Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b602a95-04e4-3cab-b92b-6f65f9d22488.roa
File:                     3b602a95-04e4-3cab-b92b-6f65f9d22488.roa (raw, json)
Hash identifier:          ajv41SPSslvqRnQ5geWFz3LsOUi4BbZXPvcZOjTt9po=
Subject key identifier:   21:20:3E:79:8E:66:E1:FC:87:B1:42:CD:D4:69:2B:39:87:D2:D5:5B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E6109B33B816B6FE394EC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b602a95-04e4-3cab-b92b-6f65f9d22488.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     33659
IP address blocks:        69.248.40.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e6:10:9b:33:b8:16:b6:fe:39:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=5b8dcd22-a188-4363-8433-498056ede9c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2c:6c:44:13:30:a6:53:bf:f3:75:95:ab:79:
                    cc:7d:e2:dd:39:4d:92:79:59:cc:33:c4:2a:c0:a4:
                    26:8c:78:2c:cd:82:09:52:2f:b1:59:de:dc:b7:07:
                    31:1e:27:c3:9a:42:0e:34:07:45:26:fe:fe:06:04:
                    3a:1b:9b:38:51:f0:9c:2c:5c:92:96:ca:dc:1a:24:
                    71:16:d1:df:6c:9c:d4:64:38:90:95:3d:04:08:37:
                    0a:71:ce:ff:e4:84:f9:a4:e2:42:ee:1d:81:ba:ec:
                    7a:08:29:91:1e:0c:f1:f8:bb:af:b9:ec:c6:16:39:
                    fd:5e:40:7a:ab:c0:81:1c:b4:83:29:77:e7:39:73:
                    70:68:51:57:49:16:e0:52:31:62:9a:b1:ab:e7:74:
                    48:cc:17:98:e5:12:08:48:4a:07:69:10:83:d5:6e:
                    a9:f4:02:27:eb:36:c2:9c:a8:d0:c7:87:34:9e:3e:
                    34:14:ee:a9:da:83:ac:2b:c6:d0:37:ec:cf:23:d5:
                    de:fd:40:c7:f9:46:04:c0:74:c5:9d:9d:4a:26:13:
                    21:5a:00:93:60:71:31:52:1b:ce:77:4d:34:7a:58:
                    76:fc:9b:d8:a5:05:ad:0b:7e:6b:bc:fd:b7:40:64:
                    77:e5:f1:15:ec:db:e1:18:c0:5f:5a:ec:42:02:0b:
                    a2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:20:3E:79:8E:66:E1:FC:87:B1:42:CD:D4:69:2B:39:87:D2:D5:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b602a95-04e4-3cab-b92b-6f65f9d22488.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.248.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:4d:04:4d:35:29:a2:a0:fb:57:2c:8c:b0:85:7d:25:91:3e:
         89:b8:d0:be:7d:51:cc:c7:3f:f4:39:42:a6:89:10:2b:bb:37:
         0e:74:52:f6:50:e8:10:09:5d:fc:84:a4:13:79:87:21:0f:7d:
         7f:12:80:f4:a8:26:93:cb:36:98:3c:3a:ed:76:5a:f5:54:26:
         4f:74:e2:06:ab:52:90:2b:b8:6c:5a:b3:73:3b:76:d6:a2:46:
         5f:7e:7d:b3:c3:b4:5d:a4:69:20:32:de:a8:43:10:bf:e7:63:
         2e:ee:2a:48:db:5a:f3:b0:d7:93:c3:76:54:7d:a8:ca:2d:32:
         ca:3e:bf:19:2c:e6:ba:12:d0:c8:47:58:1c:6c:32:90:c6:24:
         88:db:44:ad:46:22:5e:25:2a:2b:94:80:c7:b7:8a:f3:92:cb:
         3a:0b:78:65:d0:8e:47:79:a5:a6:ca:a7:aa:9e:a7:15:9e:76:
         6d:5c:ac:07:ca:4b:6a:c3:c9:5a:2e:93:0d:31:e0:ba:32:03:
         90:1b:24:87:e4:eb:25:d5:2c:bd:05:d0:bb:fe:7c:4a:a5:2a:
         c8:65:84:8f:4d:09:37:78:83:8c:3b:23:d2:68:a0:02:0d:bd:
         8a:9c:07:d9:a7:97:7c:7d:e9:25:97:8e:34:88:1b:db:45:b6:
         8b:e2:6f:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5hCbM7gWtv45TsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk
NWI4ZGNkMjItYTE4OC00MzYzLTg0MzMtNDk4MDU2ZWRlOWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjixsRBMwplO/83WVq3nMfeLdOU2SeVnMM8Qq
wKQmjHgszYIJUi+xWd7ctwcxHifDmkIONAdFJv7+BgQ6G5s4UfCcLFySlsrcGiRx
FtHfbJzUZDiQlT0ECDcKcc7/5IT5pOJC7h2Buux6CCmRHgzx+LuvuezGFjn9XkB6
q8CBHLSDKXfnOXNwaFFXSRbgUjFimrGr53RIzBeY5RIISEoHaRCD1W6p9AIn6zbC
nKjQx4c0nj40FO6p2oOsK8bQN+zPI9Xe/UDH+UYEwHTFnZ1KJhMhWgCTYHExUhvO
d000elh2/JvYpQWtC35rvP23QGR35fEV7NvhGMBfWuxCAguibwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCEgPnmOZuH8h7FCzdRpKzmH0tVbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2I2MDJhOTUtMDRlNC0z
Y2FiLWI5MmItNmY2NWY5ZDIyNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRfgoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEJNBE01KaKg+1csjLCFfSWRPom40L59UczHP/Q5QqaJECu7Nw50UvZQ
6BAJXfyEpBN5hyEPfX8SgPSoJpPLNpg8Ou12WvVUJk904garUpAruGxas3M7dtai
Rl9+fbPDtF2kaSAy3qhDEL/nYy7uKkjbWvOw15PDdlR9qMotMso+vxks5roS0MhH
WBxsMpDGJIjbRK1GIl4lKiuUgMe3ivOSyzoLeGXQjkd5pabKp6qepxWedm1crAfK
S2rDyVoukw0x4LoyA5AbJIfk6yXVLL0F0Lv+fEqlKshlhI9NCTd4g4w7I9JooAIN
vYqcB9mnl3x96SWXjjSIG9tFtovib/4=
-----END CERTIFICATE-----