Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/72c6a5f2-90e0-3f7d-a37e-d6673e0cace5.roa
File:                     72c6a5f2-90e0-3f7d-a37e-d6673e0cace5.roa (raw, json)
Hash identifier:          BYd1n90AyYlwe5+ZWVjlKhSZsSa++RGtS/eabe4JXNo=
Subject key identifier:   7E:3A:9D:62:3E:38:2C:C5:89:1E:F9:30:E0:57:5A:52:3B:02:A2:65
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285847F9B4E39C3F982134B5FE8700
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/72c6a5f2-90e0-3f7d-a37e-d6673e0cace5.roa
Signing time:             Sat 23 Nov 2024 14:00:39 +0000
ROA not before:           Sat 23 Nov 2024 14:00:39 +0000
ROA not after:            Fri 21 Feb 2025 14:00:39 +0000
asID:                     394089
IP address blocks:        134.231.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f9:b4:e3:9c:3f:98:21:34:b5:fe:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Nov 23 14:00:39 2024 GMT
            Not After : Feb 21 14:00:39 2025 GMT
        Subject: CN=b8415d01-7619-41b1-97bf-7f397001c2da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7d:91:81:2d:7b:8b:a8:d9:9f:bd:51:48:02:
                    83:16:3b:75:9f:da:d7:3b:88:1e:92:22:7c:ba:e8:
                    5c:09:c8:36:54:0a:b8:7d:92:11:5d:27:d3:9f:50:
                    20:24:45:e2:d2:1a:07:db:33:22:64:bc:a8:37:08:
                    53:29:33:3f:9c:6e:26:72:98:45:6b:21:4c:a3:95:
                    15:1c:74:77:38:a7:0d:64:05:61:eb:9a:77:63:75:
                    9a:f5:8c:df:d3:2d:5a:bd:f2:04:c0:aa:51:06:a3:
                    bf:7c:1d:92:a9:56:aa:af:29:2c:11:30:78:3b:bb:
                    64:c9:b1:3d:f1:d4:f9:b9:a2:c3:78:8c:6c:39:14:
                    19:f5:ba:71:b4:cb:77:d3:38:36:cc:a8:9a:99:0b:
                    d2:21:7e:f2:e1:3d:13:f7:c6:09:d2:b0:18:c6:48:
                    d6:69:9c:0f:2e:1a:e0:a8:ec:ae:04:36:21:76:4f:
                    34:eb:da:cd:e1:f1:de:ff:11:fb:3f:6c:dd:49:c3:
                    e7:d8:bb:5e:cc:d5:83:79:2b:d9:34:0c:d1:82:5d:
                    f2:1d:c6:91:f5:a4:d1:61:50:1c:3f:f9:69:d1:3c:
                    11:8b:cb:35:76:66:3b:5a:7a:1c:25:dd:20:80:e3:
                    f1:56:35:35:41:e6:34:2c:c0:2b:ee:cc:e2:40:40:
                    bb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3A:9D:62:3E:38:2C:C5:89:1E:F9:30:E0:57:5A:52:3B:02:A2:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/72c6a5f2-90e0-3f7d-a37e-d6673e0cace5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.231.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:45:50:62:7f:bf:ee:14:84:de:3e:ed:09:9f:ac:02:87:66:
         49:1c:08:0d:94:9c:e3:8f:16:cb:68:39:cb:cd:59:ef:7a:d7:
         4e:17:62:4b:df:c5:20:80:84:df:e7:32:e5:cf:d8:80:19:b5:
         f0:71:cb:62:b9:ea:73:4a:75:6a:d5:76:ac:b2:93:c4:0b:ca:
         b7:a7:35:75:88:91:d3:0d:7a:b7:c5:1a:eb:39:4d:a8:ba:e1:
         6a:ba:b3:68:b9:d9:9d:b9:19:67:81:c6:13:7c:25:7a:e2:c5:
         ab:4f:a9:19:c0:24:09:b8:67:22:47:88:54:d0:52:4a:37:cb:
         fb:2e:26:f7:64:ce:b1:28:07:24:60:5d:2c:6a:04:a7:93:60:
         d4:60:46:4e:35:03:73:c3:1c:aa:a1:6a:ac:24:86:ee:55:9b:
         89:1a:99:a9:13:96:79:97:ae:5a:45:80:a1:32:b1:82:ca:01:
         35:f0:15:2f:58:d8:c1:28:ea:92:80:a2:cf:8f:1c:0a:12:9f:
         2e:0c:5a:cd:b7:cd:33:52:c4:63:11:3c:7a:06:81:9d:a2:9f:
         1d:0c:4b:55:13:85:92:3f:31:a7:5a:38:e7:a9:f3:1b:4f:00:
         9a:f9:eb:c1:b1:0f:22:7e:c7:5a:5f:99:c4:3d:b1:e7:f5:b5:
         ee:d5:20:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----