Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62134457-a2ad-319d-956d-7d1516e6dcc0.roa
File:                     62134457-a2ad-319d-956d-7d1516e6dcc0.roa (raw, json)
Hash identifier:          BNS7lAuA6g+tr1S//X+UVz490L7S6V22A5HsNxWlMPE=
Subject key identifier:   A3:D1:1D:B8:BD:EF:A0:D3:AD:2F:1F:9C:4C:40:EA:B4:AB:D6:74:56
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847E0950142DA3F603700436C00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62134457-a2ad-319d-956d-7d1516e6dcc0.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     7029
IP address blocks:        98.20.104.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:95:01:42:da:3f:60:37:00:43:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=d107b96f-5e29-45a8-8ab5-3684557cada8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:18:62:4f:78:03:25:67:c4:8d:83:bc:b0:10:
                    05:b5:a4:00:4b:61:b7:5d:1f:08:8d:f9:1b:a2:0b:
                    22:3a:0b:fe:2b:76:5f:28:9d:6f:8b:3f:b9:4f:9a:
                    fb:29:b9:2e:9d:3b:df:e9:f9:cf:e4:d4:80:25:8d:
                    79:d6:b1:a9:f6:c5:11:16:b5:ac:d3:16:ae:12:7f:
                    9d:b3:e4:37:f1:e6:b7:c6:c0:b5:3d:16:10:a4:b3:
                    ad:5d:da:ef:96:bd:2a:83:a0:97:6d:36:e0:ec:eb:
                    17:bd:02:bf:07:4e:b0:5b:80:3b:b4:dc:7f:7e:e7:
                    ca:06:9f:fb:f8:73:4c:9b:0d:45:27:d7:39:36:7b:
                    62:25:8b:2f:cd:9b:f4:a7:e3:e2:36:99:7a:23:0e:
                    04:79:35:9a:21:49:5b:50:1e:6b:48:54:5f:dd:e8:
                    59:1c:2e:0a:3b:11:41:33:1c:9f:e9:35:5a:b6:b6:
                    b1:14:31:69:23:52:3c:2b:06:22:6f:cb:84:44:8b:
                    fe:f3:89:4c:fa:40:c8:38:83:03:7e:32:fb:fe:6a:
                    df:f4:2e:50:d3:69:49:73:8c:ff:7b:50:3b:e5:ff:
                    ea:2f:ad:2a:11:15:d0:fa:98:85:91:90:a5:5f:0b:
                    70:31:ac:ad:db:d9:63:e8:a9:67:76:3d:ec:69:8f:
                    f5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D1:1D:B8:BD:EF:A0:D3:AD:2F:1F:9C:4C:40:EA:B4:AB:D6:74:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62134457-a2ad-319d-956d-7d1516e6dcc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.20.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ae:95:c3:87:ef:90:0a:d1:04:b5:d2:1a:fc:f5:5f:56:91:
         c1:a3:84:8b:7c:e7:75:88:f7:99:ea:91:03:1e:2a:95:26:0f:
         78:35:81:37:48:5c:05:7a:94:26:e7:1f:a5:de:60:ba:1c:7c:
         d9:bd:96:7e:30:85:55:8e:ca:58:67:e2:e1:c1:d9:4c:8f:3f:
         a5:e3:84:cd:5b:c7:25:ae:bf:7e:2a:09:05:88:35:e8:27:ac:
         8d:85:db:e6:f1:f8:7e:18:45:46:d0:09:79:8b:c7:f2:3f:c2:
         a6:cd:4f:53:d5:2a:5d:ee:e4:a4:f4:a0:15:4d:2b:33:c6:fb:
         8e:9c:bf:ca:e6:b6:29:8b:ac:9e:42:5f:0c:98:97:4f:24:ec:
         3a:21:03:17:38:34:dc:f7:6d:d0:20:e3:2d:e7:90:63:b0:07:
         69:a9:c7:f3:95:62:db:04:bd:a2:ac:2b:ce:e9:b1:df:c3:9b:
         00:0f:ad:38:34:34:35:ab:94:e0:ba:9a:86:68:3b:b8:95:37:
         a3:4f:78:55:94:bc:e9:8d:83:ed:ab:af:48:0e:56:41:1e:2e:
         11:49:2e:12:a7:5f:ae:7f:c3:fc:13:ad:c5:cd:5c:95:42:d3:
         1a:cc:6c:38:29:0f:ea:bb:7c:c8:e7:f5:8c:1e:75:82:80:bd:
         68:d1:11:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----