Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bfba4049-9260-3ea8-abbe-443facb7c8f1.roa
File:                     bfba4049-9260-3ea8-abbe-443facb7c8f1.roa (raw, json)
Hash identifier:          YvihQViOqRQNco4LNDkGV3agBGaRQqCaq2cAv0LzHHA=
Subject key identifier:   C3:1F:40:E1:7B:5F:F1:D6:C0:28:20:C2:A5:D6:6E:ED:67:7C:81:9F
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285847F84F82D95D0675DDF5ECE100
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bfba4049-9260-3ea8-abbe-443facb7c8f1.roa
Signing time:             Sat 23 Nov 2024 02:00:28 +0000
ROA not before:           Sat 23 Nov 2024 02:00:28 +0000
ROA not after:            Fri 21 Feb 2025 02:00:28 +0000
asID:                     64267
IP address blocks:        192.171.95.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f8:4f:82:d9:5d:06:75:dd:f5:ec:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov 23 02:00:28 2024 GMT
            Not After : Feb 21 02:00:28 2025 GMT
        Subject: CN=7c58bea3-ecc5-4ebe-99b6-74d20353a435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a3:df:ab:45:a1:4f:34:95:2e:9d:9c:19:36:
                    b6:34:60:c5:be:bf:3f:a3:de:29:6e:77:3b:1f:16:
                    79:46:4c:a4:3a:47:81:e5:17:83:bc:75:60:68:b5:
                    0a:10:e6:de:f4:f1:ab:9b:54:50:d6:47:01:67:9d:
                    99:6d:cd:96:22:c6:fa:0c:59:01:ca:2b:5c:8c:3a:
                    4b:45:41:c2:21:98:4e:02:65:57:2e:86:cd:5a:e7:
                    40:88:6d:46:54:93:53:23:53:27:e7:1d:de:ce:e4:
                    42:d3:40:60:97:ea:aa:00:b5:8e:f7:c5:b7:18:e3:
                    23:56:2f:5b:5f:03:74:1f:41:e8:bd:38:2c:87:ea:
                    46:83:ae:f2:5d:7f:2f:ad:c8:96:62:2f:0e:18:76:
                    e1:56:c8:e1:14:bb:bf:67:dd:6b:06:4b:9c:48:e9:
                    15:a9:48:6b:e2:fe:a8:c2:2a:93:92:20:d6:3a:3f:
                    51:82:55:92:d3:b9:e9:68:bf:92:17:4a:a7:84:fd:
                    20:28:f4:8c:f6:83:46:2b:f6:66:59:9d:40:85:de:
                    5d:54:b4:f1:a5:c4:0a:ad:da:4f:1f:89:d0:87:31:
                    c0:ce:b3:4c:cd:a4:29:78:c5:03:d7:ce:b1:8d:a8:
                    6b:57:b1:ff:35:4c:b4:11:2f:01:1c:47:f9:a1:f2:
                    57:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1F:40:E1:7B:5F:F1:D6:C0:28:20:C2:A5:D6:6E:ED:67:7C:81:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bfba4049-9260-3ea8-abbe-443facb7c8f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.171.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:14:31:d0:ba:38:40:fe:e4:1e:50:4d:0e:df:f8:5a:c2:1c:
         6e:6f:37:30:d4:95:53:fe:07:7c:24:08:de:2d:96:52:f8:d7:
         a8:df:55:18:c5:b6:ac:ee:cb:6e:4d:97:ea:25:77:ef:fd:8a:
         ce:87:7a:d7:81:1e:19:c6:1c:54:20:1e:a2:d4:18:14:d3:2f:
         c2:7c:0a:66:ff:8b:2c:c5:58:ab:ed:0a:10:bd:48:9d:60:d6:
         b7:3e:c3:8e:43:54:27:fc:f0:ef:1b:8d:99:42:25:50:9c:c4:
         6b:03:0c:11:03:39:a2:69:60:72:69:9b:f6:3b:e4:44:23:78:
         66:36:9c:b0:e6:dd:d4:7c:3e:1e:13:63:75:04:08:c9:5f:48:
         34:f4:00:82:b9:21:a9:98:c4:8c:74:af:89:00:4b:c7:00:2f:
         31:fe:ef:83:e4:39:92:17:ee:94:e6:5f:bd:56:7b:86:fa:92:
         91:3d:3a:fc:2a:ef:e2:24:70:91:6b:ca:25:64:37:51:41:bf:
         c0:0f:35:0e:23:04:ac:52:52:8b:0f:92:f4:1d:62:46:54:3f:
         e3:7a:57:17:6b:98:f0:ce:91:fc:21:8f:c3:1b:ca:1c:df:d1:
         33:31:a3:3b:9c:8c:63:9e:97:29:8c:c0:94:29:00:1b:0c:f4:
         89:7d:8c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----