Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fc138b33-e7ee-324d-9d74-8f529928369f.roa
File:                     fc138b33-e7ee-324d-9d74-8f529928369f.roa (raw, json)
Hash identifier:          hqv+19Ukfix2P8tLM2KyeAUHItkQO0/E1SWOKoFbBy4=
Subject key identifier:   50:78:9E:E0:EC:71:66:31:F8:1F:8C:9F:D4:E4:EF:E7:A8:DE:8A:04
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D149ACE9B2EBE4600F1800
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fc138b33-e7ee-324d-9d74-8f529928369f.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     12271
IP address blocks:        24.30.224.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:49:ac:e9:b2:eb:e4:60:0f:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=47dd13aa-c071-4708-b648-cb95c62341f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:14:b7:ee:79:d0:da:ed:9b:83:a6:a4:dc:45:
                    8f:4e:98:bb:d3:f4:ac:e4:c4:83:2c:78:2e:e5:b8:
                    16:81:4b:9b:8c:42:6e:41:81:80:f5:fb:63:a1:b4:
                    25:01:ae:6c:74:a1:4c:ce:e4:b0:ca:04:51:26:4a:
                    98:10:bb:e0:c4:3c:b2:5a:41:cf:56:7c:d8:a8:e3:
                    bf:cf:13:4d:8e:4e:62:8d:2b:9c:21:70:7d:00:3b:
                    2b:97:c9:55:33:ec:19:5d:a5:e8:6f:f8:07:3b:80:
                    66:3e:35:c7:d1:94:28:9b:43:ee:ca:28:a3:c9:6e:
                    0e:e8:03:c6:21:9f:75:f4:81:50:d8:55:82:83:eb:
                    dc:63:29:a4:f1:55:d4:58:7c:81:b4:67:2d:b0:c6:
                    8e:a1:98:64:96:84:02:63:48:f1:3e:7b:c2:e2:d0:
                    5c:29:61:59:ab:e8:e2:c3:0c:04:bb:40:38:34:11:
                    37:50:bb:88:2a:4b:03:af:57:04:40:81:19:69:bc:
                    29:10:66:0a:c7:ae:e0:9e:76:df:68:bf:dd:3b:35:
                    d3:e3:47:95:6a:63:28:54:09:9b:10:5f:5a:c2:b2:
                    c5:9a:90:65:67:5a:69:f0:19:1a:24:1c:35:ad:ec:
                    66:b1:7e:61:74:9c:83:44:bf:5d:e6:b0:82:70:f1:
                    5d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:78:9E:E0:EC:71:66:31:F8:1F:8C:9F:D4:E4:EF:E7:A8:DE:8A:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fc138b33-e7ee-324d-9d74-8f529928369f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.30.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:0a:82:47:31:f7:49:b0:17:2d:72:27:e2:7d:ca:2c:2a:fc:
         71:28:7e:57:77:a3:11:d7:5f:e3:75:17:1b:a2:0e:95:0c:6f:
         12:c0:6c:23:1c:c7:b3:83:b2:c6:5d:89:2b:10:54:4f:d3:41:
         4b:be:5c:f7:c0:12:8c:a5:00:8f:bc:d0:46:69:c9:20:25:1e:
         8d:7d:b2:44:60:5f:a6:3c:0f:e3:10:f5:ba:a2:e3:24:d1:d7:
         bd:12:7b:64:ca:8f:57:f3:e3:e8:d1:a8:4a:5f:52:a2:65:67:
         01:f5:b3:21:67:7b:d3:90:b6:69:3a:20:86:da:fb:89:09:f1:
         d6:78:5b:e2:f6:15:52:1e:fb:47:76:53:5b:3e:57:14:3a:07:
         29:a6:91:70:eb:b1:8f:a0:74:c3:44:0e:55:42:10:73:1e:40:
         c6:9a:82:8a:79:c4:46:3d:3e:48:4d:77:bf:d1:11:28:07:e7:
         33:9e:07:e9:f0:8d:0e:11:0b:cc:8c:7f:82:f6:ed:71:fd:88:
         0a:67:c3:ea:ab:63:c8:4b:35:01:a3:1b:81:9c:00:5d:c8:09:
         19:2b:2e:34:05:59:4b:1b:74:31:d8:f9:d8:15:23:db:78:88:
         25:32:39:10:c5:62:da:aa:b4:a4:12:49:46:fd:53:09:4d:9e:
         af:66:23:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----