Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/4b625adf-1323-3a2c-865a-3e8f3da732eb.roa
File:                     4b625adf-1323-3a2c-865a-3e8f3da732eb.roa (raw, json)
Hash identifier:          1bp18H97G8flNGMV43baTsun88vInN/yV1r9OsWLLRc=
Subject key identifier:   CC:1A:68:9E:CE:71:BE:AD:48:E4:F0:9E:FA:33:13:D8:79:95:40:EE
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F43285848B1F62AB72389567853A86710
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/4b625adf-1323-3a2c-865a-3e8f3da732eb.roa
Signing time:             Tue 28 Jan 2025 14:00:52 +0000
ROA not before:           Tue 28 Jan 2025 14:00:52 +0000
ROA not after:            Mon 28 Apr 2025 13:00:52 +0000
asID:                     212238
IP address blocks:        74.115.0.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b1:f6:2a:b7:23:89:56:78:53:a8:67:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: Jan 28 14:00:52 2025 GMT
            Not After : Apr 28 13:00:52 2025 GMT
        Subject: CN=bd111a31-db41-498a-9566-79ffac7d3996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2d:93:ba:85:27:b9:e6:ab:c1:6f:c9:51:92:
                    e7:b8:83:e1:80:d0:02:18:27:42:03:7a:f7:38:77:
                    f0:a4:bc:09:d4:4a:77:b5:d6:ba:87:9f:55:8e:94:
                    36:0b:b0:31:11:a3:4b:c0:d0:5c:54:1d:71:7b:d0:
                    36:66:c9:41:b8:bd:34:4a:d6:94:0a:84:45:2a:0c:
                    8b:ad:5f:f7:41:dd:6c:46:d4:2a:cd:23:2b:e1:4c:
                    f7:98:25:fa:f1:9e:80:67:2b:c2:da:a3:80:2e:74:
                    dd:d5:e7:79:40:46:fa:12:89:cd:a1:a3:a4:da:a6:
                    d1:0b:73:ac:94:4b:ab:d6:f5:a1:0d:02:25:b1:a0:
                    f6:02:dd:d7:b8:b7:e5:8b:a4:b1:57:ed:1b:15:6b:
                    66:ed:9d:4b:db:32:9c:22:5f:f1:52:14:eb:f6:78:
                    93:50:5a:82:07:12:0e:23:96:aa:04:36:54:79:e7:
                    ca:9a:cf:e1:cf:88:67:06:ce:dc:48:37:d3:24:d4:
                    10:1d:ee:83:c9:6b:4c:21:e3:a5:68:09:50:64:e7:
                    64:18:be:a8:60:4e:ac:3d:58:e0:3f:d9:fc:32:ae:
                    04:4f:6f:20:4c:8d:9d:60:6e:43:a5:51:d5:b1:5c:
                    f1:cf:6a:32:5b:bf:9e:1c:4a:68:89:c3:1c:47:64:
                    c5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1A:68:9E:CE:71:BE:AD:48:E4:F0:9E:FA:33:13:D8:79:95:40:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/4b625adf-1323-3a2c-865a-3e8f3da732eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:41:4e:9e:a3:66:9c:2c:86:60:30:8c:e9:e5:85:8d:3a:38:
         46:23:54:c8:e9:d8:40:71:d7:77:54:cc:35:9f:17:8e:38:a2:
         9b:ca:b5:92:b7:33:96:29:ca:79:28:b1:23:25:64:2f:1b:83:
         cb:13:5b:80:3f:c9:75:fc:a1:43:e0:ad:1f:3e:fc:36:b3:ea:
         f6:cb:64:25:ea:7e:0f:c0:8c:f2:bb:0a:eb:3e:1c:92:f0:5f:
         a3:84:01:59:7b:98:c3:cf:e3:e9:ad:35:8b:5f:e9:66:56:c1:
         7d:ef:a3:5d:26:dc:d2:20:ec:fd:89:e9:27:bf:8a:40:62:47:
         25:36:02:71:30:f3:48:e0:4a:57:cd:c8:77:14:0a:a0:9e:69:
         a2:b1:30:45:63:dd:c4:4c:46:cd:74:92:5f:d8:aa:61:28:fa:
         e4:30:d8:5e:b7:fa:9d:ad:bf:4f:fa:2d:f9:7d:f0:b0:de:04:
         7f:aa:38:0a:57:94:46:c3:2e:b6:eb:9b:83:8b:1b:f8:c4:94:
         ca:48:e1:7c:9d:9c:31:13:14:0f:b1:de:14:96:a8:7a:1b:b7:
         b8:48:17:c9:04:e9:bf:da:ea:17:b3:94:cd:02:e0:63:79:69:
         e7:9e:b2:0c:52:bb:4d:3c:e6:e7:f5:55:54:62:48:b6:70:e4:
         9c:03:47:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:01:39 2025 by rpki-client