Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6487a073-56a0-32f0-8824-f157e54b29cf.roa
File:                     6487a073-56a0-32f0-8824-f157e54b29cf.roa (raw, json)
Hash identifier:          93rgHyqhpWeJThneB/YQKdon5532V2or7e1QnxYm/1Y=
Subject key identifier:   6C:C0:2C:F2:7F:5D:C1:67:A7:0F:46:54:C3:6F:FF:52:50:9C:17:46
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F155008E9906BC52C7396FA0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6487a073-56a0-32f0-8824-f157e54b29cf.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        98.20.160.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:00:8e:99:06:bc:52:c7:39:6f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=7ebcb4ac-feab-47cd-a9fe-9bd46d09caba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:02:d6:75:f5:0e:ed:dd:b1:af:9c:8a:36:87:
                    eb:1c:c2:e3:71:bf:54:c2:e2:c2:34:24:e6:d6:a4:
                    ae:a2:bd:b3:a9:b2:38:02:d5:9c:11:c9:4d:c2:38:
                    ab:0c:30:7a:50:8e:09:70:5f:ef:0e:79:d3:69:f4:
                    e7:67:d9:64:55:55:6b:c3:cf:fe:10:b6:94:71:7d:
                    6e:c1:c1:1b:76:04:05:ce:a4:a3:88:7e:25:96:78:
                    6c:84:c1:bb:89:1b:8d:57:eb:90:76:73:81:c9:67:
                    f1:db:60:5f:79:72:46:38:32:37:4d:14:60:cc:94:
                    6f:c1:d6:5d:c6:d5:12:80:51:af:f4:59:85:40:25:
                    5c:13:50:b3:d1:52:7c:dd:ec:92:c1:49:26:83:04:
                    f5:25:36:d6:d9:55:d0:fc:4f:0b:db:d7:ad:8d:45:
                    db:19:eb:3e:c5:c5:3d:f7:9b:f5:c3:b2:1b:37:29:
                    a7:4b:6d:ed:5f:cf:8b:ca:80:5d:c4:a3:64:05:e9:
                    7d:f2:df:4a:4a:15:30:b7:27:bc:09:d9:47:84:7f:
                    32:8f:5b:41:59:55:c4:56:da:cc:8c:b2:ef:aa:a0:
                    7f:d4:87:eb:26:55:5e:18:2e:e6:63:1e:bc:bc:7c:
                    21:22:ac:96:f1:81:7a:c8:a2:22:72:54:3c:76:e0:
                    5b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C0:2C:F2:7F:5D:C1:67:A7:0F:46:54:C3:6F:FF:52:50:9C:17:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6487a073-56a0-32f0-8824-f157e54b29cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.20.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:77:2e:8c:c1:6e:7e:43:76:eb:6a:1c:11:a0:ed:06:3e:2b:
         79:5f:58:bb:30:45:0d:49:c1:dd:aa:73:c3:57:8d:bb:af:cd:
         22:2a:55:e2:3d:1c:4b:c6:f6:49:21:dd:93:12:db:38:b4:c5:
         cf:06:55:79:4e:cd:40:a5:fe:8b:fd:e5:01:e5:f4:ee:74:1e:
         a1:84:90:2c:3d:c8:82:7e:a1:fb:91:86:13:08:13:9d:b5:7a:
         0f:8f:4b:11:a9:7b:48:f0:b7:60:0f:50:12:8f:d5:82:e9:f3:
         66:0c:c3:14:a5:0f:99:99:7b:e1:19:fe:2c:99:aa:e4:65:b9:
         4a:ad:a6:55:00:1c:05:89:bc:41:cf:6c:32:c1:cc:dc:33:2d:
         f2:3c:b1:b7:26:f7:15:8b:68:00:ae:78:b3:a1:56:75:c6:fa:
         fd:99:c5:2d:92:eb:a1:05:9c:2c:90:e1:a1:24:b2:57:55:5c:
         d9:54:82:16:d6:1e:1f:31:a0:c6:df:e3:e9:16:3c:98:d4:20:
         2c:15:86:97:2d:9c:d5:ec:0b:3f:ad:9e:38:d7:a3:00:b5:5e:
         5e:2d:71:2a:e2:28:6d:22:8e:f4:8f:b0:bb:f1:f0:79:ae:0e:
         4a:9b:9b:b1:77:3e:97:8d:67:1d:f2:af:81:20:6c:8f:b1:36:
         9d:26:c4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----