a:e7:37:ad:84:f0:a1:fd:b9:76:8f:e4:22:69:9b:
                    44:36:43:f8:ff:b9:74:20:f2:43:25:7b:1e:f2:26:
                    24:64:79:e1:89:0d:4e:b3:d8:0c:99:26:b5:c1:cb:
                    0a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:52:0A:F2:C6:8C:26:4F:77:85:17:88:73:F4:6F:32:87:CA:C8:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/43c057bb-75b3-349e-a802-2639770d97c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.81.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:bd:2f:d9:20:ae:a7:e1:54:22:21:49:c3:75:3d:7d:c2:8a:
         bc:60:39:40:96:88:95:26:84:9b:01:f0:9d:7f:07:38:22:4b:
         73:e0:9e:c7:65:a3:ec:89:8e:33:41:9e:f6:c1:ee:cd:d9:40:
         3a:a9:c4:69:e6:c1:ea:27:2b:eb:59:0d:b6:20:79:21:fa:d2:
         d9:b0:df:d4:8d:ee:61:bf:35:ed:32:1d:cb:b9:fd:44:ee:05:
         54:3e:80:29:41:2f:37:61:1c:ca:47:27:0e:57:96:6e:8a:60:
         9a:4f:cc:5e:f2:c3:97:cd:30:7c:87:31:71:4c:b5:44:c7:da:
         ad:fd:c6:8f:4f:55:7e:aa:77:47:c6:c4:64:0b:47:3d:84:1e:
         b4:bb:88:19:5e:03:d9:7c:7a:6c:57:76:b5:36:9e:b9:9f:62:
         da:a3:6b:8f:33:35:db:b6:1c:d7:78:80:8e:50:9e:91:ca:94:
         b4:d5:1f:92:b6:91:62:ef:ba:bb:c0:53:b7:19:94:65:cb:2d:
         02:32:c2:a9:2b:7e:6b:e9:00:16:3f:98:92:a6:0d:0a:c3:93:
         74:88:34:21:c0:a0:05:99:c9:39:b8:3d:85:37:88:82:e7:b2:
         aa:46:fe:09:7f:0f:60:fa:c8:4f:fc:0f:6e:ec:4f:86:07:58:
         d2:75:fa:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:05:47 2025 by rpki-client