Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1f6da251-413c-3667-8773-4dc6a9dda959.roa
File:                     1f6da251-413c-3667-8773-4dc6a9dda959.roa (raw, json)
Hash identifier:          HlVlurC/BlYiA9KH3NFNftsaSUx2TOMW8yCedKxueO8=
Subject key identifier:   BB:74:4C:4D:76:F6:C3:3C:CF:73:85:37:52:81:B0:F4:8D:8B:B9:37
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F432858485F9ADF0F40D9C16C36D0BF00
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1f6da251-413c-3667-8773-4dc6a9dda959.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     29802
IP address blocks:        192.211.48.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:df:0f:40:d9:c1:6c:36:d0:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=b906d8b1-dfa1-4d40-8fba-86d46d9d70ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0c:ff:c3:92:ec:a7:7a:be:02:dd:e8:47:10:
                    b6:ea:e4:93:5c:f1:1f:fd:d2:77:5a:46:c8:8b:23:
                    9f:ef:94:4d:17:41:b0:4e:e3:38:46:95:67:cb:12:
                    6c:aa:db:4c:99:5d:66:d9:ff:f5:3e:3f:07:ef:56:
                    d1:20:4e:f4:73:f4:23:b9:a8:8b:d8:47:2a:4e:07:
                    7c:78:da:e9:95:5d:b9:21:08:4e:f2:40:79:06:2c:
                    72:55:88:93:d7:0c:4f:5f:b0:59:75:54:2d:f1:6b:
                    78:05:6c:03:57:81:fe:87:7b:35:10:54:f2:4f:b2:
                    03:de:40:c3:ea:92:1a:9c:cd:98:b8:c9:09:de:bd:
                    b5:a7:4e:e5:14:e1:80:4d:fa:10:df:95:f3:74:07:
                    a8:f7:a7:3f:5e:36:36:5e:70:8e:13:e5:43:03:ab:
                    b1:e5:71:cd:03:b2:fd:4e:85:8d:a3:16:b6:b1:1d:
                    d8:3e:35:d9:16:52:88:20:65:bb:06:8d:17:52:04:
                    5a:c5:51:83:57:6b:a4:42:e2:c5:a9:24:fb:bf:9d:
                    dd:2d:bc:0f:13:1e:08:29:28:09:b8:56:a2:ae:61:
                    12:d1:1e:ae:20:ca:b6:3c:e5:3e:1f:ff:35:23:f9:
                    97:69:e6:f1:70:37:57:1a:e1:10:db:44:42:3a:89:
                    d2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:74:4C:4D:76:F6:C3:3C:CF:73:85:37:52:81:B0:F4:8D:8B:B9:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1f6da251-413c-3667-8773-4dc6a9dda959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.211.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:60:18:d3:04:08:02:09:cb:16:38:14:28:c7:89:8b:3d:fc:
         01:5d:e6:b9:3c:61:11:1f:75:6e:11:30:91:f2:4c:02:e3:89:
         6e:65:07:c5:96:09:6a:dc:dc:76:ed:c6:2a:f0:1e:e9:26:40:
         be:c9:6e:65:26:ee:1e:33:8a:c0:81:38:78:b4:fb:19:36:c2:
         b4:d5:7a:78:90:18:21:7f:b2:d6:34:4b:55:9b:01:90:e0:41:
         b6:d1:af:4e:5c:2f:4c:1e:6c:ea:ee:71:9f:f2:9c:1f:c2:9c:
         99:56:f2:ab:31:ff:f7:4e:e6:98:d9:a3:98:73:8a:79:c9:4d:
         fe:06:41:39:61:ca:e5:10:16:ec:33:66:56:c9:62:9e:2f:66:
         68:16:0b:34:33:45:f5:53:fb:a6:e0:44:a5:92:3b:d6:77:d9:
         7b:68:99:43:a1:34:4e:c4:2b:49:4c:2d:f7:c2:67:75:a1:97:
         ca:76:6f:15:c1:17:9f:80:ee:06:d7:3b:2b:1d:db:d9:c3:1d:
         dd:37:9f:39:9c:0f:23:81:ad:fc:63:94:b0:81:0b:91:97:ac:
         75:6d:74:33:f6:1c:65:8f:a8:4a:82:74:81:97:dc:43:c7:23:
         06:e6:87:c0:09:cf:c6:3b:ad:48:95:a6:42:2e:fe:51:73:da:
         3a:24:ff:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----