Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/09403143-8aba-3d7c-a93c-c10c7ba8d9f8.roa
File:                     09403143-8aba-3d7c-a93c-c10c7ba8d9f8.roa (raw, json)
Hash identifier:          k4kcTakLbKrWmS5R6riWmoUVesbfr4cOzR6UbLN2l+U=
Subject key identifier:   E9:45:63:EC:F2:CE:59:B0:E4:68:E1:DE:7F:6A:27:47:C8:F5:1B:73
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584863CB0C60D263F7B6EC88C900
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/09403143-8aba-3d7c-a93c-c10c7ba8d9f8.roa
Signing time:             Tue 31 Dec 2024 14:00:53 +0000
ROA not before:           Tue 31 Dec 2024 14:00:53 +0000
ROA not after:            Mon 31 Mar 2025 13:00:53 +0000
asID:                     29802
IP address blocks:        199.91.64.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:63:cb:0c:60:d2:63:f7:b6:ec:88:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Dec 31 14:00:53 2024 GMT
            Not After : Mar 31 13:00:53 2025 GMT
        Subject: CN=3c91a009-a0ea-46c9-a968-8427cc2d444e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c1:9f:27:58:92:af:67:53:bd:fc:5c:68:36:
                    ae:52:06:fa:c1:ac:25:86:58:cd:f2:50:d5:c0:a8:
                    90:aa:75:f2:44:05:00:b2:04:9c:cc:d6:17:42:25:
                    87:bf:4e:43:ec:b5:fc:ef:5f:4f:02:4e:73:23:70:
                    4a:29:83:86:9d:e5:10:a6:3b:ba:9f:68:e9:bd:ac:
                    ee:72:a6:fc:46:04:3a:43:1f:fb:23:40:4a:a1:ea:
                    d0:1e:89:f8:38:12:2d:e2:10:7d:34:a3:9a:6f:05:
                    e1:40:20:e6:bc:71:a8:21:87:4d:35:53:9b:05:62:
                    8a:65:ab:cd:23:d9:e3:bf:86:88:b9:77:41:33:3e:
                    9b:98:8f:ee:3c:e5:b0:61:b4:39:5c:c2:aa:15:30:
                    e6:e8:db:54:11:15:b7:7c:c5:7a:20:f2:6b:49:90:
                    54:ca:bf:95:bd:c6:1d:10:41:cb:81:c1:79:83:79:
                    4b:00:7f:75:5c:e8:6f:ac:bd:df:8f:19:a9:8f:83:
                    11:e1:8f:f2:89:5d:2c:80:55:cd:57:4a:6f:04:55:
                    57:30:c7:15:02:7f:18:3d:18:bc:a6:67:09:8b:36:
                    75:81:db:4d:25:39:a5:a2:28:be:9f:64:a2:82:b0:
                    d7:48:ea:92:b7:27:0d:ac:90:f4:47:87:1a:bd:81:
                    40:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:45:63:EC:F2:CE:59:B0:E4:68:E1:DE:7F:6A:27:47:C8:F5:1B:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/09403143-8aba-3d7c-a93c-c10c7ba8d9f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:bc:94:ea:0f:0f:1c:05:42:6b:6d:95:f5:77:62:54:c2:5d:
         1d:c5:d0:25:46:1f:54:1d:8b:00:ec:c1:8e:f1:00:2b:8e:0b:
         64:59:34:8d:19:34:49:f1:60:b2:b9:cf:d5:dc:cd:ed:b0:8c:
         1a:09:ca:7d:25:10:a9:a0:c6:7d:f5:e7:e3:5e:e7:4a:1a:b8:
         a9:4e:94:37:47:40:16:ad:ad:ca:24:f3:d6:22:15:73:04:52:
         a1:7b:2e:99:d9:cb:df:92:61:d6:df:3b:bb:1c:21:3c:7e:87:
         7f:39:62:75:01:8b:e7:2d:4b:86:cb:53:fc:28:d0:70:ed:bc:
         81:dd:26:4d:88:e3:da:dd:ac:2d:95:3b:97:44:50:45:26:67:
         ff:d4:8e:35:a6:df:6f:ec:ec:06:18:b1:a4:88:0a:6d:ae:28:
         e8:dd:b4:9a:cb:e9:d7:46:ce:51:4a:a6:31:0e:53:17:8c:c1:
         96:8c:95:a3:f7:f9:eb:6e:c5:63:e4:ea:2f:86:99:c9:cb:92:
         d4:80:94:f4:67:86:5d:67:ed:44:ca:fe:26:17:5c:75:bc:10:
         fd:45:fb:bf:11:f8:9b:0c:74:41:2b:00:81:9c:23:d2:8a:35:
         2b:ee:80:dd:ef:4a:75:2b:13:5c:20:1e:4e:dd:68:f2:52:ea:
         0d:47:af:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----