Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d962d516-f419-3df9-a22f-f191121f9f09.roa
File:                     d962d516-f419-3df9-a22f-f191121f9f09.roa (raw, json)
Hash identifier:          UR5/lOd+6xU2ofrMDzhUh+TzNSYGWoIenl11bS4Y+ls=
Subject key identifier:   04:A1:A0:EF:8F:C8:49:4A:F0:95:11:30:9D:66:83:E3:D7:3F:44:91
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C1237B08BEFCD1336298180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d962d516-f419-3df9-a22f-f191121f9f09.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33287
IP address blocks:        69.249.126.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:37:b0:8b:ef:cd:13:36:29:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=df4959bf-1255-4186-8482-88d2736f4cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0b:e4:76:bf:26:29:6b:5e:8e:90:70:c5:8a:
                    aa:5d:b9:4d:5e:63:54:74:0d:13:81:02:38:ff:17:
                    d7:d5:a2:d6:17:8a:e5:1c:52:dc:8c:4e:e9:ca:0d:
                    39:ed:f6:3a:fb:68:51:c7:f8:0d:29:0d:bc:ec:ca:
                    f1:5b:71:17:25:f4:62:65:78:dd:35:22:63:1f:f4:
                    a4:ae:89:52:a2:b2:6d:f3:b7:68:3d:7c:81:7f:f3:
                    4b:b9:01:a3:f3:09:6e:9b:02:ee:17:7c:59:b9:14:
                    af:b8:c3:7c:e9:b8:d6:91:5a:e5:b0:00:55:11:f6:
                    e8:74:86:f6:a8:ee:96:de:a9:6f:c9:4c:68:ec:12:
                    1e:c1:fd:f6:7a:95:d6:3e:1e:4b:9f:94:ee:8c:4c:
                    47:4a:4f:9c:40:0f:3e:2c:38:a3:3a:43:b2:0b:18:
                    57:cb:45:71:a0:32:d3:1e:e4:e3:60:14:7c:1f:b7:
                    9f:89:a8:0e:27:8f:66:55:02:6d:66:c2:29:21:ec:
                    cb:b0:b8:98:ab:1f:7f:5d:7e:87:02:b1:b3:47:48:
                    dd:0b:c7:22:1b:ba:21:69:f2:ce:6f:d5:dc:51:83:
                    7c:69:31:e3:b2:39:f9:31:6e:4c:b9:b1:b0:1e:90:
                    bd:0a:70:c6:76:d7:88:31:e5:99:e8:5b:6a:e7:27:
                    29:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A1:A0:EF:8F:C8:49:4A:F0:95:11:30:9D:66:83:E3:D7:3F:44:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d962d516-f419-3df9-a22f-f191121f9f09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.249.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:6c:ae:d3:91:5c:7e:97:12:79:81:e0:86:36:a7:72:1f:d8:
         7a:52:41:47:5e:22:cc:cc:77:74:c2:11:56:75:b6:b6:9f:1e:
         2f:13:ce:d7:bc:3b:99:61:1c:b6:74:85:b7:3f:29:cd:d5:94:
         c0:40:a0:bf:a1:57:e7:d4:35:64:f4:7a:11:53:d5:14:05:af:
         97:88:db:e3:c8:17:51:c3:36:a2:72:8b:89:e5:f4:c5:cd:c4:
         d9:63:36:2d:54:02:1b:32:2f:ac:e3:f1:73:c0:86:57:b2:a1:
         3e:21:21:08:7e:9c:6d:69:55:0c:fa:24:ed:3d:f1:95:a8:97:
         69:fd:7e:1a:08:6a:79:5e:26:c7:72:5d:88:74:f1:b8:b7:86:
         17:cd:d4:c8:49:92:c2:f2:fa:1d:f5:c2:0a:3f:ec:97:9e:73:
         8d:ea:92:e7:47:79:b0:dd:7b:a7:02:00:d9:ef:d3:a9:83:1b:
         f8:cb:a5:51:e5:f6:a4:96:80:a9:76:cf:83:4c:39:3d:b5:38:
         c2:91:d8:da:c4:87:eb:22:4c:5b:5e:c9:ba:f5:53:28:c8:94:
         f1:46:99:35:bd:89:e3:66:6d:d7:0e:2b:58:e6:23:07:26:23:
         29:81:62:3b:c1:32:9a:b8:88:d8:fa:08:20:42:eb:5b:b4:a8:
         cd:a9:c7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----