Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c4278091-e4ff-3d76-8a49-96b1befd55c8.roa
File:                     c4278091-e4ff-3d76-8a49-96b1befd55c8.roa (raw, json)
Hash identifier:          mIHiQAtF/ZxoxEwVrFaBedaBan6mPp75GrCsdCIgDEI=
Subject key identifier:   1B:70:47:37:28:12:C5:18:27:33:C8:C8:35:62:0F:D7:6A:6F:AA:32
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F43285848CDCBD0B85E8956FFA5CC25C0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c4278091-e4ff-3d76-8a49-96b1befd55c8.roa
Signing time:             Fri 07 Feb 2025 13:18:16 +0000
ROA not before:           Fri 07 Feb 2025 13:18:16 +0000
ROA not after:            Thu 08 May 2025 12:18:16 +0000
asID:                     202
IP address blocks:        20.133.0.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:cb:d0:b8:5e:89:56:ff:a5:cc:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Feb  7 13:18:16 2025 GMT
            Not After : May  8 12:18:16 2025 GMT
        Subject: CN=2884aac6-a99b-4936-80ca-f96f1021e0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b1:98:1f:1a:e3:c9:cb:21:40:5d:ff:22:a6:
                    aa:40:e0:a9:5f:23:7a:96:98:71:54:55:3a:c1:48:
                    40:f8:d4:39:e9:80:8b:09:76:96:42:ae:ef:d6:d4:
                    f5:71:63:55:3e:94:e5:aa:27:20:ee:d7:c2:b7:44:
                    46:fb:0a:ef:4e:27:40:d2:3b:58:e9:3b:59:3d:0d:
                    8e:38:ba:11:e6:ab:a5:18:a9:80:1b:52:7a:14:b5:
                    fb:ff:87:be:31:dc:e2:b5:4f:2e:13:a9:3d:63:42:
                    68:0d:2d:ab:ce:4b:a0:f3:c4:11:86:99:63:ca:bd:
                    48:04:b2:58:88:03:e4:7e:fd:9b:fc:b1:b7:38:49:
                    3a:28:e3:d7:e6:e2:2a:93:e8:d9:5d:e7:96:1a:01:
                    3f:d7:60:82:9a:49:76:0f:82:9a:3d:49:b3:c1:9c:
                    14:25:83:90:7b:c7:9e:f4:41:fd:be:d3:0a:9c:19:
                    3a:95:35:4e:c9:e6:61:1c:a9:92:ca:10:3a:7c:60:
                    2c:ab:e8:79:8a:c4:d2:b6:c6:d0:09:ab:9f:4f:f9:
                    33:f6:54:84:9c:42:43:0d:12:21:19:d1:63:95:86:
                    62:dc:43:5e:b5:96:fb:61:34:04:e8:fc:92:bb:da:
                    d6:8a:88:70:17:71:cd:6c:c2:b3:50:97:bb:7a:34:
                    3a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:70:47:37:28:12:C5:18:27:33:C8:C8:35:62:0F:D7:6A:6F:AA:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c4278091-e4ff-3d76-8a49-96b1befd55c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.133.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:db:bb:05:5e:de:cd:73:bb:51:41:10:b2:2f:a1:16:65:2b:
         03:3d:f7:6d:a0:1d:27:1e:9d:60:65:56:33:80:c0:1b:e7:cc:
         55:e6:8e:9f:bb:a1:25:9c:13:5a:ce:66:96:64:1b:02:c0:e1:
         d2:21:9f:a4:65:82:b7:62:aa:1e:c7:e2:78:3b:28:3e:7a:f8:
         d6:12:31:6e:8c:65:e2:f7:47:0d:d2:b4:de:13:2a:ac:a9:ae:
         86:ad:f6:a2:5c:a7:9b:c1:73:35:ba:ab:b0:86:20:1b:48:5c:
         bb:7f:51:d7:56:34:f5:d8:34:69:d1:93:78:ec:96:66:20:5b:
         79:6d:5e:c2:56:1b:a3:0c:e6:89:be:31:56:94:57:a5:4c:ea:
         38:f7:05:7f:43:10:4d:2d:16:45:ec:50:4c:10:4d:03:00:43:
         79:e2:15:b0:1e:63:f5:4e:f9:fa:10:fc:ae:8b:8f:18:53:79:
         bb:eb:1f:51:15:ec:30:07:ee:87:dd:28:30:d0:c2:46:5f:53:
         64:5e:22:65:23:d2:81:fe:a4:8b:7e:77:8f:4a:0a:4a:e0:9c:
         a2:13:12:96:50:44:eb:b2:aa:6f:40:fd:d1:17:4b:bb:25:07:
         da:a5:a1:f0:63:16:60:e0:f7:93:d9:1f:1e:ac:10:c9:e5:79:
         54:2f:96:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----