Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1c8cfd90-1e45-3ca8-865a-284e8261e043.roa
File:                     1c8cfd90-1e45-3ca8-865a-284e8261e043.roa (raw, json)
Hash identifier:          7UvSkeviH4RW8pKSa8+FYvbxMLfte7AqCzLcqO8fTOU=
Subject key identifier:   1C:10:73:62:6E:56:C5:E9:E1:D7:67:86:99:34:44:28:E1:D8:7A:B2
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F432858485CD031044156738DC01B4880
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1c8cfd90-1e45-3ca8-865a-284e8261e043.roa
Signing time:             Sun 29 Dec 2024 02:00:39 +0000
ROA not before:           Sun 29 Dec 2024 02:00:39 +0000
ROA not after:            Sat 29 Mar 2025 01:00:39 +0000
asID:                     21949
IP address blocks:        199.68.120.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5c:d0:31:04:41:56:73:8d:c0:1b:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Dec 29 02:00:39 2024 GMT
            Not After : Mar 29 01:00:39 2025 GMT
        Subject: CN=ef4c593a-682d-445f-b367-bae41fc1ea18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:20:18:67:c8:ce:13:43:d0:6c:6c:64:c0:66:
                    40:81:3e:6f:1e:dc:9a:ac:34:40:e1:d9:60:a5:b2:
                    21:f8:98:4b:64:40:8d:a7:a1:86:7c:76:d4:61:c2:
                    ae:bb:c8:8e:a7:36:65:57:58:68:75:07:a0:d1:6c:
                    6e:e9:3a:a9:8b:99:60:9c:14:f3:36:db:c7:a4:39:
                    87:f0:1d:eb:fd:c5:42:32:74:e9:46:85:29:32:d1:
                    87:c9:6f:cf:e0:e1:f4:ec:cc:48:3e:de:2e:2f:b3:
                    64:60:82:e6:c1:4b:1b:07:91:bf:83:5a:83:5a:a5:
                    b3:e8:3f:cd:cf:0a:3d:f6:19:88:d6:78:38:6b:c6:
                    5e:17:b9:d0:ed:1d:fb:a3:bd:66:83:a3:9c:c4:d3:
                    d6:5a:b7:f7:0f:62:b5:08:d3:d1:b2:48:2e:ec:95:
                    73:8c:78:77:ef:d5:e3:a0:06:f5:a6:56:b1:28:ce:
                    a1:fd:28:bb:07:98:9c:81:b0:72:ef:fd:52:84:fa:
                    32:30:6d:f7:4d:ef:82:4d:82:e7:8b:0c:1e:de:2a:
                    d0:83:f0:9a:23:4b:58:1c:97:55:88:e3:51:c2:f3:
                    37:93:8f:d4:5c:c2:42:f2:9a:33:1e:94:0a:1d:ba:
                    f2:95:28:70:b3:e0:2f:86:d4:3c:8e:33:b1:9d:cc:
                    9c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:10:73:62:6E:56:C5:E9:E1:D7:67:86:99:34:44:28:E1:D8:7A:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1c8cfd90-1e45-3ca8-865a-284e8261e043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:a4:85:19:61:85:b1:00:6e:a4:83:f0:06:5d:2e:9b:3b:d3:
         fc:2b:9c:e6:1d:1f:e1:64:21:f0:24:93:99:0e:45:78:1b:3d:
         e9:6c:79:76:aa:15:ff:41:a1:36:e8:07:70:ff:1c:e0:8a:97:
         d5:39:2f:e0:1c:73:6f:c0:a9:e7:b3:cd:1d:96:ac:04:8c:de:
         78:26:c2:e9:c1:af:97:bc:59:74:ee:d4:8c:5b:fe:dd:c3:89:
         cf:04:f0:24:f9:8a:10:ef:a9:cd:a1:83:85:4c:d4:20:ea:44:
         30:9d:2f:63:17:e1:97:0a:8c:77:2e:ff:77:73:c9:04:99:73:
         ff:8e:2c:72:3a:45:7f:7b:7f:7e:1e:c7:41:5d:b0:d0:d8:51:
         f1:af:47:4e:56:18:82:98:1c:f1:77:4b:eb:f3:e9:f0:86:98:
         29:a4:92:b9:50:ba:36:bc:bc:04:d6:04:5f:3c:18:ea:05:62:
         82:bc:26:72:63:d2:b1:d8:93:d4:f5:91:c8:a0:c6:70:ea:ae:
         e3:93:5f:c6:35:52:d2:73:aa:a8:b5:60:51:fa:5f:b9:88:e0:
         ce:b5:c6:66:f3:73:72:1f:0e:d4:39:7a:a1:70:24:c8:18:7a:
         75:43:2b:f4:4c:00:3e:11:b4:13:33:b2:40:3a:9c:3a:cb:26:
         cc:a5:7e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----