Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d9a49544-d44b-35a8-8f49-6dfa8859c180.roa
File:                     d9a49544-d44b-35a8-8f49-6dfa8859c180.roa (raw, json)
Hash identifier:          i5+owgKzhDo5/FZU4wANgR6gIP3TnsqLwcLq3DbT9Hc=
Subject key identifier:   65:66:3B:FE:D1:57:58:71:A3:08:A2:B8:7E:36:41:36:6E:15:1F:8A
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584659DA330DB24B48EA5C689C64
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d9a49544-d44b-35a8-8f49-6dfa8859c180.roa
Signing time:             Thu 27 Jun 2024 14:59:36 +0000
ROA not before:           Thu 27 Jun 2024 14:59:36 +0000
ROA not after:            Wed 25 Sep 2024 14:59:36 +0000
asID:                     4237
IP address blocks:        20.137.160.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:59:da:33:0d:b2:4b:48:ea:5c:68:9c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Jun 27 14:59:36 2024 GMT
            Not After : Sep 25 14:59:36 2024 GMT
        Subject: CN=d5f23c39-9c30-46d7-9664-2917f3948787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:48:f8:02:f8:be:05:eb:5d:07:ce:1c:9c:04:
                    06:9f:8a:d1:ca:6b:e8:c6:94:d3:20:4d:3d:1d:78:
                    c3:4b:50:77:79:be:87:43:5d:0c:6e:da:21:21:33:
                    c6:ac:fd:aa:dd:8e:40:1b:26:ba:34:62:c6:eb:6c:
                    3d:4f:d7:51:68:94:77:e8:f7:5a:44:3e:9a:4d:f8:
                    ce:c5:62:2f:ce:37:07:91:87:b7:a3:bc:3c:9b:da:
                    c8:3c:bf:89:99:96:ab:4e:54:e2:79:6a:0e:2c:0c:
                    93:2f:a4:bd:4d:2b:7a:0c:4a:5a:25:40:78:aa:43:
                    3b:c9:a4:91:94:7b:a6:aa:26:f5:94:b2:a7:0a:5c:
                    3e:e6:cc:1e:8a:5d:bb:b7:17:11:70:9c:07:53:94:
                    5d:3b:3c:bc:25:09:cd:81:87:8c:22:11:22:1d:0d:
                    00:89:1c:7b:f5:16:16:8f:51:2a:5c:83:dd:d5:ee:
                    0a:41:65:84:1b:d2:e7:ab:4d:10:52:1d:08:ef:ba:
                    39:6d:77:44:66:a6:d7:a8:bf:eb:0d:f5:ef:85:33:
                    7b:d6:4e:47:ad:74:22:18:7c:7d:4e:4e:71:b0:42:
                    87:aa:0e:f7:ef:3a:05:51:63:71:21:e8:d2:33:2e:
                    40:3e:8f:8d:5d:f5:b6:5f:fd:29:13:a2:12:0b:0e:
                    c2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:66:3B:FE:D1:57:58:71:A3:08:A2:B8:7E:36:41:36:6E:15:1F:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d9a49544-d44b-35a8-8f49-6dfa8859c180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.137.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:38:05:47:0f:e9:da:51:4f:c8:2b:c5:b0:03:1a:34:7d:74:
         9f:0a:3e:0c:22:a8:b1:f3:9c:2c:a2:75:41:34:18:ed:50:5c:
         05:5e:63:83:6b:d5:3b:15:c4:02:ff:7d:3d:dc:e9:0f:b4:cd:
         c4:d4:77:c8:97:f5:78:e3:fe:c7:d5:68:73:f0:ff:bc:1e:ea:
         4b:5b:29:35:e1:fd:12:0d:e9:ed:33:a4:3d:1b:0d:fb:a4:46:
         a9:26:ae:6d:af:5f:04:3d:ef:ae:54:4e:6e:ed:90:fe:e6:0f:
         bf:f7:4c:eb:9a:ee:84:7e:fd:c5:8a:2d:9e:05:58:0c:4d:ff:
         5e:da:a0:c5:0f:64:a7:be:c6:f5:4f:01:52:e8:a4:52:29:32:
         2b:3a:f0:46:b4:bf:58:67:39:2e:b8:92:fa:a9:c9:79:4d:6a:
         70:ff:65:d5:fd:7f:4f:a1:43:92:de:40:d6:f8:f0:94:d3:ca:
         61:f6:21:df:f2:62:be:af:5b:2a:bb:4e:df:97:e7:38:a4:90:
         10:4c:fa:1d:cc:2e:ba:aa:f7:e0:70:f9:e3:85:ff:91:1e:ee:
         76:01:d1:e5:79:c3:39:1f:e5:a4:53:0a:0b:ca:2e:6a:27:fd:
         da:ec:c2:7c:65:66:be:d3:a7:13:8b:7e:e2:a3:84:74:48:3b:
         96:d9:e0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----