Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a9a02da3-1044-35f4-9095-e40aa350a168.roa
File:                     a9a02da3-1044-35f4-9095-e40aa350a168.roa (raw, json)
Hash identifier:          fzIz+SaegOsGvI3vbP3xTEeP1nnE96qGy6wx76FOoOU=
Subject key identifier:   D0:09:03:87:BE:78:C8:4E:19:DD:8D:B5:BB:8B:3B:23:36:CC:46:BB
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285847E35F73B4F768C181B2E38F80
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a9a02da3-1044-35f4-9095-e40aa350a168.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     11404
IP address blocks:        199.91.229.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:73:b4:f7:68:c1:81:b2:e3:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=ef05427e-eb31-4765-9e9c-d42e83add141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ec:8e:b5:8b:8e:f2:24:33:ef:95:ea:62:cf:
                    e6:83:63:1b:0c:04:ea:18:8f:45:bf:6d:d5:56:ea:
                    9e:5a:d4:1e:c8:8f:b9:f6:99:81:77:fd:8e:bc:91:
                    4c:df:7d:6a:6f:23:54:f2:9b:25:8b:e4:01:c3:c6:
                    dc:e4:b7:7a:73:77:2d:c3:c7:b6:51:a5:d3:51:b2:
                    05:dc:d4:ba:f1:ca:0f:5d:ab:88:3b:5d:de:11:7d:
                    cf:fc:23:2e:f2:94:b0:94:74:a8:f3:9e:15:40:4e:
                    74:54:56:b7:a6:3f:7d:fe:41:68:f1:47:2f:78:3b:
                    a3:2d:bb:15:3f:62:eb:7d:98:a3:28:da:db:e9:22:
                    01:4c:0a:fe:14:5b:05:fb:17:8b:27:ad:56:bf:b0:
                    8d:f8:a3:fb:da:5f:d5:9e:f7:c9:71:15:ab:e5:5d:
                    2a:e0:09:0b:0d:47:e1:97:a0:ff:41:5a:87:29:aa:
                    d4:86:68:c2:28:58:43:68:f3:0c:af:5c:66:eb:86:
                    50:e2:e3:5a:41:96:ff:37:33:46:47:bb:4f:9a:22:
                    85:8d:c6:bd:f3:4f:e0:f4:c1:20:b5:4e:08:42:4c:
                    28:ed:14:cf:41:6f:f2:21:0b:c7:63:3b:e4:18:da:
                    3f:9d:f0:70:5e:87:fd:8b:ac:93:8a:98:8d:d7:12:
                    67:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:09:03:87:BE:78:C8:4E:19:DD:8D:B5:BB:8B:3B:23:36:CC:46:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a9a02da3-1044-35f4-9095-e40aa350a168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:b9:36:cd:b2:66:81:dd:3d:98:ea:c0:1d:11:b4:33:da:dc:
         d4:64:ba:36:92:41:15:07:77:33:d7:c1:cf:6e:ad:2b:36:eb:
         1f:ee:f9:47:d9:4b:a2:eb:4f:19:a5:6f:08:5b:d4:c9:e0:c2:
         90:84:f4:fc:b0:6c:4d:db:ef:d6:47:8a:b5:f5:b3:a7:ac:e1:
         a8:86:7a:cf:0d:f1:3a:6a:dc:c0:4b:94:bf:bc:6c:08:81:a9:
         8c:63:08:88:70:ca:b3:7e:fd:d3:70:b3:29:ae:7f:a4:13:e5:
         3f:2b:b5:cd:61:82:3d:e1:6e:5d:06:95:5c:0b:53:95:e0:d6:
         c6:46:3e:76:d4:02:11:a9:d4:5f:93:bd:0f:ea:96:76:6a:6a:
         71:34:cf:58:7f:cd:ff:f6:9a:37:61:7b:8f:5b:53:62:ef:c4:
         7f:28:4b:69:f9:21:8c:47:83:d9:22:57:58:5b:de:79:2f:f6:
         a0:b2:ce:e6:28:ca:99:6e:9f:60:6c:6f:5e:80:15:6a:10:61:
         e8:b2:5b:45:f2:fd:f7:be:cc:83:0f:5f:16:9d:21:b2:95:2f:
         04:5f:5c:60:5d:3b:86:16:ec:99:f4:83:01:a4:48:ad:91:9c:
         ff:80:8f:6a:76:83:1d:a3:bc:18:c7:fa:76:d7:6e:4c:bf:81:
         dc:bb:01:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----