Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b2c34040-2393-3eee-9c59-bc335c9dbda2.roa
File:                     b2c34040-2393-3eee-9c59-bc335c9dbda2.roa (raw, json)
Hash identifier:          cdjFDlrv6Gkzd+3m+XRPbWjxb9jEmu+jl8XagmHHscs=
Subject key identifier:   0D:03:F6:B0:85:58:FE:5F:49:88:C6:64:71:72:A6:2E:FC:4F:54:7C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D1781A703122068F78BD34
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b2c34040-2393-3eee-9c59-bc335c9dbda2.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        35.130.112.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:78:1a:70:31:22:06:8f:78:bd:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=f70e44a3-60d2-4b85-9ab5-759f772f1a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b3:b1:9e:2d:dd:14:1b:6a:86:de:db:97:93:
                    e2:0f:03:61:24:b3:e2:8a:68:69:74:c5:04:16:23:
                    4a:1f:b6:bf:92:80:2e:6d:37:d5:de:29:3e:ad:03:
                    a3:03:cf:80:74:8e:af:a7:b5:94:60:3c:06:08:ad:
                    63:5b:d8:ac:73:cb:a3:ea:b3:17:cc:f9:03:2f:8d:
                    55:37:14:69:e4:65:d5:66:7d:c8:49:cc:ab:e5:91:
                    7a:9f:f2:74:3b:d1:43:b5:c5:5e:cd:5e:49:c7:91:
                    a9:2e:18:89:8e:ea:5c:2b:01:b4:e1:cf:ba:89:7b:
                    d2:79:53:37:71:5c:34:45:46:82:08:e8:1f:b1:84:
                    78:f0:91:54:4d:22:15:02:86:3d:a3:d8:fa:d7:a4:
                    32:93:cd:0f:e3:92:3b:57:49:2d:7b:c2:2c:07:05:
                    ca:a6:32:9d:7d:27:2b:a4:3c:5b:5f:24:04:9a:b6:
                    57:64:61:24:71:e4:9f:a9:27:22:b3:f6:20:0e:70:
                    1d:6b:ff:d8:d7:bc:44:ef:f1:af:f3:ce:b1:8b:d9:
                    6a:be:66:cb:4d:b4:46:91:fd:96:8f:a9:0e:0b:b0:
                    db:5b:fa:cf:37:06:ba:5f:f9:31:f4:9b:30:6c:a3:
                    75:3d:53:b1:e8:95:d6:60:f4:71:32:08:19:44:b7:
                    5f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:03:F6:B0:85:58:FE:5F:49:88:C6:64:71:72:A6:2E:FC:4F:54:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b2c34040-2393-3eee-9c59-bc335c9dbda2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.130.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:bb:51:04:9b:8f:68:5c:f4:d7:81:b6:1f:05:fe:27:a8:aa:
         69:93:2f:64:8c:08:46:10:54:44:3e:5f:bc:65:19:99:19:2f:
         6d:97:1b:90:e5:3f:48:af:dc:a1:3a:14:31:f8:1b:c5:c4:71:
         7c:a1:81:d9:ac:47:4c:c3:4c:21:c8:1c:dd:4b:b3:c2:77:d1:
         82:a9:5a:15:1d:86:b1:e4:e4:13:78:7f:60:33:b4:6a:ea:9c:
         1c:b0:03:1c:a1:a3:46:d9:1a:88:41:93:e8:6d:41:13:ab:11:
         74:81:cc:1e:8f:46:7a:f8:98:a6:f9:11:05:9d:15:e2:b7:a1:
         05:ca:eb:70:47:31:3e:b2:99:87:93:82:4a:3b:2a:7e:19:4a:
         8d:69:99:62:7f:69:81:de:e9:e7:2f:83:92:c9:7c:38:da:5b:
         c3:bc:a0:d0:fb:6c:10:0e:44:01:78:6d:97:dc:cd:06:04:6d:
         de:b3:a8:ad:f8:3e:ed:06:f6:64:37:bd:42:f8:ab:a8:d5:66:
         73:ca:57:06:06:90:6a:fa:c3:0b:b6:6d:b1:ec:a3:99:7e:a4:
         87:69:6f:22:6e:55:18:9a:90:e2:3a:26:7e:fb:e0:9f:3e:74:
         9e:52:96:16:81:d3:40:52:97:26:6e:85:6d:69:34:e6:b9:06:
         54:19:32:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0XgacDEiBo94vTQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
ZjcwZTQ0YTMtNjBkMi00Yjg1LTlhYjUtNzU5Zjc3MmYxYTM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7Oxni3dFBtqht7bl5PiDwNhJLPiimhpdMUE
FiNKH7a/koAubTfV3ik+rQOjA8+AdI6vp7WUYDwGCK1jW9isc8uj6rMXzPkDL41V
NxRp5GXVZn3IScyr5ZF6n/J0O9FDtcVezV5Jx5GpLhiJjupcKwG04c+6iXvSeVM3
cVw0RUaCCOgfsYR48JFUTSIVAoY9o9j616Qyk80P45I7V0kte8IsBwXKpjKdfScr
pDxbXyQEmrZXZGEkceSfqScis/YgDnAda//Y17xE7/Gv886xi9lqvmbLTbRGkf2W
j6kOC7DbW/rPNwa6X/kx9JswbKN1PVOx6JXWYPRxMggZRLdf6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA0D9rCFWP5fSYjGZHFypi78T1R8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYjJjMzQwNDAtMjM5My0z
ZWVlLTljNTktYmMzMzVjOWRiZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI4JwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALC7UQSbj2hc9NeBth8F/ieoqmmTL2SMCEYQVEQ+X7xlGZkZL22XG5Dl
P0iv3KE6FDH4G8XEcXyhgdmsR0zDTCHIHN1Ls8J30YKpWhUdhrHk5BN4f2AztGrq
nBywAxyho0bZGohBk+htQROrEXSBzB6PRnr4mKb5EQWdFeK3oQXK63BHMT6ymYeT
gko7Kn4ZSo1pmWJ/aYHe6ecvg5LJfDjaW8O8oND7bBAORAF4bZfczQYEbd6zqK34
Pu0G9mQ3vUL4q6jVZnPKVwYGkGr6wwu2bbHso5l+pIdpbyJuVRiakOI6Jn774J8+
dJ5SlhaB00BSlyZuhW1pNOa5BlQZMlU=
-----END CERTIFICATE-----