Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/7b2fbca4-8022-3fe2-ac32-dcfc0b2a20cb.roa
File:                     7b2fbca4-8022-3fe2-ac32-dcfc0b2a20cb.roa (raw, json)
Hash identifier:          lhPYAeMmAbkFHdYBXkEsV31t4K4ulbK3sHl61oPDNAU=
Subject key identifier:   A5:4C:09:70:8D:40:03:A8:2E:32:24:73:8C:B0:18:C2:1E:73:D4:F1
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285847E094DA6D42B9676E89FD3580
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/7b2fbca4-8022-3fe2-ac32-dcfc0b2a20cb.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36040
IP address blocks:        104.237.190.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:da:6d:42:b9:67:6e:89:fd:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=a2d849c4-cc34-4d16-82c3-52736fc5d5a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:37:87:13:e1:a8:b1:5c:bf:76:ed:26:e4:27:
                    f3:32:52:6c:bf:d5:d2:fc:7a:6e:a5:74:c9:24:79:
                    55:b8:76:f7:89:1d:46:f2:e2:3c:e8:51:77:0d:49:
                    5e:7b:6b:28:bc:80:a6:bc:8b:65:33:60:f2:13:74:
                    18:e5:79:95:14:11:4a:58:f5:24:73:63:74:86:74:
                    46:50:fc:a3:41:1a:15:6e:7f:e4:84:89:77:10:b5:
                    6f:0a:d5:a4:8a:70:3d:22:58:51:1f:c1:c7:e2:a7:
                    29:db:3b:b6:ac:4b:b7:e2:cb:0b:46:8e:bf:41:82:
                    f6:2d:59:eb:45:fe:48:90:16:e4:38:9e:13:17:1d:
                    17:2d:cd:8f:28:1c:45:27:09:61:5e:74:bd:6d:ba:
                    0c:6e:02:c8:67:a8:d8:d3:12:8d:d5:b0:b7:fc:07:
                    0d:56:d6:5d:94:40:26:90:2c:08:6a:90:0d:92:0c:
                    68:14:cd:bf:19:62:08:5e:37:51:d3:38:69:d5:06:
                    1e:ef:9b:43:7b:a8:1c:cf:58:2d:29:df:ed:45:9e:
                    8e:aa:a0:07:a9:38:d9:84:8e:ea:1f:90:0f:1a:a4:
                    90:56:9f:7f:aa:7a:ed:25:f8:e1:1c:1c:63:c3:a8:
                    a3:50:ff:1a:0d:28:d6:65:e3:4d:a6:8a:22:f5:8b:
                    66:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4C:09:70:8D:40:03:A8:2E:32:24:73:8C:B0:18:C2:1E:73:D4:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/7b2fbca4-8022-3fe2-ac32-dcfc0b2a20cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:d3:3e:96:07:0a:0c:ec:1d:74:7e:0b:67:4c:64:c1:f9:dd:
         1d:a2:79:25:a5:c9:bb:1e:39:7a:9a:f9:9c:09:5d:47:f1:02:
         01:23:81:3e:bd:45:27:c3:d6:27:28:d0:e8:b0:41:77:02:e2:
         10:cb:4d:b2:11:e4:c0:4b:ff:c0:9b:56:4f:ed:04:bd:e4:3c:
         49:47:b8:7e:67:ce:4f:3d:38:65:83:9f:b2:a7:6b:9a:ac:54:
         69:27:89:5f:d0:14:8d:89:8f:59:32:0b:79:38:48:eb:af:59:
         89:89:60:97:c9:96:bd:20:e7:60:9f:b8:80:38:fa:71:51:e3:
         d8:d3:c9:17:da:57:2b:ee:eb:d8:75:2a:05:88:08:c7:13:bf:
         8f:f6:10:ce:77:5f:e7:a5:ff:c0:9a:75:6a:32:ee:ed:12:bf:
         11:4a:8e:84:0d:71:b6:bb:a9:8a:91:ab:ce:4b:04:7e:0e:bb:
         30:04:8a:f6:e4:b7:8d:43:39:03:5e:d0:28:99:41:9e:50:16:
         4a:59:29:61:af:0c:ff:88:bc:f7:3a:00:1d:56:4b:54:31:d6:
         9d:ed:58:c4:96:97:81:7c:bb:84:fb:6f:b0:a5:a4:1a:fc:1b:
         09:5f:43:8a:6c:a1:3b:b7:46:70:7d:4a:9f:17:b2:54:e1:cd:
         5c:fe:9f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----