Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1076a1c6-adb7-36b8-8879-4cdd0621ef94.roa
File:                     1076a1c6-adb7-36b8-8879-4cdd0621ef94.roa (raw, json)
Hash identifier:          WuRhdgILYsDiAAG32CKSpLsVMOzLDV93ViRe1iev45I=
Subject key identifier:   30:33:DF:1D:D6:69:99:31:83:78:91:E2:ED:1E:6B:CC:28:01:7D:DA
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F43285848324E2661BE43A67520530D40
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1076a1c6-adb7-36b8-8879-4cdd0621ef94.roa
Signing time:             Fri 13 Dec 2024 20:34:46 +0000
ROA not before:           Fri 13 Dec 2024 20:34:46 +0000
ROA not after:            Thu 13 Mar 2025 19:34:46 +0000
asID:                     15164
IP address blocks:        209.71.138.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:4e:26:61:be:43:a6:75:20:53:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Dec 13 20:34:46 2024 GMT
            Not After : Mar 13 19:34:46 2025 GMT
        Subject: CN=53fef73b-e71d-4a2d-9aa6-20545e47792c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:de:1b:9e:52:e4:d0:cc:78:46:d2:c7:17:48:
                    55:13:f4:77:9b:f1:de:7e:d4:43:eb:38:91:a5:e8:
                    a2:7e:3e:9f:83:f8:65:9a:5d:51:f8:4e:72:39:47:
                    7d:81:45:d1:dd:56:b1:32:14:d5:ec:25:69:e9:e3:
                    04:b0:74:fa:cf:e5:e4:ab:3f:77:42:d0:72:61:44:
                    c7:b7:26:6c:bf:ca:30:20:f3:55:1c:c5:02:d1:4c:
                    57:25:a2:af:aa:1c:4f:cd:d2:f3:f5:0b:0c:40:df:
                    7b:84:3f:11:92:63:07:bf:5b:c1:2b:51:bf:de:b7:
                    b4:b7:54:67:c4:84:27:4f:eb:ab:99:74:5e:1a:2f:
                    b4:54:ea:71:48:bb:1e:55:c9:7a:2b:c8:1f:e6:b1:
                    1d:5c:76:a9:83:ef:50:ee:1d:cc:1a:39:8e:e9:a1:
                    e0:b7:a6:9f:b9:93:c1:97:38:dc:5f:89:32:84:9e:
                    e7:ab:5c:98:26:5f:f5:96:89:f9:70:c8:7a:58:90:
                    e1:e1:5c:53:c0:1b:23:2c:32:da:32:21:6c:d6:eb:
                    bf:f5:a5:af:3c:bb:f3:05:79:b0:c1:83:94:6c:77:
                    b5:ee:38:50:f6:88:e7:d7:d1:d9:3d:3b:fb:96:0d:
                    2a:58:9e:f9:85:c5:7a:25:bd:ec:c9:09:fa:25:92:
                    61:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:33:DF:1D:D6:69:99:31:83:78:91:E2:ED:1E:6B:CC:28:01:7D:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1076a1c6-adb7-36b8-8879-4cdd0621ef94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.71.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:37:ab:f9:6e:16:f6:ba:d2:1a:d6:22:7c:a3:7a:f0:fa:d3:
         df:5c:94:4e:bf:02:a3:51:c1:70:70:3b:96:0d:94:7e:92:bf:
         55:c0:e9:56:56:86:18:5e:42:63:86:13:e9:31:57:64:e2:7c:
         db:49:64:ed:ba:bf:cb:e1:43:d0:53:f7:6d:1d:ee:b8:fd:11:
         4e:68:87:71:bc:a1:32:b0:bf:e4:e0:63:c4:8c:d3:83:20:04:
         b4:0d:0a:77:8b:4d:9d:c4:1d:4f:ac:b4:26:32:09:32:37:61:
         61:9d:b7:8c:ff:0a:a7:de:2a:b0:a5:57:13:11:5e:92:91:1c:
         81:ba:57:96:e3:1f:fc:47:65:16:91:c8:f7:7b:2f:91:3b:86:
         c5:b5:97:9b:23:95:d2:1a:86:0b:0a:77:8c:08:02:46:cd:66:
         b7:41:66:53:f0:1e:da:db:c2:bd:e7:ef:af:14:4e:c3:52:f6:
         f1:b6:96:2a:e7:74:f7:b8:cf:ac:32:c0:9f:02:02:ba:21:09:
         06:cf:51:47:2f:c5:f4:95:32:f0:53:da:bb:0f:14:f9:a1:09:
         a4:39:c2:cf:59:d9:86:6e:fb:6d:ca:04:fa:ee:62:0a:e6:ac:
         12:e5:ee:eb:9a:d8:73:d2:4e:de:da:d6:28:bc:e3:6e:2c:ff:
         04:c6:34:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----