Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/875e931c-406d-3c9d-b4d8-40127179412a.roa
File:                     875e931c-406d-3c9d-b4d8-40127179412a.roa (raw, json)
Hash identifier:          tG5aUrQwZ9GUf18D5IuZhYkx3m6UXVR+NTtovVXnTs8=
Subject key identifier:   5B:35:9A:90:55:8E:8B:FA:F4:AA:29:51:1C:3C:B5:CF:F8:CC:20:B0
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F43285848424AD9A1DA780A4C0F76B640
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/875e931c-406d-3c9d-b4d8-40127179412a.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     26744
IP address blocks:        147.124.248.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:d9:a1:da:78:0a:4c:0f:76:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=b262e4a7-5599-45f0-8008-1b660873d553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8b:9c:20:d4:ec:3a:ae:50:78:75:78:1b:c8:
                    02:24:17:a3:77:00:30:88:cb:19:8e:b3:62:c4:f2:
                    3a:6b:a2:be:d7:6d:9e:7b:49:45:f0:ee:f2:f1:02:
                    8c:f0:25:6c:2d:17:51:42:d5:95:a6:2b:74:19:5d:
                    4d:ba:4f:2d:e3:ff:a7:b3:0c:0f:c7:87:91:64:64:
                    1e:84:25:6e:d2:64:e0:69:b9:38:48:10:95:04:47:
                    e6:dc:cd:13:5f:d4:ba:da:bb:f1:ef:b4:a5:cc:0d:
                    61:01:c5:58:e3:dc:36:36:54:7f:87:08:ed:a6:55:
                    42:ff:26:64:84:a9:a5:57:24:ff:3b:4a:f7:58:97:
                    36:b1:d0:68:11:a8:60:60:7f:74:bf:64:ec:89:dc:
                    c4:00:7f:34:f0:0a:b4:84:32:69:4f:4b:bb:56:b7:
                    61:d7:08:3c:5e:09:b1:29:8a:42:d0:47:75:c6:d7:
                    3d:c9:36:a9:b5:de:6e:95:e4:6e:b3:e1:64:1a:9b:
                    d0:81:c2:67:ca:39:07:59:04:d9:b0:d2:b4:1c:13:
                    e5:ad:26:f7:7a:d2:0f:cd:6d:88:29:e5:f2:35:f0:
                    e2:32:7c:d9:c8:ce:6f:1c:43:10:11:33:73:41:c6:
                    36:50:d6:37:5b:a0:44:2f:89:9a:b5:0c:1b:39:03:
                    af:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:35:9A:90:55:8E:8B:FA:F4:AA:29:51:1C:3C:B5:CF:F8:CC:20:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/875e931c-406d-3c9d-b4d8-40127179412a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:be:0a:2d:fa:5b:ae:2d:6f:2a:b5:7b:14:8a:8e:b9:9b:ee:
         11:a1:47:ab:c9:fa:bf:0f:1e:33:ba:28:da:11:56:d0:bc:da:
         57:01:f7:91:1a:d0:4e:1c:71:ec:f2:e7:b7:d0:ea:cd:d7:0c:
         6f:91:c0:cf:8f:7a:31:01:42:97:39:c1:67:4e:95:ff:0d:30:
         3a:df:05:5d:a0:67:3a:67:fe:da:15:0a:c8:4b:d1:26:3a:b4:
         9c:30:a0:f8:d6:29:e4:47:4f:1e:e4:1a:a3:5a:e8:80:71:50:
         89:f7:c8:0d:4d:3f:43:a7:b5:24:92:96:05:0b:3e:c6:e5:98:
         21:d0:a9:d0:07:2b:b1:b5:b0:dd:9e:ec:c1:e4:b1:67:81:a8:
         cc:c6:dc:b9:78:fb:1d:e1:63:73:3b:3b:a1:06:23:2d:2e:db:
         bc:88:31:84:7e:45:8c:39:8b:2c:f8:2d:54:ed:eb:32:42:fb:
         ab:fd:7d:cf:df:5c:03:04:58:f5:5b:ca:f0:75:27:e3:da:53:
         b9:8c:9a:6a:fa:b9:1e:b8:3b:6c:e0:44:cf:7a:51:bb:e8:54:
         7d:dd:c3:5d:d8:2f:22:73:59:1e:e9:14:55:a0:4a:ee:4e:8f:
         f7:c0:11:19:2e:53:14:90:7c:e3:56:a3:48:f9:22:29:9a:b8:
         23:35:d4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----