Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4b4f8ddf-0a28-3269-96af-cf3a10a9dd88.roa
File:                     4b4f8ddf-0a28-3269-96af-cf3a10a9dd88.roa (raw, json)
Hash identifier:          FTabJ1TiXR4tC8dNO1TyaHnkDxKx8OoTb6AwWFetcO0=
Subject key identifier:   8C:DF:DD:C7:B9:C5:11:64:A8:89:6C:63:00:D1:A7:65:B6:AC:33:99
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285847F84F82C88B8779DF0209CA00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4b4f8ddf-0a28-3269-96af-cf3a10a9dd88.roa
Signing time:             Sat 23 Nov 2024 02:00:28 +0000
ROA not before:           Sat 23 Nov 2024 02:00:28 +0000
ROA not after:            Fri 21 Feb 2025 02:00:28 +0000
asID:                     64267
IP address blocks:        192.171.94.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f8:4f:82:c8:8b:87:79:df:02:09:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov 23 02:00:28 2024 GMT
            Not After : Feb 21 02:00:28 2025 GMT
        Subject: CN=1e6ee051-e0f6-4d54-b7e4-04752ab6e42e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e4:58:d1:4f:8f:91:82:b2:54:52:ab:05:88:
                    68:c6:2e:a1:b5:17:c3:f5:e1:02:db:96:e4:f9:ee:
                    ed:90:b8:fd:84:dc:0a:0f:3f:23:06:92:2e:75:b9:
                    4e:2f:99:1e:38:d2:7b:4c:43:3f:44:db:bd:36:f0:
                    8f:f1:19:7b:9b:bd:c1:40:ca:5d:b2:fe:db:ec:d7:
                    65:f7:ed:32:71:b1:e1:da:c7:ca:f2:e4:23:98:86:
                    dd:03:82:f1:d7:a2:c0:53:93:d3:3d:94:97:56:97:
                    db:d9:61:aa:a4:4f:fb:c9:6e:c1:b1:2a:bc:10:58:
                    8d:42:2f:9f:ce:20:f0:09:48:c8:d3:42:dd:96:fa:
                    75:ac:ae:1d:bc:f4:8e:2b:a6:03:53:cf:53:b4:58:
                    a6:f4:d1:14:cc:84:9b:92:2c:da:51:0f:9e:a7:1f:
                    1d:05:7c:c6:63:e4:d5:38:7e:83:9d:ac:da:b7:2a:
                    83:e9:42:4d:d1:8e:92:4e:16:2e:f7:ba:52:46:f7:
                    3d:50:d8:fe:96:17:2b:96:35:b8:e5:ad:74:ca:0d:
                    43:00:a8:9c:e2:9d:5e:e6:16:d5:f5:ad:80:9c:08:
                    ad:f7:f0:ed:d5:f3:bb:81:21:67:0d:b4:d5:53:79:
                    60:8a:30:7a:9c:8f:f2:b7:16:51:a6:1e:40:6f:5e:
                    cc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:DF:DD:C7:B9:C5:11:64:A8:89:6C:63:00:D1:A7:65:B6:AC:33:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4b4f8ddf-0a28-3269-96af-cf3a10a9dd88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.171.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:81:c0:2e:b6:b4:bd:8a:12:d5:b8:94:0f:eb:42:d0:95:09:
         a7:4e:a3:0c:22:ec:6d:25:3f:19:e6:69:51:00:e5:a5:c5:c1:
         b4:c3:8b:97:9e:56:cb:ef:fd:b5:9c:c3:d3:8f:f0:b8:d1:54:
         6e:52:a8:81:f5:bd:e6:46:14:74:cd:71:7f:3c:ee:e7:c9:63:
         80:7e:0b:9e:b9:64:36:50:89:fc:60:54:f2:fb:53:f5:5b:30:
         88:0f:fd:28:1f:9f:25:d4:af:c5:3b:dd:2d:cd:5e:97:e7:41:
         e2:e8:6c:44:c5:d6:3c:a1:59:15:d2:c4:52:46:63:63:18:7d:
         dc:18:15:9a:29:3b:41:26:c9:f9:80:a7:1c:5f:3c:10:a2:43:
         26:3a:5a:ad:ec:42:ce:ea:fa:ae:04:fe:52:61:06:ef:08:65:
         e7:a8:c4:96:80:55:23:d0:a0:24:b4:58:33:9c:94:9e:7a:7c:
         fd:14:27:8b:3e:c3:27:85:0e:b3:ab:ef:4e:fd:a8:e1:1d:49:
         eb:a9:44:d6:07:6c:6a:89:06:32:f6:b5:94:0a:ad:a2:1c:52:
         ca:91:dd:ce:d6:80:b0:a6:ea:5a:31:22:2b:51:bb:29:f7:e7:
         4e:67:49:1c:1f:4f:58:6a:85:03:8a:8d:0f:e5:e4:ab:30:be:
         e6:82:40:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----