Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ce3dee96-01ee-320d-b9fc-9e73f18cc973.roa
File:                     ce3dee96-01ee-320d-b9fc-9e73f18cc973.roa (raw, json)
Hash identifier:          NHsvzUDyXVhzrsJn8z8/VPeMU8hy3qwizHesTCsL124=
Subject key identifier:   0D:0D:C9:1D:BA:89:FD:2F:B8:1C:31:64:9D:53:AB:E9:B7:DE:D1:7D
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D16A5EF5EE481F9303D600
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ce3dee96-01ee-320d-b9fc-9e73f18cc973.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        24.197.112.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:6a:5e:f5:ee:48:1f:93:03:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=94b1487f-c07d-4cac-a61d-faff5fd707e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6f:03:d0:1f:b5:bc:55:8c:93:18:3a:5d:e4:
                    64:fc:dd:c2:a9:f7:93:69:9b:31:d3:a8:12:fb:03:
                    ea:35:e6:d0:29:f0:c3:9b:0f:e1:b1:3e:b3:fa:04:
                    51:a0:83:7d:fb:74:4c:dd:e0:9f:bd:10:39:c9:da:
                    0d:68:73:98:ec:ca:38:41:fb:5e:9a:ae:a6:e3:ff:
                    dc:54:d7:37:46:db:56:c9:e0:89:86:84:ed:46:96:
                    be:32:90:20:de:b9:81:e5:9f:ff:47:1a:7e:43:4b:
                    b5:92:2b:62:6f:a1:12:2e:79:3b:21:17:f4:db:0a:
                    ca:17:09:9a:df:c4:7a:fa:8b:04:fc:14:2e:d6:6a:
                    69:5f:a9:56:3f:ac:b4:72:5f:e2:cd:d1:c1:db:f5:
                    5e:5c:4b:bc:fa:ca:dd:58:a4:0c:b3:97:24:39:4e:
                    9e:d0:6c:37:49:47:87:d6:01:6b:67:a8:2b:3e:ac:
                    0e:c2:5c:b0:93:5a:74:5e:05:b5:b0:11:70:3b:9b:
                    c6:d0:0f:d1:cf:51:5e:49:b2:aa:4e:f2:57:2f:c7:
                    5c:81:55:dc:69:df:f9:be:b4:e5:cc:57:f2:6b:0d:
                    88:2d:4a:3f:c2:70:fe:4a:a9:99:18:cc:6e:80:36:
                    c1:a8:01:fe:1e:4c:e4:61:9a:36:e3:3a:1b:0e:73:
                    fc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0D:C9:1D:BA:89:FD:2F:B8:1C:31:64:9D:53:AB:E9:B7:DE:D1:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ce3dee96-01ee-320d-b9fc-9e73f18cc973.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.197.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:21:10:48:53:fb:b3:53:6f:2c:1e:a1:8c:fb:0d:e6:8d:34:
         87:9a:a9:24:84:a3:de:80:55:ee:b8:ab:95:b2:67:92:1a:4f:
         9a:9e:83:65:4c:73:15:e2:3d:c9:4e:e3:07:f8:fe:e6:99:09:
         4c:4a:b7:f9:92:8f:4a:da:c0:f8:b0:df:91:57:67:d8:39:24:
         04:af:37:31:d7:11:46:19:04:bf:a4:6d:3d:96:6e:81:14:31:
         93:aa:04:77:07:4e:6a:59:1d:35:8e:7f:35:95:f8:94:4b:ed:
         eb:cf:d5:c6:e3:42:97:2e:a8:6e:35:3c:f0:bc:2e:a7:8b:d2:
         a2:45:92:cd:31:dc:17:74:c3:4d:82:97:f6:a4:87:2b:81:86:
         76:44:38:31:d3:72:ba:0e:8a:a0:e0:d4:f0:15:18:e2:72:b3:
         bc:91:e9:02:c6:89:ba:11:c7:b0:05:61:d2:d4:66:dd:af:3d:
         d1:cc:96:c9:b3:1b:b2:9b:c1:91:81:54:20:61:70:ee:38:0c:
         4c:17:19:f2:3e:41:86:53:5f:f4:b8:b9:c3:83:df:ed:c2:94:
         da:da:40:46:af:a3:2e:71:02:20:29:13:fc:d5:67:76:df:97:
         9e:af:62:a5:80:f0:f4:7a:a0:3b:7e:a7:4b:1e:3e:db:0a:20:
         b1:4c:fd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:45:23 2025 by rpki-client