Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/19fc845d-ff80-32da-bea0-6b88f0bdc0b2.roa
File:                     19fc845d-ff80-32da-bea0-6b88f0bdc0b2.roa (raw, json)
Hash identifier:          Ge8ZQ77NUlw5900AKePa5OHT28MBDJrUyMJVP2VgdE4=
Subject key identifier:   3D:93:E0:DF:0F:88:C8:8A:DB:E1:E6:83:43:A3:BD:20:E4:F7:D4:4B
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F432858487FB5E4C75A39F8A1FB144780
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/19fc845d-ff80-32da-bea0-6b88f0bdc0b2.roa
Signing time:             Fri 10 Jan 2025 14:00:51 +0000
ROA not before:           Fri 10 Jan 2025 14:00:51 +0000
ROA not after:            Thu 10 Apr 2025 13:00:51 +0000
asID:                     5650
IP address blocks:        74.91.49.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:b5:e4:c7:5a:39:f8:a1:fb:14:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Jan 10 14:00:51 2025 GMT
            Not After : Apr 10 13:00:51 2025 GMT
        Subject: CN=bd7d7949-a9b0-4221-ad20-021acc18a17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c6:bb:06:a8:34:ac:23:9d:0d:85:3f:db:0b:
                    11:e0:f5:6b:67:9f:01:fc:ef:8c:63:ac:40:85:d0:
                    a2:f7:d4:79:db:1b:ff:22:07:56:1c:a3:63:47:b8:
                    3d:0f:0d:35:d0:65:22:5c:e6:db:c5:3c:88:70:25:
                    52:40:cf:f2:5a:69:73:79:d8:27:c3:39:70:68:49:
                    fa:49:bc:03:58:00:19:c1:77:fc:18:58:54:da:93:
                    56:ae:db:85:f3:3c:03:db:81:82:04:27:ff:14:d2:
                    c6:ba:d6:e0:44:f0:80:16:d3:f5:41:16:ae:53:e1:
                    f3:94:d6:a9:f7:ff:65:8f:98:8b:1d:b5:01:cf:35:
                    dd:98:10:72:69:14:67:90:f3:e8:71:17:98:1e:08:
                    8e:44:96:3e:54:5e:94:99:90:92:04:41:94:82:b6:
                    46:35:2b:8e:12:7e:b5:23:cd:a6:e3:e0:25:34:13:
                    fd:e9:28:65:5d:c4:91:3d:5e:58:3c:e7:d7:10:2a:
                    26:f6:e5:12:9e:d7:ed:6a:3c:27:2d:c6:ef:5f:f8:
                    9a:92:b9:b4:a2:e4:b0:d0:b9:9f:b5:ca:bb:9a:04:
                    16:a3:a3:79:5d:d8:c2:90:13:db:49:ee:77:ae:ae:
                    48:46:42:96:e8:d9:bf:48:3e:f1:1a:f2:9e:76:50:
                    c1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:93:E0:DF:0F:88:C8:8A:DB:E1:E6:83:43:A3:BD:20:E4:F7:D4:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/19fc845d-ff80-32da-bea0-6b88f0bdc0b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.91.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:b3:ee:cf:0a:78:16:56:cc:52:5b:61:ef:cc:05:b2:f2:95:
         50:c8:48:5c:7e:59:a8:fc:6f:66:b8:05:8c:39:9d:4e:7e:ed:
         f8:8e:ca:a6:17:6d:09:83:cb:d3:42:4f:d8:fa:98:c8:0f:37:
         00:41:f4:b5:22:97:9c:4d:b5:92:a4:ff:c7:2d:38:81:ee:a2:
         0c:3c:56:d4:4f:e8:df:d0:88:ca:b8:0b:8f:c6:81:5a:89:46:
         23:cb:dc:25:5f:9e:7b:35:da:c8:cd:d6:0d:d1:33:4c:9c:8b:
         5b:c2:32:a2:09:96:cc:14:75:1d:c9:57:d1:91:d7:8c:aa:b1:
         b5:69:5e:08:43:9f:c7:43:4b:8e:17:44:e0:8d:64:7d:e2:d6:
         89:01:9c:0c:6c:b0:e4:51:b7:c3:c8:f3:5b:7a:7d:a5:6b:95:
         75:4e:9d:21:18:cf:01:68:4b:b5:a3:d8:78:04:e6:8a:1e:c9:
         28:1d:e5:7b:bf:89:f5:ee:a9:87:42:c1:a0:f3:0f:35:df:db:
         61:d0:ef:c9:25:d2:ee:64:1d:51:70:b0:2f:76:23:eb:1b:a9:
         04:48:f0:91:9c:65:ae:e3:71:65:09:af:b0:ed:85:08:05:c2:
         ec:82:66:7b:06:aa:74:87:46:11:eb:f4:c4:b4:18:00:94:96:
         65:e7:93:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----