Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9cedfa24-283b-371a-b17b-5296323f76c0.roa
File:                     9cedfa24-283b-371a-b17b-5296323f76c0.roa (raw, json)
Hash identifier:          zbVRIRZRn4WVXWCF4eRLcGYN7OAiJLn5QtZNG+Tuo3c=
Subject key identifier:   CF:EC:2B:84:31:81:F4:E4:68:BB:D1:B9:3D:63:8F:88:CB:7C:1E:C2
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285847F84F840BA4F2ED0434F30200
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9cedfa24-283b-371a-b17b-5296323f76c0.roa
Signing time:             Sat 23 Nov 2024 02:00:28 +0000
ROA not before:           Sat 23 Nov 2024 02:00:28 +0000
ROA not after:            Fri 21 Feb 2025 02:00:28 +0000
asID:                     64267
IP address blocks:        199.34.84.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f8:4f:84:0b:a4:f2:ed:04:34:f3:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov 23 02:00:28 2024 GMT
            Not After : Feb 21 02:00:28 2025 GMT
        Subject: CN=ce90c74c-86f1-406d-95e5-e750717b67df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fe:c4:65:b3:91:7d:a5:23:25:64:c3:a1:f1:
                    27:47:01:f6:87:48:d5:7d:1d:f3:50:e0:43:d4:66:
                    cd:39:64:09:b1:23:2c:1b:52:3b:42:2e:cb:09:73:
                    7e:0b:44:9e:2f:15:e5:e2:ee:ee:e7:a6:3a:fa:16:
                    93:e1:02:f7:d9:db:56:89:54:c3:b8:92:59:db:6f:
                    46:6b:9a:8e:4d:4b:18:9a:dd:e9:95:fe:bf:ab:90:
                    0b:5b:42:25:60:d7:25:fe:93:c8:84:08:32:c2:40:
                    bd:ee:2b:54:72:cb:c6:6e:e3:a5:fe:ca:02:d6:d1:
                    9c:af:f5:93:10:c0:b8:9e:79:a2:93:b1:6d:f0:4f:
                    42:fc:00:c7:cf:14:12:db:d4:0b:b8:6f:ee:b8:c9:
                    c8:a4:57:19:d5:8d:af:38:30:44:58:4f:5d:68:cb:
                    7c:62:d9:da:8a:03:bb:7d:d3:e9:99:24:f8:52:af:
                    9a:92:4d:bf:6b:93:f2:ba:08:e5:86:c2:9e:fa:c8:
                    c2:33:e6:1c:e3:87:24:2c:af:a5:b0:24:27:b5:4b:
                    0b:f0:a9:71:25:b3:68:67:9f:a9:39:46:f1:88:91:
                    2c:ab:2d:a1:09:a1:c9:90:b2:53:a6:d2:66:40:13:
                    e7:d2:b8:61:a5:25:b5:e7:37:16:8b:ea:e0:9d:fe:
                    0d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:EC:2B:84:31:81:F4:E4:68:BB:D1:B9:3D:63:8F:88:CB:7C:1E:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9cedfa24-283b-371a-b17b-5296323f76c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:c3:69:57:6a:f9:8a:01:37:4e:d7:a6:7f:50:03:2a:bf:e9:
         ad:2c:b3:db:6d:d2:d2:fd:82:5a:87:01:99:45:52:cd:be:8b:
         72:74:72:c1:42:7e:c7:8c:74:97:1c:38:ca:97:e4:29:0f:fd:
         29:cf:c2:e4:57:ab:97:2e:28:88:c0:1e:df:a1:90:cb:cf:55:
         14:16:13:2f:b9:b3:8e:be:92:67:64:93:3e:61:72:e6:3e:97:
         bc:43:2a:97:b6:b9:c8:20:63:93:0b:2c:df:2d:50:a4:72:fa:
         68:01:f5:1f:df:95:e8:93:34:1b:53:45:f9:6c:a1:35:bb:0b:
         af:b7:8f:23:53:c1:01:95:13:ca:ca:37:f1:e4:23:4c:62:ac:
         fe:67:fc:ba:07:6a:97:87:eb:3d:05:df:0c:19:cd:01:aa:31:
         86:c7:cf:d2:04:ba:29:ef:d2:1c:b7:76:b6:7f:79:15:f0:f5:
         14:0b:ad:0f:7d:37:23:cf:b6:bd:a1:0e:2b:b5:bf:95:22:d0:
         97:8d:af:e9:01:a2:ad:dd:ec:53:a2:6c:81:31:2c:93:77:15:
         a8:4c:5d:66:63:ff:96:4d:49:b3:bd:09:cb:84:da:d4:e2:2e:
         03:14:98:ef:aa:5c:88:04:cb:4a:7c:bd:a9:3f:23:ef:b5:7c:
         a9:8e:18:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----