Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/f5e69843-5c54-3803-8848-2695037a74aa.roa
File:                     f5e69843-5c54-3803-8848-2695037a74aa.roa (raw, json)
Hash identifier:          jSBatFg7rc9RHsmL0m48Xp7LtdpCxyINlZVNLTK1qkw=
Subject key identifier:   C4:11:F2:72:C2:3B:08:E2:AE:E5:D8:02:81:FC:DD:6F:37:4D:72:23
Certificate issuer:       /CN=8f6663be-0957-45cd-86d6-e3d6354f6b9b
Certificate serial:       010D0C9F4328584838854A995AEEA3DD12FB9480
Authority key identifier: 95:35:DC:88:C9:4E:85:61:93:6A:C8:A6:BD:08:11:D0:A0:AE:7E:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/f5e69843-5c54-3803-8848-2695037a74aa.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     62958
IP address blocks:        168.100.24.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:4a:99:5a:ee:a3:dd:12:fb:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6663be-0957-45cd-86d6-e3d6354f6b9b
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=01ef8303-c0e0-413e-9913-ad9e49a40467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ac:70:58:18:59:d1:98:b2:1f:82:15:23:19:
                    fd:68:87:c7:81:b7:3f:6c:6c:26:05:3e:17:9e:99:
                    7a:fc:61:7e:30:95:0b:f9:73:74:c0:79:e9:b9:4c:
                    18:6d:91:4d:d1:04:37:a7:bf:63:80:44:f5:2d:0c:
                    8f:70:9d:db:71:d7:0b:03:66:fb:b8:0f:6e:d0:a1:
                    e4:08:b6:45:06:e0:7f:94:80:fb:6a:fd:73:11:9d:
                    cf:d4:9b:11:c0:10:12:a4:fc:4d:a5:75:c1:c4:f0:
                    24:d3:89:55:0f:f6:72:88:94:dc:a4:56:eb:c0:aa:
                    67:48:ba:75:a0:57:ef:0e:ab:36:ce:a0:d4:9f:9b:
                    e2:c3:9c:14:63:bc:44:d7:e3:ee:d1:7b:9e:00:63:
                    79:7c:56:d2:3c:b5:36:50:23:20:1a:1a:04:0b:b7:
                    59:b7:67:88:46:63:ec:8c:1e:c4:86:08:28:04:81:
                    de:86:a3:26:04:50:4f:55:14:f5:02:93:03:b2:8f:
                    5a:70:b5:0c:93:b2:c3:fa:df:df:ba:28:9d:3f:49:
                    7a:8d:1b:8c:d2:de:ee:87:71:c9:c9:40:b9:9b:d0:
                    17:22:59:79:09:0b:b9:8a:c6:e5:8b:3b:f5:8c:b4:
                    10:a7:85:61:01:ec:54:a2:58:9a:1b:52:56:d5:f2:
                    38:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:11:F2:72:C2:3B:08:E2:AE:E5:D8:02:81:FC:DD:6F:37:4D:72:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/f5e69843-5c54-3803-8848-2695037a74aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.crl

            X509v3 Authority Key Identifier:
                keyid:95:35:DC:88:C9:4E:85:61:93:6A:C8:A6:BD:08:11:D0:A0:AE:7E:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:74:d3:01:69:7e:3a:cf:ac:39:62:05:f9:d8:07:bf:30:c9:
         b0:da:ca:ea:fe:b6:5b:cf:db:5e:48:5c:e1:62:56:c1:a6:22:
         1e:a6:f5:49:53:6b:30:7c:c9:f0:b6:3d:40:0a:d4:dd:f1:1a:
         b7:54:fd:26:a5:f6:ec:cb:b2:34:57:25:f9:34:b7:95:d3:c7:
         70:16:ee:7b:b4:86:fc:d7:75:1c:68:ef:ee:ad:cb:bd:f7:28:
         a6:a7:92:5e:6c:17:fa:ae:4c:7f:25:45:3c:a6:2e:a8:97:0e:
         dd:29:45:7f:f4:b2:60:1c:a7:62:c0:0d:bb:50:d8:96:5a:42:
         06:8f:d3:0f:dc:94:13:f1:3e:c5:9c:83:1f:f3:23:06:32:3e:
         2e:da:0a:83:51:1e:8b:c4:bb:f8:b3:50:59:9c:ed:86:af:2a:
         7b:f7:3b:f4:4a:8e:81:cc:95:91:cd:6b:70:3f:05:2b:03:3c:
         45:95:34:ba:f6:7e:51:8c:29:d1:31:12:64:f2:52:72:f8:62:
         b1:80:0d:f2:2e:14:03:35:43:25:59:22:ec:c7:72:59:83:9f:
         97:1c:e1:f3:ea:da:e4:c2:98:b9:71:80:45:c9:06:e4:88:7d:
         a3:fd:87:18:c2:53:7e:4f:3c:ff:01:27:3e:51:d6:c4:d7:85:
         02:57:4f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----