Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/60667079-5f1a-3a08-b9aa-681c7bfada1f.roa
File:                     60667079-5f1a-3a08-b9aa-681c7bfada1f.roa (raw, json)
Hash identifier:          7s4/AJqtpNR1KJMc19Nmy1hh6ZLxbA+4BABvVB0SyVw=
Subject key identifier:   72:4C:66:12:7B:0D:35:CD:EB:E8:FB:E3:64:7E:06:3A:D6:72:E4:4A
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F1552B8B40F3667ED9B20E00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/60667079-5f1a-3a08-b9aa-681c7bfada1f.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        64.196.0.0/14 maxlen: 14
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:2b:8b:40:f3:66:7e:d9:b2:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=3a6b4254-38d4-44a7-9ccc-e529052bc781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1e:c9:67:b8:76:75:44:88:13:09:43:bd:c7:
                    a5:8e:75:76:91:f2:01:e6:28:99:bc:ef:3e:19:81:
                    b4:d9:f3:81:8c:5e:bf:fd:d4:4d:8c:20:c4:52:2b:
                    6b:dd:50:28:e3:9a:f3:9a:81:af:24:38:36:a1:df:
                    d6:36:b6:18:11:eb:86:53:2b:1c:51:fe:ab:58:88:
                    c6:bc:51:f6:a9:13:93:1c:da:26:e2:10:fc:fa:1e:
                    d0:ca:0c:95:61:7e:df:0e:d8:47:3d:e7:28:1f:8a:
                    eb:6d:7d:99:e9:19:50:7c:ac:9d:83:01:12:df:fd:
                    64:f0:6b:c9:1c:3b:56:45:b6:7c:61:9d:19:57:44:
                    74:aa:2b:0c:7d:cd:03:72:f2:c5:d9:cb:60:33:fa:
                    c3:46:fa:60:68:13:d8:31:88:fc:5c:2f:74:17:26:
                    c7:38:77:3a:4e:1c:a7:7e:b0:c5:87:69:18:71:f9:
                    ed:c1:db:59:ff:50:d6:ae:9c:4b:de:dd:0b:f4:10:
                    2b:d7:36:18:af:a3:f4:74:b5:72:53:4a:14:ab:75:
                    3c:62:e2:cc:b9:84:b3:c6:fc:e2:69:c4:27:50:11:
                    f8:d2:eb:5e:50:9b:3f:4f:54:39:98:2d:b7:0a:92:
                    04:7b:18:5f:c3:14:a4:24:c5:41:1b:c8:68:0d:af:
                    dc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4C:66:12:7B:0D:35:CD:EB:E8:FB:E3:64:7E:06:3A:D6:72:E4:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/60667079-5f1a-3a08-b9aa-681c7bfada1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.196.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:51:ac:50:6c:e7:b2:a3:79:d5:b7:df:bb:75:af:fb:20:51:
         70:0b:46:19:39:14:2b:15:24:20:55:98:9d:bb:96:cb:ed:74:
         3d:42:15:95:9c:ea:05:14:a4:1c:11:d1:31:4d:3d:f7:39:75:
         3b:80:28:bb:64:fb:cf:c9:0d:00:f5:ad:1d:be:f6:68:85:b5:
         d3:0d:1a:a6:59:48:b4:78:00:a7:2f:c0:d6:27:09:88:9a:5f:
         65:3d:9f:a6:a6:f4:92:fe:0e:7a:a0:5b:e0:ea:34:f3:3c:0c:
         27:53:1a:07:18:4d:b8:66:17:ef:65:34:48:13:e5:3a:92:ee:
         c0:f9:12:fa:ea:83:d8:2d:a8:8e:6f:10:06:87:b6:48:19:68:
         ea:bf:9e:7a:f4:04:18:1b:0d:1d:b0:61:f6:b7:d7:48:fe:64:
         8e:ea:e8:f9:7f:86:6f:77:0c:77:67:b8:40:7c:0f:61:80:f7:
         ea:1c:7a:29:93:5a:32:5d:13:08:76:93:06:cd:63:11:a1:55:
         58:cd:0a:b5:61:c9:40:b2:68:52:68:37:21:82:8d:52:89:09:
         de:66:7f:69:8e:9a:e6:ca:b7:ef:89:5a:18:59:73:5a:34:55:
         5d:4e:ad:d8:ff:a9:b8:2c:18:36:e0:0e:45:f7:3f:d8:40:5b:
         e3:1f:11:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----