Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b596de48-c39a-3bef-8e7f-6c5138de76a0.roa
File:                     b596de48-c39a-3bef-8e7f-6c5138de76a0.roa (raw, json)
Hash identifier:          gVRSKaziwbyAKZzlssxTTP+HuGWVwlcM3OVWS+H+idw=
Subject key identifier:   02:51:B9:B2:F4:BB:D0:6D:AB:AC:DB:65:26:FE:58:5D:21:8D:30:C7
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F43285848467ABAA3C0AA71D4A4664800
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b596de48-c39a-3bef-8e7f-6c5138de76a0.roa
Signing time:             Sat 21 Dec 2024 02:00:39 +0000
ROA not before:           Sat 21 Dec 2024 02:00:39 +0000
ROA not after:            Fri 21 Mar 2025 01:00:39 +0000
asID:                     398156
IP address blocks:        168.220.204.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:46:7a:ba:a3:c0:aa:71:d4:a4:66:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Dec 21 02:00:39 2024 GMT
            Not After : Mar 21 01:00:39 2025 GMT
        Subject: CN=0d8a743a-bcd1-4f67-a0fe-b1ecfefa707f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ac:18:76:1e:65:14:2c:26:0c:f6:3e:ee:dd:
                    c1:c9:be:fc:ba:39:cd:b8:26:68:02:c8:58:82:f0:
                    6c:f0:3b:81:70:86:bc:e4:01:03:a2:54:51:c5:8f:
                    46:82:12:18:67:a9:76:a5:be:58:29:9e:fd:46:c5:
                    f5:28:fb:9f:6f:45:e1:f4:01:a1:3e:c7:06:5e:7f:
                    4a:e4:e2:10:f6:2d:0a:1f:d3:a2:32:64:87:24:93:
                    10:46:1b:9d:89:c5:23:0f:e5:ea:10:7d:0e:0c:3f:
                    27:f6:44:b6:55:04:c1:53:c5:aa:68:43:99:e1:31:
                    48:44:93:f9:57:dd:e2:da:69:44:4d:a0:99:d1:77:
                    6d:7a:11:b9:d3:9e:ce:68:be:45:d2:a1:05:77:38:
                    1a:0f:f6:5d:4e:61:c5:e1:66:5a:a8:2e:16:57:c3:
                    d3:3f:e0:dc:b9:e6:f0:7b:d4:8e:0c:1f:fc:9a:a1:
                    38:da:65:01:cd:98:3e:a4:cd:f1:9a:2f:5d:91:57:
                    24:a3:11:a6:1e:14:57:07:99:af:37:5f:dc:25:77:
                    51:13:8b:cc:c9:b9:01:34:b9:19:5f:6a:ac:22:43:
                    ea:25:59:71:f5:23:5e:b3:c4:45:79:df:91:2a:b4:
                    7d:e6:ff:b4:ba:a1:5c:1c:12:de:b2:58:18:f9:a8:
                    21:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:51:B9:B2:F4:BB:D0:6D:AB:AC:DB:65:26:FE:58:5D:21:8D:30:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b596de48-c39a-3bef-8e7f-6c5138de76a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:5f:b3:43:6d:65:d5:33:a2:15:dc:db:40:48:6e:af:e1:84:
         72:c3:0c:4b:50:34:38:16:62:40:01:4a:62:60:2c:4c:7e:ec:
         33:e1:ee:cc:4b:66:ff:a0:47:b1:d0:21:f2:f8:93:1d:bc:64:
         ce:b6:f9:ca:21:11:11:04:36:e3:9c:aa:78:1f:f5:29:9f:b1:
         61:5d:01:19:e1:cd:b9:98:e6:f9:13:3a:f4:05:f3:81:20:2e:
         f9:ae:14:73:a5:91:f8:bd:f2:88:39:83:86:5e:33:1f:dd:e5:
         0f:02:32:6e:e6:4a:12:4e:08:08:46:bd:09:4e:7e:de:a9:38:
         8a:89:dd:c3:f6:e2:68:0f:20:8e:7d:66:de:bb:1b:df:f1:a6:
         f7:96:7b:a1:32:78:9c:20:37:8c:69:8e:ac:3c:29:0f:07:0f:
         60:32:b0:f1:95:26:1e:fd:7d:de:e2:7f:df:b4:8d:75:06:6e:
         d3:52:96:28:ba:7b:bb:5c:c5:3f:aa:f6:86:f3:57:6f:5f:20:
         2b:59:5e:66:5c:51:82:78:c5:22:cc:93:a8:6f:cb:86:96:30:
         c1:3b:61:e7:21:7c:77:bd:26:ee:a4:e0:64:67:40:80:86:19:
         a2:66:f9:62:f5:3b:0e:96:27:9c:5f:12:24:6d:b3:ff:a4:f9:
         78:01:4d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----