Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38c3de3d-97f4-3ca7-9284-c7a2e3a9bf22.roa
File:                     38c3de3d-97f4-3ca7-9284-c7a2e3a9bf22.roa (raw, json)
Hash identifier:          7dkrVJeMpaU+6VK+5Jp9qx3FVhS7w9L2itk4La0n+WE=
Subject key identifier:   2C:23:DB:6E:ED:E4:28:57:80:E2:5C:F7:9A:60:F8:EF:6B:35:21:94
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F1550C43E1E7014134F2B5C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38c3de3d-97f4-3ca7-9284-c7a2e3a9bf22.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        216.119.240.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:0c:43:e1:e7:01:41:34:f2:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=175b7500-0f77-4cd0-8853-dfd5fb0e1a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0a:b1:4a:88:5c:ec:4a:20:28:6c:19:fc:b3:
                    3b:f2:cb:7e:c5:c0:2a:e0:7d:e2:fe:5b:46:3d:bd:
                    60:0b:1b:9f:20:0f:42:4f:22:64:fc:26:36:40:84:
                    2a:ff:b9:a3:33:94:62:96:f8:51:45:2a:2b:20:1d:
                    89:06:2d:dd:11:e9:fb:f2:e1:82:c9:98:d5:b1:21:
                    3f:90:bc:28:cc:2a:52:95:07:7f:81:d7:3d:57:ba:
                    63:c7:de:5b:27:7e:87:5d:a2:e9:f8:a6:99:2a:2a:
                    e4:d9:ea:8d:0e:91:ee:5c:9e:d3:c7:75:61:bb:58:
                    20:4d:f8:60:fa:b4:fe:3c:e5:5d:8e:5e:cf:e9:ec:
                    f9:71:fb:6b:45:6f:32:5e:2e:e8:68:ae:9a:6a:cd:
                    44:ab:bc:eb:70:d6:0d:d4:ca:48:93:3b:77:a0:f5:
                    ef:10:7c:11:8a:02:4e:ec:22:61:d6:39:91:d3:7a:
                    39:73:09:6e:8b:26:50:29:06:1b:28:e7:37:29:dc:
                    a3:7d:7f:3a:82:4c:8b:9e:81:87:97:8c:e0:4d:d0:
                    e2:b3:05:e8:3b:89:6a:e5:ae:f3:18:44:2b:68:44:
                    ef:7a:3a:79:cd:d1:b3:ba:28:be:ba:c3:72:e4:e2:
                    94:72:de:ce:98:66:bf:44:e1:ca:8d:ed:8c:fc:7f:
                    c6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:23:DB:6E:ED:E4:28:57:80:E2:5C:F7:9A:60:F8:EF:6B:35:21:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38c3de3d-97f4-3ca7-9284-c7a2e3a9bf22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.119.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:d2:3c:e2:72:23:b9:5c:79:0a:99:7f:41:04:c5:3e:28:90:
         5b:5b:05:93:9b:07:00:6a:e2:99:d5:04:98:1a:e0:f2:56:b4:
         77:82:f5:f3:43:bc:59:bb:c9:e1:3c:eb:56:90:51:dc:0e:53:
         81:5b:5a:d0:2f:b1:17:3f:b6:df:4c:3e:87:4b:1a:d9:fe:6b:
         60:04:3e:01:a6:c1:0e:f9:09:ac:c1:b3:00:a1:25:77:2a:cd:
         71:02:c1:f3:7c:57:45:78:46:88:73:03:7a:99:26:bf:c4:03:
         05:38:6a:e6:ea:1b:6c:3f:0d:18:51:8d:39:7a:3e:d2:16:2b:
         c2:b0:d6:c0:4d:7b:a2:2f:ae:9d:9e:fd:76:34:96:7b:ed:39:
         7d:c7:0b:fd:3e:bc:ea:af:a9:f9:db:45:eb:19:0a:8f:85:fb:
         54:25:e9:3d:4b:a3:06:06:ef:1b:ab:bf:60:f7:fb:5b:65:69:
         c9:83:95:17:b6:54:59:06:f4:75:1c:25:ed:24:22:43:96:21:
         cf:50:fd:52:d6:6c:f7:89:b0:ec:79:6c:6f:f1:0b:bf:80:ae:
         0d:e5:f3:4d:97:a9:24:c7:2d:39:93:80:e7:c0:ab:bd:0b:4b:
         95:72:ee:82:8b:e4:4d:20:17:8d:88:69:d9:6f:d6:18:e0:c2:
         02:7b:85:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----