Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cb85b2a1-980d-337b-9370-047b10a38d3f.roa
File:                     cb85b2a1-980d-337b-9370-047b10a38d3f.roa (raw, json)
Hash identifier:          U87NuXmekeKCQ8NWKmU6qD6ryaNEXXOH9tEul0GuBmE=
Subject key identifier:   A6:13:F2:F8:BF:4C:E3:50:54:C4:B1:72:63:16:67:50:2E:F8:F2:C3
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D1F1B2799E6F1928BF5B00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cb85b2a1-980d-337b-9370-047b10a38d3f.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        71.89.64.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:f1:b2:79:9e:6f:19:28:bf:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=9cbabeed-a118-4900-a721-94c9d27738da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b6:71:6e:d1:7d:a9:2d:bf:ad:20:b4:fe:d8:
                    49:9c:be:bd:bf:9b:0a:ea:f2:f3:66:40:b1:f8:1b:
                    9f:3a:96:25:f6:0b:b5:6c:4a:d6:61:6b:f5:32:a3:
                    2f:c4:ce:e6:e8:70:23:2c:4b:ff:6b:7b:11:68:1d:
                    f5:5d:e5:61:9b:b0:d3:c3:d1:06:08:17:0c:17:1a:
                    c5:0d:86:7f:0c:1d:47:1d:cd:a5:5b:fe:a3:02:de:
                    84:79:3c:d0:e8:18:fd:7b:80:cd:74:c2:db:c6:dd:
                    d3:dd:7c:ad:f3:70:61:82:ba:90:47:b8:57:6c:45:
                    89:df:62:06:98:b6:59:a1:9b:21:dd:5c:a0:dc:74:
                    57:0d:56:f2:87:2d:8a:44:4d:a3:dd:e3:85:7d:a9:
                    7e:ff:c4:06:f5:cb:f3:a2:60:e9:ea:d5:94:e5:c3:
                    5b:4d:c6:2b:f7:c8:ac:80:4a:82:d0:32:28:8a:64:
                    0e:c2:f6:8f:74:40:d7:66:5f:0f:d3:97:9f:40:30:
                    d3:40:fd:95:7f:77:24:4c:13:af:bc:4f:a0:c6:7c:
                    3a:5f:1c:67:13:40:cb:64:9c:59:3a:b9:71:42:59:
                    ed:e2:d0:eb:f0:e1:ac:64:68:b1:66:62:67:50:d7:
                    c6:f8:e8:82:5e:0e:55:16:a4:40:d5:7a:cd:9e:4d:
                    13:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:13:F2:F8:BF:4C:E3:50:54:C4:B1:72:63:16:67:50:2E:F8:F2:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cb85b2a1-980d-337b-9370-047b10a38d3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.89.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:37:ff:fc:21:08:4a:7f:fe:22:a6:9d:26:fc:26:03:3c:d4:
         86:d0:ef:aa:3b:14:67:17:d6:b6:36:f6:6c:a4:97:15:89:79:
         da:e0:ee:25:e7:02:ca:16:0c:f5:64:da:bf:4c:fd:8a:10:75:
         9a:a9:32:0c:ef:f9:2c:e9:f7:f8:9a:cd:47:3e:d6:87:0f:75:
         90:f3:a0:41:7a:9f:e0:17:6d:b3:1d:53:3b:ff:09:06:78:d6:
         36:06:ed:62:a1:86:89:27:6d:43:e8:06:b0:fa:88:b0:4c:78:
         ea:83:96:92:5c:21:e4:30:73:cd:d6:95:b7:8f:4d:16:69:a7:
         fc:4b:7b:de:b2:d2:c6:5b:21:13:bd:1c:d9:5e:55:7b:72:32:
         ed:b5:36:57:61:4d:7c:85:26:b8:f1:0a:9d:e8:fb:7c:c1:ee:
         09:28:44:cc:33:1f:fe:18:e0:d7:4c:12:11:ee:a4:12:e0:a3:
         d4:d5:62:d8:de:87:ca:1e:e7:69:0d:9a:8e:ff:99:43:e4:ee:
         27:38:10:9d:e9:89:de:1f:cb:7f:70:e3:ea:b1:77:1f:ed:1d:
         33:0e:fd:b9:b5:a4:ff:ac:f2:33:8f:01:25:71:ed:10:a3:9e:
         08:ce:b1:bf:da:f8:50:13:57:2b:2b:14:2d:6e:84:1f:68:ba:
         9b:bf:0e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----