Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af4bfef8-6deb-3886-8691-651db9ea8269.roa
File:                     af4bfef8-6deb-3886-8691-651db9ea8269.roa (raw, json)
Hash identifier:          tx0PNKZzNBfubcmpWrIHUcTzUkLr+Kz9CXsllAruITE=
Subject key identifier:   99:00:40:A1:F8:9C:52:01:95:E9:D1:F0:49:4B:1F:78:14:F1:8D:DB
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D1DB9E82CD38A9CA711F80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af4bfef8-6deb-3886-8691-651db9ea8269.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11955
IP address blocks:        150.221.64.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:db:9e:82:cd:38:a9:ca:71:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=4042f917-8751-4710-a79c-71fed9f381e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7c:e2:22:83:a5:0e:98:6d:98:e7:b8:e5:31:
                    b0:48:b5:98:33:32:11:ee:3e:e2:0c:16:00:58:a9:
                    e8:d5:02:ba:1a:b4:0c:d1:ce:e4:9d:5e:40:d9:74:
                    12:a3:f8:4c:60:0b:25:59:00:a3:a5:1a:44:30:f2:
                    8f:e0:bc:c4:34:a6:a4:30:09:52:54:4c:2e:e6:ff:
                    3c:63:a3:a1:5a:75:2b:95:11:35:7e:7e:b6:31:e7:
                    51:15:11:33:ca:1e:8d:5f:97:aa:43:09:31:a5:32:
                    81:09:a9:04:42:b2:3e:70:dd:10:f5:b8:45:88:e6:
                    54:45:27:a3:91:80:95:03:ad:71:f2:f4:45:60:7c:
                    84:b5:84:17:33:d3:23:53:14:28:9b:93:15:8c:d1:
                    cf:5f:8f:8d:bd:ca:c4:06:12:1e:1c:07:2e:38:17:
                    b7:08:db:c7:55:3d:87:a5:4e:17:77:c0:fa:fc:eb:
                    3c:23:76:d0:6a:03:3a:46:6e:b3:c0:2e:aa:1e:d9:
                    80:ba:7a:5f:28:8c:28:90:fe:a4:af:b4:a1:bd:82:
                    64:97:4d:fe:06:1d:c7:5d:6c:08:bb:42:b1:50:dc:
                    f4:d2:fe:89:cc:01:27:5c:99:91:8f:aa:3e:f9:54:
                    8f:d4:3a:2d:22:32:7c:95:ac:9c:2b:4c:55:d6:6a:
                    cd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:00:40:A1:F8:9C:52:01:95:E9:D1:F0:49:4B:1F:78:14:F1:8D:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af4bfef8-6deb-3886-8691-651db9ea8269.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.221.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:4c:b8:15:f6:95:a3:00:e1:0b:48:6c:6c:75:49:8b:a2:23:
         c1:8e:03:0b:27:67:fe:61:2b:27:c8:13:af:35:36:28:6a:87:
         e8:1b:be:03:42:b2:27:0d:58:52:c3:d3:89:ed:13:ca:00:c0:
         70:16:91:b2:5c:e0:ff:0e:5c:15:a7:c1:97:e5:4f:67:c9:ce:
         38:cf:de:a0:89:91:72:04:ed:de:7b:04:13:fe:41:65:a1:e3:
         d7:10:ed:7d:d0:20:be:81:87:eb:34:b2:55:ce:c6:1c:c9:27:
         16:b5:96:7d:43:70:5c:85:16:a3:a9:4f:17:af:fd:f5:5a:45:
         2b:d0:14:2b:49:c3:1c:a1:25:0f:93:4b:45:5c:e3:44:f6:1b:
         bc:87:1f:7d:11:2a:0b:09:6e:d2:1e:3a:77:15:e7:d0:78:b5:
         b3:5e:33:06:05:26:6c:47:e1:1b:7d:06:a3:26:37:26:a7:10:
         ec:92:43:80:24:ac:50:be:c9:1d:d9:a6:01:87:85:fa:92:5c:
         70:c5:78:90:15:d7:09:15:22:83:84:05:a7:59:6a:9a:76:af:
         36:45:2c:95:1f:b8:4d:28:93:c5:c1:b5:9b:89:3e:41:dd:3e:
         ac:19:53:be:33:e6:27:76:c3:51:57:97:ed:8d:16:9e:60:fa:
         38:7d:62:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:44:38 2025 by rpki-client