Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/972e9aee-97d3-353e-af15-6611922c59ec.roa
File:                     972e9aee-97d3-353e-af15-6611922c59ec.roa (raw, json)
Hash identifier:          GNrLrHILRTZJ1UNG6onTeXPzxepLGsyvFS/Hbph/nl0=
Subject key identifier:   EC:5E:87:7A:00:08:56:43:51:A9:29:22:34:E9:93:DE:58:A3:2C:FA
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A80CE4AC26DDE48FB2820
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/972e9aee-97d3-353e-af15-6611922c59ec.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     19115
IP address blocks:        98.8.240.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:80:ce:4a:c2:6d:de:48:fb:28:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=17597050-ebfe-49c1-a56e-5ed31adff030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c3:67:f4:88:7c:fc:fd:dc:69:a2:87:4f:f2:
                    71:4f:4d:7b:c5:01:93:e7:95:1a:74:81:48:49:2a:
                    6f:d4:6a:c2:61:0b:0a:bc:e5:0e:a1:de:9a:6d:00:
                    b9:1f:e4:98:60:f9:1b:39:76:9f:4d:b8:36:d1:0c:
                    f4:a0:a1:13:a9:df:9f:77:be:d5:60:0c:bf:ca:6b:
                    e4:d3:80:53:cb:71:97:41:2f:28:ce:b6:5d:68:b8:
                    0a:0b:02:00:a9:7b:b8:20:21:0a:37:e0:99:d0:98:
                    bb:b6:8a:46:e5:bf:f3:01:08:6f:2c:95:a1:a7:cc:
                    28:92:0f:0b:a6:f4:be:56:ae:2b:99:bb:49:ab:c4:
                    88:80:d0:86:9b:82:c9:86:dc:7e:d8:ed:ec:73:04:
                    ca:8d:d9:eb:de:39:bf:3c:c0:b0:d4:58:4f:cb:52:
                    d8:3c:f3:4a:64:5a:1a:73:2b:b8:21:46:29:f8:e1:
                    b9:a9:bc:ef:55:21:7a:8e:2d:fa:4a:85:a7:72:32:
                    e4:3e:3d:a8:66:4f:19:5c:8f:89:6a:0e:3b:47:04:
                    7a:b7:cf:90:97:0f:9c:41:37:b6:32:c5:bb:4a:cf:
                    4b:2f:e5:fa:09:94:fe:d4:29:ec:0a:f1:36:04:ef:
                    12:bd:02:9f:ff:8e:3a:b5:f8:55:b5:66:57:98:36:
                    50:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5E:87:7A:00:08:56:43:51:A9:29:22:34:E9:93:DE:58:A3:2C:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/972e9aee-97d3-353e-af15-6611922c59ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.8.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:bb:51:52:38:cb:56:14:ac:f8:09:c1:f6:e2:09:8c:9f:8b:
         f2:87:92:ce:71:00:77:24:2d:15:3a:a8:d3:4b:e6:49:76:b8:
         e4:da:f3:13:4f:c6:d0:15:39:ca:57:00:72:66:13:bf:1b:54:
         27:50:31:47:b9:bc:2f:34:f0:55:9c:80:e2:b8:87:f6:ee:02:
         90:38:81:34:35:64:aa:be:db:f2:a4:5e:4f:5c:76:b8:83:c7:
         13:41:d1:df:c5:7c:96:60:c3:80:4d:af:71:6b:9a:d9:02:11:
         8d:bd:52:4d:a6:47:f8:cb:e6:7c:71:de:10:4c:96:01:39:24:
         0b:49:a3:5f:6b:2f:0d:04:fb:c8:4b:ed:9f:b7:c3:ec:cd:96:
         06:91:09:49:a7:67:25:0d:37:ba:8d:58:87:09:e8:5e:08:b7:
         9e:28:72:b8:dc:e8:01:9a:9d:e7:31:75:e7:fb:e4:8b:f9:d0:
         fd:01:1a:17:d3:f6:40:ac:6d:f0:8c:26:39:96:bb:7b:20:d0:
         ce:33:ae:7e:eb:0b:7d:9f:2f:bc:bf:b6:2b:53:d7:d3:d2:44:
         6f:f4:09:52:7e:1f:f1:3e:79:1c:5a:d5:a6:e8:d8:8d:b3:cd:
         d8:a4:c8:7f:0d:88:0b:b6:bc:ee:24:1b:23:aa:ca:6b:f8:78:
         a7:65:fe:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----