Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/31ea5e48-31b1-303a-9005-188379a2a655.roa
File:                     31ea5e48-31b1-303a-9005-188379a2a655.roa (raw, json)
Hash identifier:          EbRzREB5S1aROLSFAzW5knwpqznjpQ4cb+Pne8Xu5uY=
Subject key identifier:   7D:AC:23:40:62:C4:98:A7:8B:20:EA:C2:51:83:95:75:AE:7E:9E:01
Certificate issuer:       /CN=ca8f0bbc-8cc4-4514-874a-407f328f3893
Certificate serial:       010D0C9F43285848573ACFCCAEB9AF01278C53E9
Authority key identifier: 4F:36:51:94:5C:EF:74:40:B9:E9:66:B2:64:9B:33:57:70:E7:72:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/31ea5e48-31b1-303a-9005-188379a2a655.roa
Signing time:             Fri 27 Dec 2024 02:00:40 +0000
ROA not before:           Fri 27 Dec 2024 02:00:40 +0000
ROA not after:            Thu 27 Mar 2025 01:00:40 +0000
asID:                     46757
IP address blocks:        199.241.160.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:57:3a:cf:cc:ae:b9:af:01:27:8c:53:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca8f0bbc-8cc4-4514-874a-407f328f3893
        Validity
            Not Before: Dec 27 02:00:40 2024 GMT
            Not After : Mar 27 01:00:40 2025 GMT
        Subject: CN=5044234a-0e4a-46b2-80dd-c8041ddd09e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b1:b6:63:e8:81:02:aa:81:6a:de:97:40:3e:
                    ec:a9:96:12:38:50:46:81:9d:4e:90:37:a1:25:36:
                    a1:0e:08:49:35:1a:45:73:75:7e:d0:14:4a:c2:8c:
                    00:3e:2e:77:8d:ed:94:ac:00:bb:fb:71:a7:a3:ef:
                    fd:f0:72:9a:83:d8:e2:ee:7f:de:c7:01:88:ff:ce:
                    e9:aa:d4:45:81:a6:7b:bf:f5:71:e4:61:f0:4f:c1:
                    a6:8e:ad:b5:fa:10:9f:0b:9e:3c:b1:d8:aa:75:34:
                    da:b1:d9:50:bc:fe:8e:68:3a:d9:a7:e7:ed:5c:aa:
                    60:00:09:9c:4d:a6:e9:7e:2e:04:20:68:4c:ec:d3:
                    f7:42:0b:f4:2d:1d:03:74:e7:46:78:4b:a7:30:8e:
                    ae:bc:4a:6c:77:f1:d0:65:72:90:71:ca:a2:e8:40:
                    0d:f9:48:72:c0:6b:26:be:15:9f:c8:25:1b:4b:9c:
                    6c:48:19:fa:31:a7:d8:b3:47:b8:9f:32:40:a9:0c:
                    00:42:30:43:0e:e0:24:27:85:3b:dc:4d:b4:eb:2f:
                    34:48:58:32:08:06:79:5c:ab:36:68:19:31:05:5f:
                    4a:92:8c:83:ed:5a:17:2b:dd:aa:42:98:40:e9:ee:
                    d9:a7:47:a5:cd:6f:bf:d9:00:a8:fc:36:5c:1b:cf:
                    d5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AC:23:40:62:C4:98:A7:8B:20:EA:C2:51:83:95:75:AE:7E:9E:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/31ea5e48-31b1-303a-9005-188379a2a655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/ca8f0bbc-8cc4-4514-874a-407f328f3893.crl

            X509v3 Authority Key Identifier:
                keyid:4F:36:51:94:5C:EF:74:40:B9:E9:66:B2:64:9B:33:57:70:E7:72:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.241.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:e0:ba:91:e5:52:c6:88:dd:46:20:29:33:04:70:a3:27:68:
         c2:8d:96:1d:f6:cc:73:05:f3:43:08:69:33:97:0d:80:b7:e3:
         fc:38:36:06:31:bb:ea:04:f8:40:3f:b0:c5:94:34:66:fa:c3:
         22:6b:17:89:cf:e8:27:34:41:cd:4b:28:31:fc:44:fe:1a:a4:
         a0:b7:ae:90:04:2f:fd:e0:c9:1a:55:ab:7f:86:1e:bc:82:dc:
         eb:03:d2:54:5d:a9:17:d9:c5:9b:88:34:5b:8c:9a:01:e2:92:
         2e:f2:e1:4b:ce:ce:7d:b8:e7:d9:d2:e3:d5:78:4f:34:35:b9:
         6a:a7:59:f1:ae:7d:70:63:7f:d6:82:e0:e6:a5:d9:19:4c:4d:
         5b:30:10:e8:c3:b9:df:68:de:ec:0a:28:9a:4e:bb:43:43:3c:
         95:5a:c8:90:f1:34:8c:cf:64:e2:35:fb:9b:d6:75:fa:e3:a9:
         c5:62:7e:26:37:cf:8f:19:9e:b0:45:db:8f:7c:9d:21:47:b0:
         f0:d5:57:e5:61:c1:78:65:54:b6:fa:c6:26:1f:9c:9a:c9:88:
         5d:83:ca:69:07:e2:cc:33:12:74:91:04:b6:e7:02:71:f9:a6:
         65:44:95:00:d6:03:ce:8e:ec:7e:ce:49:d6:66:2f:5a:10:a9:
         93:ed:2b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----