Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fef57df1-ca99-3aa1-8433-5a85b97880d2.roa
File:                     fef57df1-ca99-3aa1-8433-5a85b97880d2.roa (raw, json)
Hash identifier:          dngf4MLJSB23gRYYrIgQXUt7ZhD8H5dC6t0NKli4FOY=
Subject key identifier:   5F:93:90:92:80:09:E8:97:85:13:8A:2D:C9:24:67:4D:52:0E:AC:C7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848302543BE73F33100A18F3F00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fef57df1-ca99-3aa1-8433-5a85b97880d2.roa
Signing time:             Fri 13 Dec 2024 02:00:39 +0000
ROA not before:           Fri 13 Dec 2024 02:00:39 +0000
ROA not after:            Thu 13 Mar 2025 01:00:39 +0000
asID:                     18779
IP address blocks:        69.46.64.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:30:25:43:be:73:f3:31:00:a1:8f:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Dec 13 02:00:39 2024 GMT
            Not After : Mar 13 01:00:39 2025 GMT
        Subject: CN=1afeff6e-b553-405c-9c1d-a9d1607e3166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:45:0a:34:26:70:88:39:24:fc:fe:35:17:4a:
                    40:aa:c6:0b:f2:de:99:f7:a7:af:b2:9a:2c:5b:6c:
                    81:e5:a3:21:1e:59:eb:57:d0:03:d9:4b:7f:c2:13:
                    2d:d0:4e:44:8f:bf:f5:9b:e8:63:2e:a5:34:d3:f0:
                    82:0e:ca:d0:26:a7:02:b5:26:b0:5d:00:85:60:ee:
                    72:e3:9d:67:a1:2b:e8:57:14:2a:f6:22:1c:93:0c:
                    6e:84:53:06:3f:aa:ce:12:2f:0c:05:cc:41:a0:0f:
                    47:87:6c:83:c4:3d:4b:19:5c:6f:bd:67:b6:7b:2b:
                    7f:25:13:45:c4:bb:d9:a2:b8:8c:c5:c4:37:d4:7a:
                    bb:04:5b:cd:55:9a:80:09:3a:2a:8d:56:61:26:94:
                    23:5f:47:90:2c:db:a5:3e:41:29:57:fe:f9:de:02:
                    20:2f:20:a0:e7:fc:16:81:ca:98:18:01:85:09:f0:
                    9d:40:3c:e1:20:d3:c6:f0:92:d0:7d:8a:91:99:85:
                    81:13:71:f6:71:ee:9d:d7:bb:38:99:a8:0a:42:de:
                    f9:22:0f:b0:f6:ed:40:ca:54:12:46:f7:b2:20:71:
                    56:fd:41:6d:cb:cc:8d:ef:dc:ac:a5:e5:c1:e0:c0:
                    a1:19:db:a3:13:28:71:d5:fe:79:62:bf:36:2b:b4:
                    ff:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:93:90:92:80:09:E8:97:85:13:8A:2D:C9:24:67:4D:52:0E:AC:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fef57df1-ca99-3aa1-8433-5a85b97880d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.46.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:05:a7:8a:b3:f6:dc:cd:7a:74:79:85:5b:8c:8f:a3:d8:ae:
         1a:7f:1a:ed:6d:b6:30:1c:20:96:29:45:1d:a0:75:09:6d:6b:
         c3:8c:33:65:29:b5:b6:8a:e7:58:9e:21:e3:47:78:51:59:64:
         d2:73:a7:68:dd:ef:81:9c:d8:ac:af:40:c9:8f:84:f7:9b:0c:
         51:ef:45:65:58:e4:ec:e4:b6:aa:e3:56:15:6f:89:a2:54:72:
         68:06:b7:e1:39:18:79:2d:3d:05:c8:4e:35:ca:71:3a:1a:41:
         c9:5a:33:d3:46:12:c6:05:cb:79:1a:cc:28:89:79:41:2b:8e:
         32:9f:29:92:88:9a:0b:df:8b:22:60:86:0d:7e:e6:45:ee:6d:
         ab:d0:e6:61:57:31:e9:ac:3b:d8:66:53:b8:69:27:19:c3:ec:
         58:41:42:8e:76:99:32:aa:ad:8c:e0:07:65:13:c3:35:01:20:
         66:df:ea:40:0d:dd:7b:7e:5b:7b:00:03:9b:3f:11:1d:17:96:
         78:51:40:5a:1b:92:74:1a:10:a0:7b:d1:1c:94:de:9a:6d:e4:
         dc:55:95:86:f6:b7:27:c3:ab:11:9d:d1:82:2d:ca:9f:6a:ff:
         aa:a2:db:28:e8:74:1f:ac:31:5c:b1:d1:ff:77:97:86:97:49:
         93:97:0d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----