Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/014a3156-d509-3901-839f-f105e325a128.roa
File:                     014a3156-d509-3901-839f-f105e325a128.roa (raw, json)
Hash identifier:          G8GQ3YkUxMnlkfk/o9fL6dwXufsT4RC6OLPdV4NJWDI=
Subject key identifier:   E6:18:F5:6C:AE:09:13:29:62:0C:74:0E:3A:CF:16:D7:CF:DC:88:D0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C1349AD5E5E92F17FFF5B20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/014a3156-d509-3901-839f-f105e325a128.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33651
IP address blocks:        24.5.216.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:13:49:ad:5e:5e:92:f1:7f:ff:5b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=8145bc56-6b23-4f96-b523-a390fbda2630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:07:e8:c8:76:fb:01:3c:bc:c4:1f:61:03:1c:
                    d9:7a:88:dc:fb:3f:c6:7d:7d:88:e9:26:29:2a:6f:
                    c9:02:d0:60:d9:9a:bc:d9:15:82:00:1b:0b:c6:24:
                    fb:2e:8a:89:87:8b:50:02:7f:d5:f4:42:3b:38:47:
                    2d:16:3e:56:21:e0:d9:0c:c8:fe:86:30:26:f8:15:
                    ff:81:53:3c:49:45:e6:09:bd:f9:9d:d7:7b:03:77:
                    86:2d:23:79:32:18:92:40:7c:07:99:fe:4f:4f:11:
                    2f:56:3d:a1:29:0b:ae:52:18:a3:6e:04:54:9a:72:
                    e2:e6:4d:88:a6:ec:c3:89:58:48:5d:b7:3f:58:e6:
                    8a:fe:a2:1a:5c:c8:00:87:1a:52:1a:f5:ab:8f:df:
                    b9:fb:03:5d:1f:43:7b:b2:5d:55:3b:e5:ec:ac:82:
                    f4:1e:e4:38:91:b4:d9:6b:4f:62:9d:6b:a5:7b:46:
                    e5:84:0f:4c:a5:22:2b:6e:07:83:a8:01:04:92:3f:
                    aa:24:a5:9a:dd:40:2d:16:2e:d4:a4:af:a2:c6:fb:
                    0e:cf:d4:d6:d6:b5:e0:9f:fa:1e:98:11:da:9a:0e:
                    de:c1:4c:c0:4c:db:a5:6c:12:bf:70:0a:a3:4b:e6:
                    72:64:c5:cf:f2:25:14:37:5e:c2:4e:0e:8d:b9:f7:
                    07:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:18:F5:6C:AE:09:13:29:62:0C:74:0E:3A:CF:16:D7:CF:DC:88:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/014a3156-d509-3901-839f-f105e325a128.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.5.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:fd:0f:ea:24:95:45:2c:42:44:9d:dc:f4:19:e5:87:71:0c:
         aa:5b:93:27:21:fa:ab:49:de:cd:59:05:46:51:4a:72:e9:76:
         39:6d:5b:ff:50:fb:36:28:77:c9:af:1a:f9:5d:2d:97:ac:c6:
         8e:b6:eb:02:ec:5e:c4:ab:58:92:61:3b:32:7a:26:09:b7:60:
         2f:60:e0:01:b8:8b:e5:83:ce:4d:c8:9c:45:ba:ae:2e:ae:43:
         6a:bf:85:0e:bb:05:0f:97:13:97:04:6c:c6:11:ef:85:af:1d:
         85:cf:42:7c:e2:e2:39:9f:b5:e8:ec:4a:fd:ff:09:f3:fa:18:
         f3:04:16:ea:77:40:ee:da:59:f0:ed:ae:7f:1d:41:d9:a2:66:
         04:48:e8:0a:fe:74:12:88:0a:3a:29:6e:38:35:99:4f:bc:42:
         9a:cb:d8:7f:ea:d2:cb:dd:e5:4f:8b:4c:b3:79:10:f1:a3:d0:
         c7:41:43:d5:a0:ee:31:ed:8f:de:ef:f2:46:53:1f:b8:66:d6:
         80:3d:5b:e9:1f:7e:a0:4b:7c:43:aa:5a:4d:35:57:d1:fb:e6:
         83:f8:de:b1:76:1a:db:98:eb:10:e2:1f:4d:52:48:37:b2:74:
         0b:55:7a:cd:0e:a7:39:88:82:36:a1:39:69:4b:e3:1c:7a:bf:
         40:f2:fd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----