Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/a4897d9e-22e5-3ec8-a89d-6240aaeea7f2.roa
File:                     a4897d9e-22e5-3ec8-a89d-6240aaeea7f2.roa (raw, json)
Hash identifier:          et+ALVrYcb3U/VCaWrieeL/YYUh3BeqX3S8K9wJAuuA=
Subject key identifier:   E2:49:FD:1D:84:50:13:44:C6:9A:FA:1D:CE:57:2C:95:1F:BA:EC:1C
Certificate issuer:       /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial:       010D0C9F4328584839EACB92B0302ED0CB191440
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/a4897d9e-22e5-3ec8-a89d-6240aaeea7f2.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     22765
IP address blocks:        72.20.192.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:cb:92:b0:30:2e:d0:cb:19:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=dd774ed9-372b-4ce7-a563-a98c51059887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:22:f6:04:76:08:5b:ac:92:e1:90:b2:1f:cd:
                    e7:73:51:53:74:59:60:15:2d:08:51:b2:3b:6a:9c:
                    ea:e1:bb:a0:30:a3:b1:ba:c2:4a:a3:90:c8:ec:b2:
                    92:f2:3b:ed:1d:b3:1a:67:5d:d7:e2:fa:15:26:99:
                    b2:9b:6a:6b:36:35:ed:17:fc:2e:b2:77:95:ff:cc:
                    60:f0:f1:31:f0:13:e6:22:ff:e7:02:31:60:f3:6d:
                    00:36:1e:f4:29:60:ca:71:4c:19:7e:e5:03:dc:82:
                    cb:94:36:ef:70:c7:2b:d6:24:51:20:6f:72:b9:cc:
                    87:af:85:27:a1:ba:a6:ba:a2:4e:e3:84:27:9d:35:
                    12:e0:14:cf:aa:30:61:4c:0e:29:98:08:01:e7:75:
                    eb:1d:86:e6:26:ae:0e:b2:60:99:e2:cf:5d:2e:dc:
                    27:f8:dd:69:bb:e7:b3:78:d6:1c:ba:e5:3b:c4:a5:
                    b7:ea:e5:7c:29:39:11:ee:0e:c7:39:31:85:d3:1e:
                    d8:84:80:a5:f6:0d:20:23:0d:e9:61:80:88:0a:8e:
                    be:47:6f:48:88:bb:f6:a1:67:67:8e:6c:25:95:88:
                    60:32:03:ab:ba:24:0e:84:c7:1b:3b:92:7d:4d:43:
                    6c:2a:e6:3c:28:89:90:6a:c6:45:45:10:59:6a:e2:
                    78:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:49:FD:1D:84:50:13:44:C6:9A:FA:1D:CE:57:2C:95:1F:BA:EC:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/a4897d9e-22e5-3ec8-a89d-6240aaeea7f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:22:ce:5b:41:73:7f:2d:80:43:bd:cc:33:31:7a:4f:0b:6b:
         70:4e:e1:2a:e3:11:e0:d3:c4:2b:de:36:20:f4:ed:8b:28:45:
         7b:17:0e:90:6c:96:13:1c:07:e4:1b:79:86:f7:eb:da:17:64:
         90:1b:8e:de:85:a3:46:81:10:28:22:52:a7:8c:7b:df:fb:ae:
         fd:c9:9e:dd:15:87:25:57:73:db:30:e1:29:4f:c8:b3:66:2e:
         c4:dd:0e:b1:43:25:b2:3e:1c:15:3e:c8:fe:96:82:94:d8:af:
         bf:9d:57:ae:1e:8b:f9:eb:e3:13:4e:f3:dd:b6:cf:22:ae:ee:
         a3:48:f5:93:f1:44:e8:ff:84:c7:1f:bf:1f:7c:d9:75:01:2d:
         80:f9:49:dc:e9:fe:34:14:6b:6b:0c:ee:46:54:cc:76:00:ef:
         2c:f9:09:d1:06:78:84:a2:b5:25:f7:3c:f4:3e:8c:b3:b2:f8:
         d7:a8:79:96:ec:0e:5d:c8:8d:a5:1d:e2:d4:09:ea:05:1d:5e:
         9c:07:d0:40:dd:82:c5:3a:ae:00:e8:31:d0:65:f1:55:91:44:
         41:a0:54:78:a0:4b:0a:9b:26:a5:43:17:bf:3f:24:d8:42:57:
         68:a3:ef:48:3b:cc:a6:24:3b:99:38:76:54:c1:68:67:53:a9:
         5c:5a:41:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----