Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/d31d8a68-3aae-31fb-8758-9c9ec721c48c.roa
File:                     d31d8a68-3aae-31fb-8758-9c9ec721c48c.roa (raw, json)
Hash identifier:          N/qkxeadICbqi5FJy6/E1wwwLPiesVKbEPD34SQfiG4=
Subject key identifier:   06:83:7D:2B:F9:F8:A7:9C:92:E3:23:FD:F6:DD:D8:44:0E:10:99:23
Certificate issuer:       /CN=19039935-462a-4b14-8e96-78798283eeff
Certificate serial:       010D0C9F432858480515C0E3CC251DF1C5C81C80
Authority key identifier: 30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/d31d8a68-3aae-31fb-8758-9c9ec721c48c.roa
Signing time:             Wed 27 Nov 2024 15:49:46 +0000
ROA not before:           Wed 27 Nov 2024 15:49:46 +0000
ROA not after:            Tue 25 Feb 2025 15:49:46 +0000
asID:                     7018
IP address blocks:        167.253.38.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:05:15:c0:e3:cc:25:1d:f1:c5:c8:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19039935-462a-4b14-8e96-78798283eeff
        Validity
            Not Before: Nov 27 15:49:46 2024 GMT
            Not After : Feb 25 15:49:46 2025 GMT
        Subject: CN=e0446358-aaa6-4629-a24b-f649779aa2c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b9:9d:d2:c1:10:25:84:73:3c:58:54:c3:07:
                    91:fb:5e:c2:02:de:29:2f:09:04:8c:9d:f4:ca:6a:
                    a7:1f:d7:c2:f2:5d:9e:86:d0:10:dd:c7:7e:bb:a9:
                    8f:30:b6:c1:bc:3e:cc:1b:4d:4d:bc:4c:16:1e:1c:
                    35:e2:b1:8f:85:3c:5e:44:0c:27:16:a6:42:a2:fe:
                    99:e5:9b:56:e1:7e:2b:07:53:d9:52:88:a3:af:50:
                    77:8a:04:3d:1a:0e:4c:49:03:a7:ec:a4:f7:48:1e:
                    f8:94:82:0f:72:1d:00:99:fd:0c:d4:2e:5f:6d:35:
                    4e:26:46:3d:ac:e9:04:fd:f8:1c:67:0c:21:40:16:
                    b5:85:9a:6e:d2:df:0d:54:93:44:ce:df:4f:31:7e:
                    f9:0d:d9:a5:f7:aa:11:7c:ac:9c:4d:11:85:2e:18:
                    42:b4:ec:8f:10:11:6e:a4:c3:c2:23:e8:96:eb:83:
                    f5:0e:4f:7d:c4:9d:0e:03:cd:af:71:92:27:79:4a:
                    36:3c:ae:65:c8:77:eb:c5:4b:ad:9c:84:8e:c3:f9:
                    49:5d:f4:7b:a0:19:5c:80:89:15:27:7a:52:af:e3:
                    5c:a5:a3:80:48:04:b2:03:a5:f5:c5:89:f4:66:b5:
                    b4:04:81:8c:f2:90:37:20:07:89:3f:d7:86:cd:fc:
                    ba:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:83:7D:2B:F9:F8:A7:9C:92:E3:23:FD:F6:DD:D8:44:0E:10:99:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/d31d8a68-3aae-31fb-8758-9c9ec721c48c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl

            X509v3 Authority Key Identifier:
                keyid:30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:d9:b5:4a:f4:7d:5b:b7:25:18:36:bb:c8:f1:9b:f4:b4:ba:
         8e:74:46:8c:67:79:62:a5:02:9b:74:7e:53:df:1a:4b:de:93:
         9c:1c:4f:68:41:7c:ed:c5:57:f9:16:28:e9:a3:40:1c:ce:da:
         de:72:18:8e:3b:07:bf:c8:44:d5:9c:8d:c0:0e:29:17:55:7b:
         36:95:d3:35:44:20:e4:e4:67:4f:7c:3c:12:9e:d4:d9:1c:97:
         cf:2f:91:05:2d:7a:b6:26:e6:d8:b7:c8:06:b7:4e:87:0b:94:
         70:c0:4b:be:c2:a1:cb:d6:55:5e:42:8f:74:83:2b:29:6a:39:
         44:26:b8:eb:ac:1e:24:dc:39:92:a0:46:a5:33:19:d0:3d:2e:
         6a:bf:fe:65:91:55:0d:c5:61:16:2d:d9:a6:7e:c6:3a:f8:cd:
         c7:de:e6:33:a7:d7:82:2d:d8:81:ab:c8:84:ab:15:e1:b9:4e:
         c3:4c:ac:70:53:96:8f:49:4c:72:20:61:1a:ca:84:cb:4f:66:
         5d:33:bb:ec:eb:1a:51:53:a9:e4:99:fb:fc:2f:0f:74:06:2c:
         69:39:bd:3b:26:31:0d:bf:13:4b:c8:f0:47:85:f4:6a:21:52:
         4d:80:4a:d9:7f:10:50:de:d1:ad:4a:bc:a5:b5:94:11:ee:e0:
         64:7d:5a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----