Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8888cd12-c9ed-3359-9d31-9b8d4afb2988.roa
File:                     8888cd12-c9ed-3359-9d31-9b8d4afb2988.roa (raw, json)
Hash identifier:          OZvN3cnzuUXcUfhoowqBNw9h4pd0q5thtUuKZPtt/nQ=
Subject key identifier:   EF:30:0D:AA:B8:0C:38:E3:30:3A:42:02:07:99:6A:2B:94:5B:E5:3F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C10C786D959EC190D017880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8888cd12-c9ed-3359-9d31-9b8d4afb2988.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        24.13.24.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:c7:86:d9:59:ec:19:0d:01:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=8252b71d-6fbb-4eac-9d8a-82ab8d66cc68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:eb:6f:38:1f:f5:b5:1b:69:de:10:3e:4e:2b:
                    3a:9f:63:8a:e3:e7:0d:42:50:11:5c:e9:7a:c5:e8:
                    ca:96:79:f7:ee:e4:72:1b:c0:ad:fc:4f:b1:1a:5a:
                    15:62:7d:12:7e:40:24:ce:6d:4e:d5:14:f8:a6:0b:
                    c4:9c:a0:e8:ad:02:fc:3d:ff:da:ae:19:1a:c1:e0:
                    24:d9:46:8c:f0:c0:7a:b7:ec:f1:61:59:e6:40:b1:
                    52:db:0c:a2:73:0f:3f:13:06:47:fe:41:a4:26:69:
                    64:67:2f:cd:c6:64:08:93:a8:2d:86:3a:5b:8b:5f:
                    56:e4:b5:db:f6:20:09:cc:a8:fe:3e:86:ae:bc:b5:
                    15:75:f1:2e:e6:e9:e7:eb:7d:d1:fb:3d:2a:b3:74:
                    3b:e4:6b:ac:6f:b7:48:32:33:7c:87:c9:dc:1e:ea:
                    20:e5:d6:6b:15:6a:4e:6e:e2:03:af:99:de:6a:86:
                    14:45:da:fe:86:e5:20:4d:3a:b3:61:b4:fc:5f:dc:
                    7f:f5:f7:6a:50:9f:2d:f7:7a:fe:45:f6:8c:36:94:
                    d4:00:60:9e:91:c2:ce:e7:8e:c2:f6:34:14:4f:3d:
                    38:a2:65:cc:72:05:c0:fa:3f:87:47:95:3a:8c:3b:
                    b2:65:67:43:47:e3:e5:d2:d2:74:84:a1:aa:cd:24:
                    73:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:30:0D:AA:B8:0C:38:E3:30:3A:42:02:07:99:6A:2B:94:5B:E5:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8888cd12-c9ed-3359-9d31-9b8d4afb2988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.13.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:a6:82:35:d7:26:c7:cd:f9:53:ed:95:b1:11:f2:fe:b2:81:
         ce:71:98:7c:23:5a:1c:53:76:87:9b:b2:93:6c:62:e1:67:6e:
         5c:b9:9e:29:fd:9c:f1:fc:88:d7:db:ee:dd:06:18:c2:77:00:
         89:97:40:37:98:9a:c5:47:19:69:0e:43:73:cf:38:b8:42:fe:
         b2:a5:76:c4:a8:f3:aa:74:6d:d5:96:7d:84:63:c1:a8:eb:9a:
         7d:f4:7e:6b:fa:c9:f9:11:e1:80:5a:81:dc:37:0b:a1:42:6f:
         b1:eb:b3:71:6d:27:a3:2d:d5:be:31:3b:07:97:65:46:52:25:
         eb:73:b4:fb:12:7e:81:87:c2:48:b7:93:f8:68:38:85:76:04:
         51:cb:da:b3:3a:49:0f:3b:2f:84:2f:21:f4:a4:16:ea:6a:71:
         5b:53:46:28:6b:42:64:f5:5f:5d:a1:53:a7:a4:20:cf:a3:ba:
         df:29:68:57:5c:8b:52:ff:47:a8:c8:0b:28:46:f5:84:01:69:
         00:59:52:79:5c:36:fd:5b:f1:14:34:48:a3:5b:22:26:19:0c:
         94:b7:64:04:71:9f:46:ee:55:fa:eb:aa:fd:6c:b5:bc:3a:0f:
         ab:e5:19:13:2f:54:26:66:86:a6:56:72:5e:db:18:74:f2:96:
         71:e0:f1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----