Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b2a6fd2c-cc20-3dba-aae6-56b4f8258109.roa
File:                     b2a6fd2c-cc20-3dba-aae6-56b4f8258109.roa (raw, json)
Hash identifier:          T/lGZJnelSAnYa9ZJGON0vTKL6s9mXzNVXQMXwbI3dQ=
Subject key identifier:   CD:F5:25:62:73:FD:3B:A8:93:02:DB:C0:6C:07:6C:C9:68:3A:95:D2
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D18330E15386FBEBBC4618
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b2a6fd2c-cc20-3dba-aae6-56b4f8258109.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        68.117.144.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:83:30:e1:53:86:fb:eb:bc:46:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=98ade002-5e49-43de-bc5d-e67f3d7e0445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a9:c9:7c:68:e3:9a:53:35:7c:25:f7:26:e4:
                    01:b8:ff:50:43:8d:60:4b:60:07:b1:58:8d:ae:f8:
                    ba:7b:f9:ca:3f:b8:b7:40:2e:bf:fb:43:f4:a9:a3:
                    d1:d3:9e:6c:c4:2f:11:37:f3:54:74:91:b3:ff:5f:
                    39:cf:2c:5d:79:10:0b:f1:d6:e9:59:e3:5e:0f:1f:
                    cf:a1:7a:15:7d:3d:a0:67:ba:c3:10:1a:30:86:86:
                    d4:a4:96:78:a1:6d:7b:37:dd:c7:99:90:71:ba:c9:
                    72:de:29:42:3c:3f:34:97:22:45:c4:ee:b0:b8:cb:
                    f2:7d:53:a8:ca:2c:99:7e:55:e4:82:2e:fd:6c:46:
                    34:2d:6f:5f:15:21:c5:ae:a2:52:9a:ef:74:5e:e3:
                    87:d9:3f:95:7b:23:fb:cc:d7:a2:eb:a1:a0:85:23:
                    6c:89:8c:66:72:e2:b3:5c:de:7a:a0:66:b9:45:d3:
                    19:fd:fc:bd:9d:0a:a2:41:d2:da:31:14:d6:e0:22:
                    d9:84:2b:3c:98:4c:ee:38:dd:b0:7c:ae:88:96:d6:
                    f4:f8:55:88:24:72:27:c0:72:24:e0:5d:2e:46:5f:
                    33:88:fa:a4:ae:ae:56:06:e7:07:4d:ef:d2:18:15:
                    c3:4a:e9:5e:4c:29:bb:af:26:cb:cb:7f:34:ac:25:
                    18:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F5:25:62:73:FD:3B:A8:93:02:DB:C0:6C:07:6C:C9:68:3A:95:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b2a6fd2c-cc20-3dba-aae6-56b4f8258109.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.117.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:83:d3:31:b1:66:6d:2f:63:e3:c1:70:0f:3d:2b:4d:18:f6:
         91:d7:ad:34:ef:3b:0b:7f:16:23:3c:5a:26:1c:a2:15:01:95:
         c1:42:5f:26:52:0b:a1:f0:45:16:e8:8e:23:04:d9:ec:5a:1f:
         2a:42:6f:64:55:fe:bd:21:ce:e4:0a:02:dd:67:c2:ab:4c:50:
         75:a7:e3:94:8a:82:0b:47:d4:79:f2:60:df:b0:27:f4:fc:43:
         fd:92:82:a8:e6:71:ec:08:ea:12:7c:52:80:9c:a7:e6:f2:07:
         bd:e6:a1:f6:93:bf:17:d7:4c:b5:68:46:4f:03:10:5d:bf:5a:
         0e:1a:4d:1f:3a:98:91:1b:59:4f:66:e0:93:7a:ca:d1:e7:d2:
         6c:51:a8:a5:61:a0:41:b7:b1:28:ca:88:b1:ad:61:c1:91:8b:
         99:1f:67:cc:ad:86:22:d9:6a:0a:0d:68:3a:c2:e7:b2:de:1e:
         15:02:94:65:13:6c:cd:c7:eb:a7:31:2a:b1:a2:20:aa:2e:2c:
         a6:ff:23:be:a8:96:ec:49:2a:bb:f7:19:93:2b:a6:b3:a7:7c:
         98:10:75:31:e9:a9:42:d9:7b:34:90:fe:72:63:98:1b:da:31:
         ce:58:7b:87:c1:ba:4f:d9:4b:cc:e8:7e:0b:8c:3b:44:ed:52:
         dc:65:62:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:08:19 2025 by rpki-client