Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/791de0f2-89d2-3bf0-8407-e85b17cab367.roa
File:                     791de0f2-89d2-3bf0-8407-e85b17cab367.roa (raw, json)
Hash identifier:          JOssKq+XwIfgg9SBxa3hUtKzwtexMdle9r2FzrhnMXQ=
Subject key identifier:   1E:0B:55:C9:37:EB:DA:CD:F2:09:3F:5A:0F:38:62:14:F2:81:84:6B
Certificate issuer:       /CN=d84f9350-fc3d-4239-80bf-db10d2462a4f
Certificate serial:       010D0C9F43285848451584FE890CD1CB1EF3BB74
Authority key identifier: 67:1A:F9:23:95:54:C1:F6:41:95:0B:3E:7C:11:DF:22:5A:28:90:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/791de0f2-89d2-3bf0-8407-e85b17cab367.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     16545
IP address blocks:        192.74.220.0/22 maxlen: 24
                          2602:ff80::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:84:fe:89:0c:d1:cb:1e:f3:bb:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d84f9350-fc3d-4239-80bf-db10d2462a4f
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=c4017eea-9fed-402f-85fd-32477c04de3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dc:10:b1:58:4c:16:a7:78:62:a9:f6:80:08:
                    51:57:db:58:c4:b9:9b:e3:b9:e3:b9:42:c1:7f:ba:
                    14:1d:15:66:44:15:66:71:f9:56:05:9b:bc:8f:6e:
                    e2:08:d9:c1:35:08:c2:81:b0:ca:42:9c:61:57:75:
                    80:1c:82:42:c6:37:1d:52:03:2c:0e:65:0c:37:a0:
                    93:4b:12:ec:84:89:98:ce:f2:e3:21:c3:6b:17:3a:
                    2b:ba:8d:2e:57:12:9f:fd:47:83:a7:a8:e0:80:28:
                    1b:c0:58:37:7a:df:40:cb:1e:0c:6e:97:26:8e:d6:
                    91:c2:20:29:47:17:33:b8:55:0a:70:36:77:e0:64:
                    b5:fd:73:0c:c9:95:e1:e6:42:c8:06:49:92:28:b8:
                    f0:f9:d0:8b:fc:36:1c:e3:f1:d2:a9:ad:36:0c:9e:
                    dc:2d:1f:b2:e0:3a:90:77:60:c6:a6:9f:3c:28:e9:
                    0a:60:86:a4:15:ea:60:8c:4f:aa:e7:1d:3b:33:45:
                    bb:03:27:bb:96:6f:60:9a:2e:23:1a:48:ca:c7:8c:
                    5e:b5:11:9d:d3:e9:2e:40:c8:c5:dc:30:a9:02:eb:
                    ee:8a:6f:e2:1b:ff:e7:51:9e:30:70:dd:07:e3:fe:
                    19:6e:16:0f:5e:e9:a9:e9:41:d7:8e:61:68:29:4e:
                    a8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:0B:55:C9:37:EB:DA:CD:F2:09:3F:5A:0F:38:62:14:F2:81:84:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/791de0f2-89d2-3bf0-8407-e85b17cab367.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.crl

            X509v3 Authority Key Identifier:
                keyid:67:1A:F9:23:95:54:C1:F6:41:95:0B:3E:7C:11:DF:22:5A:28:90:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.74.220.0/22
                IPv6:
                  2602:ff80::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:c4:7c:f5:9c:9c:69:a3:24:9d:ee:df:2a:d6:45:39:57:54:
         3b:a4:78:55:94:ac:87:21:fc:74:f8:87:bd:73:c4:f0:11:b5:
         c8:3c:0f:97:84:f3:47:4a:74:8f:50:f5:4b:37:d8:e4:3a:7d:
         64:0e:f7:87:2f:5e:8c:f2:72:99:47:54:37:93:82:57:b1:7a:
         b9:f4:e1:25:95:0f:74:22:30:7f:94:1e:35:8f:57:c9:73:ba:
         35:29:df:b2:3b:ac:e0:4c:f0:bf:71:51:7a:77:c8:73:f5:33:
         70:f6:48:03:23:d5:47:17:ac:da:5e:6e:1f:8d:f0:d5:2c:5c:
         24:d6:80:26:e2:85:4a:5a:fe:8a:c8:24:d0:ab:a1:60:9c:24:
         04:8d:21:61:bd:f3:a5:a0:5e:a9:8b:3b:f3:cb:28:04:24:72:
         81:f3:a2:ee:22:21:bc:17:6c:a0:1f:ff:01:be:73:08:17:2f:
         f2:18:5b:97:0b:28:84:a1:2c:76:49:00:09:14:8b:a4:de:86:
         f4:e7:4f:8e:76:43:03:99:81:2f:17:05:7d:2e:cb:0a:8e:5a:
         2d:89:60:73:a5:af:b8:3f:f5:f9:59:9f:70:ac:fb:fc:03:b1:
         62:ac:67:44:e2:23:16:10:21:aa:0e:16:73:7c:d5:e0:ee:6c:
         c9:10:1c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----