Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/49f9b932-1abd-38ce-9d39-5cb2a6642d81.roa
File:                     49f9b932-1abd-38ce-9d39-5cb2a6642d81.roa (raw, json)
Hash identifier:          /IyOvhLWQX0UBxDtOX9I7SBztquIGkN20SmBgGVCQWM=
Subject key identifier:   2E:D7:F6:A1:02:20:3F:47:DF:A4:6E:26:EC:D2:08:77:E2:C3:0B:0C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848388562446D2F762224890B80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/49f9b932-1abd-38ce-9d39-5cb2a6642d81.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     15731
IP address blocks:        104.165.128.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:62:44:6d:2f:76:22:24:89:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=46bc20b9-290e-4b8f-b3d5-d63b5b4972ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ef:95:74:ee:11:d2:ff:79:46:5d:af:f3:8f:
                    59:2f:32:19:69:b5:10:1e:6f:12:7d:ec:4c:58:59:
                    d8:70:a8:6b:31:59:01:02:bb:54:29:dc:ce:b2:f4:
                    97:16:0f:d9:56:9e:30:ca:17:9b:c6:fa:10:1c:7c:
                    3e:52:17:16:e8:ec:f8:a0:fd:19:dc:b7:d2:db:56:
                    2a:9c:f8:f6:7b:a6:21:a7:7c:bb:7a:47:87:09:a2:
                    2c:fe:60:42:23:ac:1a:cd:65:10:f9:30:0c:56:9a:
                    b3:bc:3c:67:de:1a:08:8d:48:4d:60:32:d5:66:86:
                    3b:84:b0:54:ab:88:2e:40:dd:71:eb:10:3a:74:b5:
                    50:1e:34:2d:53:f3:66:fe:32:6d:f1:59:7a:65:e2:
                    f4:37:8b:e2:80:39:e9:7e:16:9e:c7:1a:f2:99:84:
                    26:55:3b:ae:9b:f0:4d:93:6f:5e:ad:78:fa:35:84:
                    98:ff:5c:e0:08:64:f8:bc:bd:06:69:1b:3c:9c:9f:
                    7a:46:13:70:7e:92:7e:7a:94:d6:19:00:ae:a8:8a:
                    5a:04:91:30:d5:0e:ef:0d:a4:4d:05:bf:57:5c:b4:
                    9d:a0:a2:14:8d:ca:46:c6:49:20:43:1e:67:36:f3:
                    07:93:d1:52:21:f1:8e:90:be:de:8f:a9:da:0d:38:
                    17:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D7:F6:A1:02:20:3F:47:DF:A4:6E:26:EC:D2:08:77:E2:C3:0B:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/49f9b932-1abd-38ce-9d39-5cb2a6642d81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:eb:6e:92:c2:12:a6:d9:12:f8:d6:a0:17:79:fb:c1:93:64:
         3a:29:b7:48:a8:11:9a:0a:64:02:dd:ee:33:a2:2a:c4:32:61:
         9f:a5:c3:16:e2:4e:03:35:81:71:5c:79:98:44:1c:cf:4b:c0:
         ca:61:ff:4c:91:90:18:6b:34:13:e3:46:34:7b:a2:29:e6:f0:
         34:5c:ca:bf:b2:67:32:77:83:aa:d8:31:1c:bd:f5:df:d5:ed:
         50:29:3a:df:40:df:f6:a8:a9:ea:7e:aa:ae:b0:c1:63:21:c2:
         19:66:a6:95:ec:15:03:3f:71:f5:d3:6e:c6:55:b9:1f:de:3f:
         0a:b7:b8:73:de:8a:85:80:4d:15:d9:99:c1:d5:45:f6:89:6c:
         46:de:38:91:dc:c5:0f:0d:ac:77:8e:35:2e:a2:fd:41:78:43:
         45:20:f7:2e:2a:00:48:9a:fe:1c:66:72:11:b0:08:e0:86:08:
         ac:a3:ec:7f:e8:5c:60:05:dd:71:bf:9b:52:df:99:ac:6b:f3:
         d6:ba:01:3f:09:fb:42:ef:70:48:45:e8:31:b4:0e:bc:e8:a4:
         59:83:ed:88:69:1d:01:13:eb:d7:c9:4f:0f:cf:a4:64:a4:71:
         10:5f:02:24:95:4d:b0:57:55:51:2d:9a:d5:d8:02:81:de:1e:
         9f:67:01:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----