Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f955a431-f6a6-3fdc-a978-c8d8f8ef7b25.roa
File:                     f955a431-f6a6-3fdc-a978-c8d8f8ef7b25.roa (raw, json)
Hash identifier:          YdbSVosxP7rEczSTZSnb6QHek0r8FlRjv/oOXaC8KzY=
Subject key identifier:   8B:38:71:22:B1:C4:1F:69:2D:B6:D5:5C:17:72:67:F7:D5:75:D3:AF
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584863CB099DE90DDEEAC28DAA40
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f955a431-f6a6-3fdc-a978-c8d8f8ef7b25.roa
Signing time:             Tue 31 Dec 2024 14:00:53 +0000
ROA not before:           Tue 31 Dec 2024 14:00:53 +0000
ROA not after:            Mon 31 Mar 2025 13:00:53 +0000
asID:                     13414
IP address blocks:        199.96.58.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:63:cb:09:9d:e9:0d:de:ea:c2:8d:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Dec 31 14:00:53 2024 GMT
            Not After : Mar 31 13:00:53 2025 GMT
        Subject: CN=b519dd3a-2758-4115-bafc-08b49664c380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:43:3d:4c:e1:bf:de:45:28:6b:b1:a9:1e:8f:
                    9c:3a:23:a6:01:fa:5e:2b:49:da:ba:aa:4e:8d:d7:
                    28:ff:71:ff:fb:ab:fc:b8:97:65:e4:31:63:50:88:
                    fa:62:6e:3a:02:27:b4:3d:ef:75:ab:18:f5:3e:28:
                    7e:b5:1e:f5:bd:d5:2a:38:27:c3:f0:88:f0:df:83:
                    5a:6f:56:82:1b:d1:26:ff:ec:3d:29:5e:65:fd:2f:
                    13:73:f9:a6:01:8c:28:66:cb:48:d4:e8:37:95:88:
                    ce:0b:d1:ff:b0:e2:92:97:95:25:35:4a:10:6a:6a:
                    b7:41:e0:c5:7b:b8:74:2a:08:7f:66:43:4f:76:9b:
                    09:d1:26:d1:9f:06:29:9f:66:87:03:ec:31:71:52:
                    14:f2:4e:d6:76:9e:d8:a0:5e:d3:1e:a9:3d:da:cc:
                    07:71:70:ac:b8:75:a3:ec:67:90:88:31:93:60:df:
                    50:0b:e6:65:8d:31:c3:4a:cf:fa:e3:b6:fc:a6:82:
                    f6:20:99:2d:5b:8b:96:29:8f:8b:f7:08:96:66:76:
                    ea:02:df:0d:71:82:02:94:73:c3:3a:e5:d6:02:88:
                    8d:da:b9:a1:e0:05:ef:6f:a4:d3:02:b0:2e:af:17:
                    91:47:7e:f0:23:d9:fb:5e:b4:01:c6:55:df:0a:95:
                    9f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:38:71:22:B1:C4:1F:69:2D:B6:D5:5C:17:72:67:F7:D5:75:D3:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f955a431-f6a6-3fdc-a978-c8d8f8ef7b25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.96.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:08:2e:8d:15:5e:b2:bd:6b:41:18:57:2d:a6:1e:56:60:ec:
         05:91:bf:4e:e9:0b:73:8b:ed:8f:3d:55:d3:27:2f:96:ed:7c:
         e5:93:cd:31:6b:ca:27:d9:90:74:35:08:b8:ff:95:22:54:72:
         6e:a5:1c:b3:fb:c0:36:11:39:fd:38:e5:07:81:f6:df:78:f5:
         3c:7a:cb:05:b9:1f:2b:30:0b:94:61:14:69:3e:44:6f:8f:c0:
         7b:69:4c:c6:48:6f:ce:87:a9:5e:a2:8e:99:05:d0:85:30:f7:
         d5:f0:96:04:b4:f8:bc:ab:b2:82:31:e8:10:8d:bc:11:db:f1:
         96:e5:a1:10:40:63:b7:69:a3:53:b6:ae:29:11:c5:d9:84:2f:
         2f:c9:f7:3e:5b:cf:21:a1:0b:2c:59:0e:ec:f4:67:1e:65:7f:
         90:d7:f5:71:af:f0:57:be:5f:49:88:22:87:77:d5:09:4d:b0:
         64:2a:d7:5f:21:09:ea:e8:c0:c0:4e:a2:53:e8:b5:31:c9:26:
         99:86:9a:67:88:8e:0b:f8:63:e2:9d:84:e5:47:fe:73:ee:ea:
         20:e3:9f:0e:07:29:2e:12:13:7e:21:78:4b:b9:89:7f:11:24:
         b6:a1:d4:a5:63:93:9f:24:8d:56:9b:de:40:e2:4b:ff:45:86:
         4b:12:75:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----