Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/8c9678da-ff6f-3402-bd9d-abe8df8ec5b1.roa
File:                     8c9678da-ff6f-3402-bd9d-abe8df8ec5b1.roa (raw, json)
Hash identifier:          XurFgO+UpGtDj79qKV+kSXMUggEdlN8B/tLNGtaELx8=
Subject key identifier:   09:E3:CD:A9:D4:C2:84:E0:FF:C4:15:2D:D0:BF:E5:15:1D:AF:CF:EF
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F432858484D7599747C175094664094C0
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/8c9678da-ff6f-3402-bd9d-abe8df8ec5b1.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     393740
IP address blocks:        206.180.148.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:99:74:7c:17:50:94:66:40:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=ad6739cb-356b-471e-9151-47513dbf3041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a4:c2:a2:48:e1:3a:ac:28:85:4d:c9:23:66:
                    66:8d:de:17:3f:80:03:d8:44:d9:ea:9a:9a:58:3a:
                    8b:f5:20:85:a4:32:2a:f6:70:67:37:15:d9:ba:ca:
                    f7:44:d1:88:de:fd:f4:53:e7:a3:fd:7f:84:ce:d0:
                    36:ed:53:a0:15:e8:91:29:ae:ed:f0:78:5c:78:e0:
                    6e:29:3a:a1:13:6b:54:4a:52:4b:ff:76:88:43:fa:
                    9a:ca:e1:88:1a:68:fd:4c:b3:46:7c:58:7e:64:bd:
                    0e:c0:91:15:f8:83:79:10:96:ca:43:c4:d6:c3:94:
                    e7:e8:4c:c7:04:4b:75:9d:47:16:2d:b5:83:3b:d4:
                    0f:ed:ae:57:08:ab:29:ed:e3:0a:27:78:eb:df:6d:
                    42:02:51:da:18:66:23:2b:a4:98:c8:c3:4c:0f:02:
                    9f:9a:53:64:cb:dd:e3:92:71:d4:97:92:78:fa:ee:
                    34:67:07:98:04:5e:2b:37:8e:6f:4c:02:00:9a:cb:
                    f3:88:ff:7c:b2:e5:50:a5:52:0d:74:60:c9:88:98:
                    30:54:f6:8e:09:b7:3d:93:10:80:3b:3d:44:68:a3:
                    25:2a:83:40:4c:ec:16:5f:53:7a:d1:0e:ef:66:97:
                    33:59:71:7a:aa:a7:82:85:c0:15:32:c1:e5:fb:32:
                    b0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E3:CD:A9:D4:C2:84:E0:FF:C4:15:2D:D0:BF:E5:15:1D:AF:CF:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/8c9678da-ff6f-3402-bd9d-abe8df8ec5b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:2a:8a:29:c5:a9:e0:d5:63:5f:8b:39:25:17:fd:0a:02:55:
         c8:99:d0:e1:19:39:0a:62:b2:69:f2:5b:fd:ff:42:4b:d4:5e:
         ab:55:2d:74:02:72:5e:69:db:c0:6a:e2:5f:51:2d:e9:d3:58:
         78:9e:d1:61:b7:00:2b:22:64:f6:88:8d:1d:7b:86:b2:d1:07:
         e7:75:2b:6a:13:68:32:24:2e:52:37:c4:e5:0b:2b:a8:ea:85:
         6d:4d:c5:52:da:7a:df:0e:8b:07:73:a9:48:b9:98:49:f4:b5:
         ee:07:be:a4:cb:16:26:fb:38:df:56:8e:22:92:68:79:a4:de:
         d5:9a:6d:5d:94:82:21:fa:cc:ba:27:fc:37:2c:d9:62:db:5d:
         32:7f:8e:10:ba:7b:4e:92:16:89:2a:e3:c9:05:ee:9d:c7:f3:
         2b:2a:75:a9:fd:36:6a:75:66:c2:a4:b9:d1:f7:45:2f:94:2c:
         f5:98:d8:78:a9:75:99:08:8e:ce:ae:38:65:b3:0a:18:5d:ac:
         52:34:2e:98:7b:4d:9d:88:5d:69:e9:8a:d7:e6:6f:82:ae:6f:
         34:99:c7:6a:e8:20:46:82:a8:15:d4:d0:6c:d5:f9:bc:30:a2:
         f5:da:c9:03:63:14:34:aa:3b:c2:74:ba:c9:8d:6d:57:f3:0c:
         c9:a5:20:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----