Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/fc0068d0-a6ed-3e6d-8858-d68416365766.roa
File:                     fc0068d0-a6ed-3e6d-8858-d68416365766.roa (raw, json)
Hash identifier:          Fw3fVrntS2SsERptAB/iI7oDOywMmKJkOPOxtS4VmK8=
Subject key identifier:   B5:29:1D:1B:37:A0:2B:7D:AC:4A:7D:96:0E:3C:F8:23:1C:E9:5E:E9
Certificate issuer:       /CN=7770be2f-95a3-43e4-a139-53984564db4a
Certificate serial:       010D0C9F43285848854B4605F217E0E8D1C11700
Authority key identifier: 8E:FC:B1:77:D6:58:1B:C2:CE:12:0D:5D:2A:E9:67:7A:33:C7:6E:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/fc0068d0-a6ed-3e6d-8858-d68416365766.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     14618
IP address blocks:        162.213.204.0/24 maxlen: 24
                          162.213.205.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:46:05:f2:17:e0:e8:d1:c1:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7770be2f-95a3-43e4-a139-53984564db4a
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=d162c454-6031-490a-83e4-18e5df61a873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:92:ee:84:a7:87:f9:43:65:d5:84:fa:43:97:
                    9f:c8:8b:93:7f:6a:b9:d7:3b:4f:55:b7:ee:81:ad:
                    7d:02:24:9c:d6:47:80:11:6b:29:e0:cc:68:bf:0a:
                    f8:64:9c:fd:d9:a6:9e:65:11:b7:92:8e:82:a8:25:
                    b1:45:25:b5:19:7b:01:be:4b:18:b9:ab:39:b8:20:
                    69:83:de:3f:f2:1f:a4:27:04:a6:af:96:01:36:26:
                    e3:6e:08:28:64:61:a2:1b:7e:64:d4:15:a6:35:49:
                    97:5b:bc:8f:ee:30:7e:9e:37:57:4c:27:ec:5b:f7:
                    b4:43:b2:a5:e8:b3:8f:13:a1:a0:92:97:da:8d:f5:
                    c8:08:8f:4b:96:0e:30:fa:3f:eb:08:32:74:61:a4:
                    e8:24:0e:14:75:a0:26:41:ca:8f:8a:43:15:7b:31:
                    33:04:b8:d2:f6:c8:94:31:2e:bc:1b:f7:ea:38:d5:
                    be:2b:e6:35:2d:f1:81:b3:07:9c:54:a9:ed:04:74:
                    98:07:44:28:7c:5a:81:a4:b8:48:59:25:af:7a:bb:
                    d9:37:56:e1:0b:a0:87:a8:8d:a8:2f:5b:21:42:23:
                    5f:f2:9a:c4:84:e6:8c:56:32:92:a2:c8:75:73:6c:
                    81:4a:83:52:0b:e1:64:67:a1:f2:09:79:7c:5a:e0:
                    0e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:29:1D:1B:37:A0:2B:7D:AC:4A:7D:96:0E:3C:F8:23:1C:E9:5E:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/fc0068d0-a6ed-3e6d-8858-d68416365766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/7770be2f-95a3-43e4-a139-53984564db4a.crl

            X509v3 Authority Key Identifier:
                keyid:8E:FC:B1:77:D6:58:1B:C2:CE:12:0D:5D:2A:E9:67:7A:33:C7:6E:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:a1:fe:a7:1e:71:a2:4f:b9:f8:b5:be:d7:f3:05:79:2a:90:
         2e:1a:26:51:35:00:e3:dc:5a:b5:32:3a:2b:c2:0c:d9:d2:8b:
         5e:43:06:47:6b:d7:49:32:8c:9b:24:f3:89:2b:4f:7b:8c:1d:
         a3:43:16:ad:63:8b:a1:95:c7:cf:e8:5e:33:b3:9d:89:1c:9e:
         0c:a9:56:00:47:19:86:d7:81:bb:7a:13:03:54:48:f9:29:b1:
         9c:78:3f:48:71:83:1e:be:e9:27:f1:1d:2a:0b:80:de:b8:9d:
         c7:f6:59:f4:e0:e2:8b:29:24:c1:b1:66:b5:01:c0:cd:03:b0:
         14:5b:7f:5a:bb:17:40:02:b4:61:80:73:d0:f2:38:46:fd:30:
         b8:90:69:36:85:99:56:23:01:86:58:40:82:d5:46:6c:0f:c2:
         10:86:f3:c4:2e:88:46:ac:bf:dd:01:71:c2:40:af:1f:0d:b4:
         da:87:e1:a3:e6:00:1a:91:d3:6e:0b:0e:23:e1:2d:b2:52:7e:
         7c:cf:cb:73:6b:58:e2:12:9d:15:08:dc:32:1d:0f:2e:8e:8d:
         a8:3f:20:f7:fb:f3:0d:58:33:c3:5d:25:d4:ca:71:5b:75:8d:
         09:03:70:b6:73:de:b3:5d:43:43:ba:3f:cd:9f:47:69:d4:ff:
         c7:70:bd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----