Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/daea1d32-9330-32a9-8559-afb521212b02.roa
File:                     daea1d32-9330-32a9-8559-afb521212b02.roa (raw, json)
Hash identifier:          dZfqZpA8IgW3ZtMVuaG6kNSOEVEpOBoVJtNCFCW7zRU=
Subject key identifier:   5A:15:E5:37:53:3A:1E:6B:85:E2:27:8D:2A:45:18:07:C9:E3:F3:77
Certificate issuer:       /CN=dafe2535-2dc5-4d47-b03e-d44eea26032f
Certificate serial:       010D0C9F4328584827C52E7FED3741AF0E343C80
Authority key identifier: 37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/daea1d32-9330-32a9-8559-afb521212b02.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     3257
IP address blocks:        76.10.240.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:2e:7f:ed:37:41:af:0e:34:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dafe2535-2dc5-4d47-b03e-d44eea26032f
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=ca0e9f37-0b11-4e5a-9ce3-fe6e544793ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:31:ac:f5:ee:a4:23:59:42:a8:bd:44:93:aa:
                    98:04:e5:ba:79:06:08:98:42:57:b5:d7:52:24:e9:
                    1d:ab:2a:8f:69:d9:de:b3:8c:d1:ab:dc:f4:e3:fa:
                    aa:c0:33:b7:3f:9c:79:35:2f:55:1a:bf:9a:58:ec:
                    76:ae:dc:f2:8c:e4:cf:86:19:c0:3a:1d:dc:88:6e:
                    9c:e7:47:e5:ed:f7:36:58:40:d2:ba:57:62:2d:b5:
                    14:54:79:84:c9:5f:d5:dd:c3:ea:f0:7a:ce:81:9a:
                    35:0f:98:a8:51:7d:a2:a8:76:3b:8c:74:35:73:0b:
                    78:e2:dd:a8:f0:23:43:24:4e:a1:94:f9:a3:ad:1a:
                    12:4a:0c:ab:15:e6:43:6b:54:79:72:2f:f8:9e:71:
                    10:e5:d3:68:00:f6:d8:71:fe:af:4a:94:95:b5:7f:
                    dc:bd:04:f7:55:09:fa:58:19:53:d8:2f:91:ce:20:
                    df:da:df:bf:b5:f4:ec:b8:f6:d6:1f:67:26:ff:0a:
                    89:57:aa:f6:a2:75:0a:9a:41:30:1c:6c:d2:96:04:
                    16:76:8f:70:fb:f5:94:28:ce:bf:de:d4:25:c8:07:
                    d4:61:d9:62:88:14:d3:19:88:65:cb:11:17:a5:0e:
                    60:09:cf:1d:0f:3c:dd:09:51:b2:73:86:13:d1:ce:
                    44:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:15:E5:37:53:3A:1E:6B:85:E2:27:8D:2A:45:18:07:C9:E3:F3:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/daea1d32-9330-32a9-8559-afb521212b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl

            X509v3 Authority Key Identifier:
                keyid:37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.10.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:6b:f6:55:ee:b8:cc:49:0f:a5:4d:a6:64:59:5d:31:b2:d8:
         21:0f:d7:42:0d:c8:68:dc:a8:86:19:b1:9f:57:90:5d:9f:50:
         79:e9:11:0e:52:d5:8c:53:34:4d:a0:a6:1b:5e:09:9d:14:ca:
         1c:7d:8b:2c:4d:16:a7:fa:18:dc:25:b6:fe:25:7d:ba:5e:c1:
         5c:19:65:ef:bd:3b:6a:2f:26:87:26:9f:d5:d7:9d:6b:61:63:
         62:9a:e5:f6:82:a9:e7:40:c9:8d:71:4f:73:7e:b2:6b:d4:7c:
         06:85:37:40:57:52:84:ed:ae:b0:da:5a:3f:ce:39:5d:c7:4e:
         39:7e:10:3c:32:c6:3a:28:69:4a:98:e9:21:32:9e:b0:16:cc:
         b7:b7:0f:0b:72:a6:a0:c2:6e:71:0a:72:ef:bd:6e:50:73:30:
         8b:59:7c:55:b2:83:54:df:72:8b:a2:bf:21:79:65:b7:c6:d0:
         62:c6:27:88:97:8d:c2:45:55:f9:fa:18:e0:08:ae:55:b0:fc:
         7a:82:14:73:74:97:73:91:e8:b3:1a:cc:be:a0:f6:a7:f8:b3:
         4d:1b:9f:0a:67:40:04:a8:fb:2d:b3:81:54:47:8d:41:49:99:
         f1:d5:6f:b0:01:5c:b2:fb:f6:66:84:ca:7d:29:03:f1:03:48:
         9f:64:67:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----