Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cd48c2f1-2beb-3a61-88de-869b4f106272.roa
File:                     cd48c2f1-2beb-3a61-88de-869b4f106272.roa (raw, json)
Hash identifier:          J5Jah6N0owo5/dDwLhAM33DYN6MgnSlZsmgd13RjK0E=
Subject key identifier:   C7:54:A7:81:1A:DF:2B:49:B3:CD:D7:D4:B6:7B:68:5A:75:9D:A6:FB
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285847DC64AC08CADDAEFCF5538A40
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cd48c2f1-2beb-3a61-88de-869b4f106272.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     64267
IP address blocks:        67.226.219.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:ac:08:ca:dd:ae:fc:f5:53:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=dc14bbf0-0a54-4985-9901-c9a17b60d753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:91:0b:d5:bd:d6:0a:2c:d1:93:9d:8d:48:3a:
                    72:18:84:5b:a2:e0:7b:89:c4:83:86:3d:61:f8:b9:
                    5e:70:de:99:d6:b9:2d:f2:8d:11:f9:98:e3:60:e3:
                    8f:e1:65:43:d9:c3:fb:55:0b:50:48:12:95:7a:d5:
                    22:65:fb:a8:47:b6:9e:08:4b:a5:dd:a3:ae:6e:ec:
                    72:ce:d9:54:f2:80:c5:03:a4:60:39:d2:10:ad:a4:
                    77:cf:26:1a:b6:0c:0c:f9:65:40:b0:cd:e6:bd:33:
                    7a:ae:bf:a4:f5:2d:65:11:91:b2:bd:f6:82:b7:a1:
                    44:ef:3f:56:07:b9:67:d8:ad:a7:fb:37:19:0a:00:
                    21:19:07:d7:05:19:21:f1:a7:c9:6a:ad:35:b8:a1:
                    1f:88:4e:ae:41:6c:10:c1:1c:71:9a:00:3c:97:14:
                    dc:33:e3:5c:5d:2c:53:ac:ca:23:b6:16:4b:f3:4d:
                    39:51:ea:13:3d:b2:df:91:97:c4:96:af:5c:47:ab:
                    5d:5f:43:4b:c7:6f:a0:ba:c9:d3:fa:92:5e:3f:77:
                    58:eb:c0:d8:29:f0:11:ac:fd:3b:7b:11:48:a7:76:
                    d5:ef:6d:c6:f3:ad:e0:6d:9f:30:4f:65:31:61:22:
                    6a:4b:f5:07:1f:6a:4b:6e:4f:1a:02:8b:57:1a:2e:
                    53:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:54:A7:81:1A:DF:2B:49:B3:CD:D7:D4:B6:7B:68:5A:75:9D:A6:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cd48c2f1-2beb-3a61-88de-869b4f106272.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.226.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:17:02:11:75:1f:d9:b2:76:ab:90:cd:e5:68:b1:02:24:4e:
         b0:18:e0:35:d0:48:62:ca:d0:8e:47:42:55:38:ce:67:25:76:
         fb:97:e6:47:c9:4a:17:ee:d4:5c:16:dc:b5:32:7d:90:8d:5e:
         24:af:1e:fe:74:5b:15:1a:dc:a7:d4:ff:f9:93:9a:88:7f:7a:
         70:e4:e0:71:2f:3c:38:80:e6:45:66:68:96:e6:a7:11:87:b7:
         03:15:2d:a5:e0:db:d0:3b:00:17:78:ea:0d:02:9b:8c:07:15:
         b6:71:29:90:c6:29:a6:b0:76:36:d4:14:3f:8d:97:3d:fb:b3:
         6a:fe:08:6a:1e:22:7c:95:1c:9b:ba:40:b7:25:57:ae:bd:7d:
         8b:4f:32:a0:f9:36:41:07:e5:c6:2a:23:9c:3d:f1:86:f5:32:
         10:ee:94:3d:15:69:48:14:4a:5f:2d:64:1a:67:d3:75:13:e3:
         5e:d2:a0:bf:56:3e:47:30:1a:11:14:db:ad:1c:7e:a7:64:e6:
         aa:35:f6:91:e4:e7:d8:03:e7:f5:50:e2:fa:0c:9e:57:2c:2c:
         d5:2d:64:2e:f6:54:5b:6f:ab:34:cc:36:df:dc:5f:9e:a8:9c:
         fa:70:4d:50:62:87:1a:f8:c8:59:72:9b:61:92:be:11:6d:a3:
         6d:0c:18:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----