Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a8f1cf5b-8f09-3a2e-8534-5276914767ec.roa
File:                     a8f1cf5b-8f09-3a2e-8534-5276914767ec.roa (raw, json)
Hash identifier:          1QoMmy9JN37yidBQVBI1oWOA3P2WFQ0nKqPQMmuL0Q4=
Subject key identifier:   7C:01:60:A9:D7:8D:08:01:18:87:E6:79:0E:9E:31:F1:2D:79:AB:F0
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D164F44214A4D674A2A580
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a8f1cf5b-8f09-3a2e-8534-5276914767ec.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        71.80.0.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:64:f4:42:14:a4:d6:74:a2:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=4fee617b-53c9-4de5-a8e6-86f6aabcfcc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e0:ae:03:c6:a1:ab:5c:6b:37:86:04:b3:b5:
                    25:ec:34:ee:27:fe:43:a7:77:06:dd:6d:c2:22:f8:
                    bd:60:ee:d6:a4:e3:4f:1c:16:8b:bf:c0:6d:2f:c7:
                    60:fe:f9:15:e7:2c:7d:92:ea:f6:88:29:74:46:f9:
                    04:bb:88:72:f8:49:4a:23:14:c0:f2:3a:99:b3:1e:
                    c9:af:63:cd:b0:d3:31:86:18:61:a2:b0:f9:c1:a5:
                    23:cc:68:dc:b2:25:8b:76:d4:03:d4:18:d0:50:84:
                    c5:d2:61:52:c4:d4:ba:cc:af:86:e7:82:7a:4c:d7:
                    bc:99:fa:fd:48:95:3e:41:74:de:49:15:84:1e:81:
                    70:e1:94:6a:fa:c5:89:b0:b8:0a:0f:38:f5:4e:3d:
                    49:1c:46:e8:c1:82:72:58:a7:08:e6:5c:c4:a7:70:
                    68:18:18:94:8c:e5:06:fd:18:b0:32:69:52:97:63:
                    8c:84:6c:c3:fb:66:3b:04:8b:c6:16:f1:84:b4:59:
                    1e:4e:d3:8e:38:c4:88:81:8a:61:f1:1b:22:29:f3:
                    ea:57:16:45:05:bc:f6:e5:2d:e3:68:a8:a4:09:69:
                    9c:6d:7d:cc:54:be:e7:83:e8:fd:9d:36:93:e9:b6:
                    7d:12:69:59:1c:0d:44:25:f2:55:9f:5b:ce:39:d2:
                    6d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:01:60:A9:D7:8D:08:01:18:87:E6:79:0E:9E:31:F1:2D:79:AB:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a8f1cf5b-8f09-3a2e-8534-5276914767ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.80.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:49:1e:d3:3a:1a:bf:4b:9f:c6:c4:e7:9d:1b:d2:c5:44:8b:
         bb:fb:dc:5d:da:66:2e:af:da:d9:a0:91:70:d3:c2:2f:f9:66:
         7d:85:c2:e1:bf:c4:bc:dd:2b:12:45:15:3b:01:58:b4:60:79:
         b9:44:d1:21:95:dd:08:14:5b:c6:c1:45:47:a7:72:14:46:b1:
         0b:78:b6:fe:f5:75:00:28:58:37:5e:23:e7:81:79:c8:c1:ca:
         76:73:8e:ee:48:5b:8d:1c:14:db:18:9e:47:1a:03:06:37:f3:
         b1:32:88:1e:9c:70:0a:c7:88:a8:88:70:9b:39:00:5c:c8:ad:
         b9:55:03:21:59:91:26:fb:ca:b0:ac:d4:0c:e8:89:01:a2:7c:
         f2:86:d3:e7:ba:cd:a9:30:96:4c:13:8b:f4:ee:4a:56:56:b6:
         0d:e7:b0:73:61:70:79:2a:76:dc:27:db:ca:45:6b:0f:3b:c7:
         a1:cf:64:fa:f0:a9:d9:fc:28:a1:b7:0a:6c:33:6e:87:34:94:
         42:43:ef:5b:2e:f9:62:12:11:a8:fd:ee:70:f3:ef:54:91:ea:
         0e:92:61:82:05:06:69:1e:aa:05:e5:88:ea:40:51:78:e4:22:
         81:77:6d:8f:f3:78:1b:8f:75:fa:ef:07:17:39:49:90:4a:64:
         33:f7:eb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----