Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/682a3f5a-f894-3ed6-9812-0733ea3f0551.roa
File:                     682a3f5a-f894-3ed6-9812-0733ea3f0551.roa (raw, json)
Hash identifier:          VjDLJRG3Ujy8EGkgVxtI2WTDFMirZjd5jugdc30w4xU=
Subject key identifier:   DD:54:BD:33:91:9B:27:BA:BE:90:13:F8:CE:0D:9C:76:8C:D2:B6:C0
Certificate issuer:       /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Certificate serial:       010D0C9F43285848345569459B9EA1F328A78740
Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/682a3f5a-f894-3ed6-9812-0733ea3f0551.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     27446
IP address blocks:        72.250.240.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:69:45:9b:9e:a1:f3:28:a7:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=9f16d824-f1be-4d84-8308-f21adbc85bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:da:88:39:c6:73:e9:8f:fd:21:6c:ae:ca:b1:
                    c7:1e:ac:f5:b9:a7:e4:ac:4c:0f:55:da:03:83:7c:
                    4f:ce:7a:d3:2f:bd:d3:41:2d:8b:eb:af:7c:fb:bb:
                    4c:ae:8c:7b:8a:e0:a4:29:9c:83:98:b4:cf:88:d0:
                    45:1d:99:16:ca:41:04:80:1c:54:c9:d3:c7:b8:b0:
                    ff:a5:9b:e7:86:2c:58:0f:ed:5f:77:6e:58:49:bd:
                    4e:36:28:4a:fc:b5:b2:70:4c:bd:8d:84:0e:22:7b:
                    7c:46:f5:21:52:27:6e:1a:f1:8e:2a:15:e5:fa:0e:
                    1a:b6:20:79:5a:d4:a0:fe:10:24:0f:91:93:83:e4:
                    15:a6:8d:a1:48:f9:1e:ab:30:c7:cd:1e:db:85:4c:
                    a5:c9:77:26:a7:bb:4a:14:69:6b:87:cc:e5:43:df:
                    58:f0:67:ab:2f:62:77:37:59:88:c4:65:84:d0:7f:
                    5b:45:99:b5:25:44:f3:9c:e1:3e:e6:95:1f:7c:6f:
                    01:1d:d3:f8:dc:d8:d6:ae:06:c3:5e:bb:df:f7:1e:
                    d3:cd:1d:46:f7:9b:a0:4d:41:77:75:bf:f9:ff:16:
                    ac:b8:6b:60:65:43:85:b1:a2:81:9a:d5:a0:31:c4:
                    97:8a:46:8c:3a:04:49:f1:13:56:43:0a:59:e3:c9:
                    06:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:54:BD:33:91:9B:27:BA:BE:90:13:F8:CE:0D:9C:76:8C:D2:B6:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/682a3f5a-f894-3ed6-9812-0733ea3f0551.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl

            X509v3 Authority Key Identifier:
                keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.250.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:6d:78:04:23:e9:b9:e1:29:0a:e8:72:97:3b:ba:b0:a3:88:
         62:e1:99:ae:a0:4e:f1:4f:d2:c3:eb:6b:bb:7d:5b:70:e7:78:
         42:18:92:b1:09:35:6f:2f:88:28:6d:db:da:76:18:19:1b:02:
         a8:87:0b:94:0c:65:9f:a8:4e:5f:65:0d:53:d3:5c:c3:68:60:
         8d:d7:52:b3:d6:64:7a:06:6b:a7:31:90:bf:01:8a:b5:c6:8c:
         1f:85:78:32:ee:59:d1:9e:c9:43:8a:a1:59:8e:e0:81:fc:cd:
         0b:2e:8a:c0:2d:cd:42:1c:40:7e:39:08:9b:41:8d:65:c8:51:
         40:fb:dd:89:be:12:f1:ec:25:13:ce:8a:0c:c4:3a:48:e3:6e:
         0e:c1:26:b2:fc:ed:d7:6a:13:df:fa:c2:98:ff:7c:25:1b:f0:
         63:fd:c0:bc:37:b5:30:e2:b0:e3:4a:4f:be:df:c9:e8:f4:84:
         3c:cb:c7:5b:49:59:c1:c0:db:5e:77:0c:75:34:9e:ed:f9:43:
         90:35:cb:7e:d2:ee:78:e0:26:c4:d8:aa:f7:3a:0a:03:f6:f0:
         71:b9:db:a5:7f:47:19:52:a3:fa:76:27:0f:96:52:82:60:1c:
         53:3a:42:32:9f:d6:c9:00:00:74:3e:e0:b1:c1:e7:3d:fc:a6:
         e3:81:ec:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----