Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b49b041c-1e21-320b-a1a7-423e0e10a5f1.roa
File:                     b49b041c-1e21-320b-a1a7-423e0e10a5f1.roa (raw, json)
Hash identifier:          F9Z3IgsUzHsXU9YZLouyWRXCAh3MNcQ839wtIWoKRHE=
Subject key identifier:   40:38:58:D1:17:76:DE:09:9B:4E:7A:66:E6:5E:D6:12:16:55:C1:E7
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037A6F793CCE72B421783800
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b49b041c-1e21-320b-a1a7-423e0e10a5f1.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     11351
IP address blocks:        76.58.20.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:6f:79:3c:ce:72:b4:21:78:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=f452755f-a597-4656-aa8b-1aa9b4b5f81a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ff:f2:74:00:9f:b1:d9:14:aa:43:dd:59:d3:
                    c9:ec:4a:80:58:3a:da:30:bf:e6:8c:47:76:7e:d0:
                    a5:1c:23:72:84:f7:94:3e:cf:29:80:dd:b0:b1:d0:
                    95:27:54:16:69:b2:01:b9:6e:d8:df:61:35:a7:12:
                    ae:75:74:4e:49:a7:d9:bc:3f:12:05:8a:d4:86:5f:
                    fb:6c:f7:fb:46:1d:fe:58:25:e3:6f:78:ca:82:41:
                    eb:e7:a5:34:a6:3d:6c:19:b1:b4:d2:a2:63:ef:e1:
                    10:7d:fc:d1:98:56:cc:f0:57:37:2a:81:58:f5:3e:
                    47:e3:7e:78:43:80:3d:27:cf:85:94:9c:00:ec:4e:
                    09:20:29:6e:99:f5:9c:f3:8a:d8:8a:c1:86:b9:1a:
                    ff:80:17:e2:26:8c:ad:ae:eb:ee:96:c5:56:4d:09:
                    ae:a5:19:8c:f2:28:53:cc:a2:d9:2e:b7:97:2a:00:
                    84:58:d8:cf:b4:bb:02:c5:97:71:6f:ae:88:40:69:
                    e9:af:59:98:53:c9:99:50:75:bf:1f:02:5f:1b:e4:
                    29:5a:1d:ae:d7:96:46:29:01:db:73:1c:d3:e3:cd:
                    53:4a:50:8e:4b:08:0e:ed:00:b1:e9:17:f6:9e:08:
                    60:22:7d:47:44:df:b2:14:4a:05:85:1e:cf:f6:91:
                    23:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:38:58:D1:17:76:DE:09:9B:4E:7A:66:E6:5E:D6:12:16:55:C1:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b49b041c-1e21-320b-a1a7-423e0e10a5f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.58.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:e0:71:3a:48:69:7e:c0:ce:9f:46:22:7e:81:a5:39:6e:84:
         b6:b3:f3:3e:7a:7c:ea:8c:23:c2:f2:2a:dc:23:29:9a:cb:73:
         48:2f:1c:e9:6b:2a:1e:0a:60:d6:5e:af:a2:9d:11:16:88:df:
         92:ae:da:ba:c6:d0:0a:a8:e3:63:5f:c8:4e:b2:0b:f4:5c:92:
         1b:a8:98:95:4e:c9:f0:ac:0c:fb:37:b5:b6:01:84:f9:1a:62:
         b6:4f:a4:76:08:b3:97:cc:1b:ac:c1:8a:b2:e3:48:4d:41:6e:
         ec:55:87:0e:b5:20:e9:3a:0c:72:1e:1a:3e:cf:e9:2e:c8:73:
         84:75:8a:09:ca:42:d9:f5:d7:7d:67:1d:8e:ff:ed:87:13:b9:
         1c:59:71:03:94:e5:66:03:ec:7a:70:6b:ce:fb:5d:67:3d:52:
         db:47:fc:1b:72:ea:97:79:5c:95:68:f3:c2:27:33:9e:08:02:
         ef:96:f2:b6:80:72:a5:30:f5:a9:ee:96:46:53:0f:1b:c1:8d:
         2d:66:ce:ea:7c:94:73:70:fd:1d:20:e1:ee:91:e9:9a:dd:25:
         cc:9d:1f:11:0e:3a:ca:a3:fa:65:d8:c9:b5:35:7f:d9:4d:85:
         10:53:a6:ff:ae:3d:39:1a:e5:d9:93:37:5a:37:25:87:af:c0:
         e1:97:91:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----