Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32f3d38e-c211-345a-82f5-50a97e79c6ef.roa
File:                     32f3d38e-c211-345a-82f5-50a97e79c6ef.roa (raw, json)
Hash identifier:          xQ4gkQ71oKzi9zmnYfnWUrkmm6dDYpV3xh2+a9aRNvA=
Subject key identifier:   B6:66:16:55:77:27:A2:DB:1E:AC:93:3C:87:BA:D3:A0:E2:0A:27:04
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858483CB5757617B63CFBA02A2DC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32f3d38e-c211-345a-82f5-50a97e79c6ef.roa
Signing time:             Tue 17 Dec 2024 14:00:52 +0000
ROA not before:           Tue 17 Dec 2024 14:00:52 +0000
ROA not after:            Mon 17 Mar 2025 13:00:52 +0000
asID:                     7029
IP address blocks:        69.66.214.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3c:b5:75:76:17:b6:3c:fb:a0:2a:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Dec 17 14:00:52 2024 GMT
            Not After : Mar 17 13:00:52 2025 GMT
        Subject: CN=df9dfac6-a5aa-4a3f-a135-2b4e9ed7eb58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b9:e8:9f:e7:8e:d4:d9:72:c3:1b:a8:65:7f:
                    77:a6:16:29:c4:d3:e4:60:81:27:c0:9e:09:04:43:
                    9c:3b:43:6d:ee:df:78:e5:65:9f:f4:95:00:2a:da:
                    d5:7e:e1:bf:d3:1f:0e:50:5e:8e:35:db:6b:d8:4f:
                    ed:8c:ba:51:93:45:43:65:61:66:e3:79:6e:4b:cd:
                    f7:f0:41:7b:99:3a:64:66:a3:c1:6b:56:8c:1e:68:
                    79:1b:a3:a7:b9:de:8d:91:37:9e:6d:bc:47:83:c6:
                    58:d6:8e:fc:90:6e:41:10:52:0d:c2:a8:74:f7:d6:
                    e4:d1:26:eb:96:41:12:7f:d2:77:b9:ba:82:1c:17:
                    56:52:f0:65:fd:e6:df:97:a8:82:39:d8:da:36:db:
                    0e:04:62:4a:95:07:79:38:fc:e7:e4:fc:e1:1d:a7:
                    47:e5:81:e3:87:48:b9:88:b0:95:21:c2:24:16:90:
                    85:12:fc:2e:33:d2:1c:c0:57:3c:b5:5f:f3:15:65:
                    2d:98:40:af:db:fc:cc:c3:06:62:2f:0b:8c:a9:4c:
                    03:f2:f3:5b:fd:f9:bc:50:ee:d3:45:95:b7:1b:ef:
                    be:c9:07:f5:1b:3c:6a:e7:22:41:27:9c:b8:02:f5:
                    77:57:ee:8b:a3:13:01:27:de:1e:a0:9a:e5:cb:de:
                    f3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:66:16:55:77:27:A2:DB:1E:AC:93:3C:87:BA:D3:A0:E2:0A:27:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32f3d38e-c211-345a-82f5-50a97e79c6ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.66.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:21:06:0c:03:9e:c5:43:b9:95:16:b8:c7:20:98:ee:95:b6:
         80:5a:a7:2e:05:db:bf:68:56:81:d9:44:62:6a:94:72:cc:f8:
         4e:1a:76:6f:4c:d0:03:58:f3:f9:fb:75:a0:18:c4:4c:63:38:
         85:b2:8f:81:8d:c7:80:23:76:10:d0:88:6c:81:41:cd:46:b5:
         e9:2a:4c:d3:2d:65:a2:f9:cf:35:f0:d5:c4:87:39:92:f0:ab:
         15:95:55:79:b4:2d:cb:1d:7c:e1:dd:ee:c1:06:2f:9d:f7:4f:
         8d:50:6e:80:e8:53:b3:f2:ee:1d:da:36:ea:ac:b0:2f:9d:23:
         16:95:86:b2:25:63:ca:28:d9:4f:49:51:a8:b0:b0:96:53:d5:
         4c:bd:41:06:77:b0:33:cc:02:73:a8:df:bb:3d:da:db:07:65:
         e9:c5:e7:30:19:f9:12:d7:33:41:58:74:ed:3c:1e:60:d8:f9:
         c3:f4:a8:0c:a6:0b:60:68:7b:12:12:9f:bc:1b:b9:8a:99:6c:
         d0:15:80:34:d8:dc:b9:8f:00:41:da:d9:4a:00:5b:b7:8e:e5:
         1b:da:6b:4a:6d:c3:dc:cb:a3:1e:d1:1b:01:64:1e:ca:37:8b:
         97:82:dc:fa:1b:ab:50:bf:1d:3a:de:e2:ad:0a:d8:4a:bf:b1:
         c1:c7:d6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----