Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/e0d79fd4-9174-37dd-ae23-196db87f1499.roa
File:                     e0d79fd4-9174-37dd-ae23-196db87f1499.roa (raw, json)
Hash identifier:          p+b/6BY6ZAgYYAynYwE6FwdMR26zK5RWdH1ah2FhaBo=
Subject key identifier:   49:E1:4D:5C:E2:8D:43:B4:FA:A5:5F:3F:B0:E7:4D:5D:46:E1:54:51
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F4328584800AF7CA1E0DCB740769E7E80
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/e0d79fd4-9174-37dd-ae23-196db87f1499.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     397041
IP address blocks:        209.59.233.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:7c:a1:e0:dc:b7:40:76:9e:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=51bfd717-72c7-46cf-bbd8-485bc66ea4bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9a:7d:a2:b9:7c:af:f5:49:5d:8d:3e:9d:2b:
                    20:8d:c1:0c:08:d8:56:ad:a7:79:de:f7:35:6e:bf:
                    75:76:dc:b9:67:f5:ed:17:e8:09:4f:53:cb:4b:2c:
                    96:c4:13:63:c2:00:5f:a2:16:da:22:1f:33:b4:b2:
                    3f:3a:53:b2:5f:2b:e0:ed:b6:04:63:f0:46:e1:2c:
                    b6:68:88:98:31:64:9c:5e:75:63:69:7c:66:40:79:
                    52:76:51:a1:9d:75:86:06:98:43:fe:7e:ec:5f:6b:
                    ef:a0:8c:7a:c1:a4:99:14:f6:60:42:99:41:84:af:
                    28:1d:7c:ce:cc:7a:27:46:24:34:1b:51:3c:01:f4:
                    c8:46:76:46:61:f5:9b:01:28:8d:21:f3:26:c3:89:
                    69:ab:c8:5f:e5:06:36:9b:25:fd:42:b5:61:00:19:
                    ba:f9:01:eb:d8:ee:28:7b:ff:55:07:9b:83:67:56:
                    8c:e7:f4:73:b3:72:29:c2:ec:6b:91:03:08:1c:ae:
                    9b:d8:06:b0:2c:86:b3:7e:61:0c:98:9b:ae:62:8b:
                    97:74:06:b1:f7:99:4e:cf:d4:d0:56:a8:87:51:7e:
                    d7:f6:cb:60:e9:6f:f1:e0:eb:47:97:41:9d:23:2d:
                    73:d0:53:0c:5b:58:b1:15:a2:58:4c:6d:85:68:bd:
                    70:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E1:4D:5C:E2:8D:43:B4:FA:A5:5F:3F:B0:E7:4D:5D:46:E1:54:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/e0d79fd4-9174-37dd-ae23-196db87f1499.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.59.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:14:36:53:8c:5b:39:5e:53:03:d8:37:be:5d:48:48:20:9d:
         5b:f5:c8:57:f5:a0:9a:63:f1:06:81:02:16:e9:55:d1:bb:4e:
         d6:eb:b4:59:54:6d:e2:06:48:b7:e8:79:c3:d6:c8:3a:d6:19:
         7e:2d:89:3d:bf:e3:67:fc:17:0c:ee:da:4a:cf:51:ec:87:84:
         23:b8:b2:2b:d3:8c:0f:c8:f1:59:56:1c:a3:5e:35:40:02:45:
         86:2c:6f:97:0e:a5:8e:ce:4d:99:e3:28:0f:26:88:aa:4d:df:
         48:ae:1f:05:a1:06:20:33:c3:71:37:f4:52:8c:50:1f:f7:41:
         67:43:97:c8:88:06:05:fa:93:4d:40:58:2f:97:bc:54:0f:22:
         71:3c:66:81:28:36:cd:2e:a3:60:6c:9d:4d:6e:68:13:3a:e5:
         d9:e1:53:91:a2:de:f3:f3:39:32:1d:6c:4b:8d:80:c1:98:28:
         fe:37:1d:e6:d8:c6:d9:d4:8d:b9:a0:fc:05:9e:fd:1d:70:72:
         a3:12:ee:0a:34:71:5d:44:f7:ec:7e:eb:ac:71:b3:7f:b3:cd:
         b3:10:4f:7c:01:87:41:b8:86:46:bc:a7:21:4d:a0:0b:3f:ca:
         1b:19:13:01:64:2a:31:c8:4c:35:71:54:f2:01:7b:51:4c:0f:
         6b:66:32:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgAr3yh4Ny3QHaefoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTJiNzllYzAtZGMzYi00YWUwLWFjOWEtYmU1ZTQ0MGNm
M2JmMB4XDTI0MTEyNjAyMDAyNloXDTI1MDIyNDAyMDAyNlowLzEtMCsGA1UEAxMk
NTFiZmQ3MTctNzJjNy00NmNmLWJiZDgtNDg1YmM2NmVhNGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZp9orl8r/VJXY0+nSsgjcEMCNhWrad53vc1
br91dty5Z/XtF+gJT1PLSyyWxBNjwgBfohbaIh8ztLI/OlOyXyvg7bYEY/BG4Sy2
aIiYMWScXnVjaXxmQHlSdlGhnXWGBphD/n7sX2vvoIx6waSZFPZgQplBhK8oHXzO
zHonRiQ0G1E8AfTIRnZGYfWbASiNIfMmw4lpq8hf5QY2myX9QrVhABm6+QHr2O4o
e/9VB5uDZ1aM5/Rzs3IpwuxrkQMIHK6b2AawLIazfmEMmJuuYouXdAax95lOz9TQ
VqiHUX7X9stg6W/x4OtHl0GdIy1z0FMMW1ixFaJYTG2FaL1wzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEnhTVzijUO0+qVfP7DnTV1G4VRRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMmI3
OWVjMC1kYzNiLTRhZTAtYWM5YS1iZTVlNDQwY2YzYmYvZTBkNzlmZDQtOTE3NC0z
N2RkLWFlMjMtMTk2ZGI4N2YxNDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTJiNzllYzAtZGMzYi00YWUwLWFj
OWEtYmU1ZTQ0MGNmM2JmLzEyYjc5ZWMwLWRjM2ItNGFlMC1hYzlhLWJlNWU0NDBj
ZjNiZi5jcmwwHwYDVR0jBBgwFoAUCSgDghQhqZyoQ+WjADdHhNEkZ1kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xMmI3OWVjMC1kYzNiLTRhZTAtYWM5YS1iZTVl
NDQwY2YzYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TvpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF0UNlOMWzleUwPYN75dSEggnVv1yFf1oJpj8QaBAhbpVdG7TtbrtFlU
beIGSLfoecPWyDrWGX4tiT2/42f8Fwzu2krPUeyHhCO4sivTjA/I8VlWHKNeNUAC
RYYsb5cOpY7OTZnjKA8miKpN30iuHwWhBiAzw3E39FKMUB/3QWdDl8iIBgX6k01A
WC+XvFQPInE8ZoEoNs0uo2BsnU1uaBM65dnhU5Gi3vPzOTIdbEuNgMGYKP43HebY
xtnUjbmg/AWe/R1wcqMS7go0cV1E9+x+66xxs3+zzbMQT3wBh0G4hka8pyFNoAs/
yhsZEwFkKjHITDVxVPIBe1FMD2tmMro=
-----END CERTIFICATE-----