Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/76c954c8-723a-3014-acc7-bb0c404b1f44.roa
File:                     76c954c8-723a-3014-acc7-bb0c404b1f44.roa (raw, json)
Hash identifier:          0yQWAfkic8jF7vjBcuuNJZ5jUunoEcaHY3chtAO5ars=
Subject key identifier:   11:F9:89:A9:88:3B:01:7F:2B:C8:50:CD:92:53:CE:B7:8D:AA:84:1A
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584851A577622DF4C34027A21900
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/76c954c8-723a-3014-acc7-bb0c404b1f44.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     62240
IP address blocks:        216.24.212.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:77:62:2d:f4:c3:40:27:a2:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=aa1f4ea6-5228-4fbb-bfdc-42299361b35a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:90:24:12:39:00:92:94:6a:04:db:46:2c:db:
                    00:e3:04:25:09:39:53:74:dc:24:c7:c1:8f:93:dd:
                    84:b6:4b:1d:8d:46:fc:90:92:1e:34:46:7d:c7:3d:
                    55:46:e9:72:66:25:d1:1e:05:61:0a:76:33:07:7e:
                    a7:4f:69:c1:fa:45:0b:d2:32:66:e7:81:bd:9b:85:
                    e8:2a:6e:5d:31:86:8e:e4:4e:d5:4f:76:0c:b5:68:
                    3b:25:61:a0:75:1d:3d:1b:65:65:eb:10:f3:6e:64:
                    ec:fc:93:d3:46:13:87:db:e7:44:ab:0b:aa:35:6c:
                    aa:92:3d:56:93:bd:14:18:b9:07:03:29:e3:bb:7a:
                    1e:0f:37:71:68:25:cb:08:56:2b:d7:d0:f9:9f:10:
                    6f:84:da:1e:75:5d:09:df:13:57:f5:73:1c:f6:6c:
                    9f:0e:02:29:5b:d3:39:b5:41:53:0e:17:f3:d0:9c:
                    ea:2f:0b:11:88:33:4a:80:72:c1:97:fc:96:cf:9a:
                    b2:c9:18:23:ec:86:80:29:00:72:90:60:15:a4:15:
                    46:2e:41:67:46:70:e5:91:b6:62:53:02:7a:fa:6a:
                    ba:84:9a:df:3d:a4:d4:7d:0c:5a:33:0f:84:8d:3d:
                    1c:a3:3e:da:29:bf:32:7f:cb:47:8b:56:92:10:d1:
                    42:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F9:89:A9:88:3B:01:7F:2B:C8:50:CD:92:53:CE:B7:8D:AA:84:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/76c954c8-723a-3014-acc7-bb0c404b1f44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:70:2c:18:19:ec:a6:b4:fa:a7:24:63:7f:1f:5e:50:8b:61:
         5a:6f:8c:f4:56:f3:f7:23:8e:97:ad:94:ae:fd:d1:81:ac:bc:
         46:af:ab:ef:44:af:37:82:06:94:b7:59:bb:c0:5e:ba:58:c6:
         a7:24:a8:70:7c:67:ea:22:f8:79:44:14:10:78:77:0b:df:ea:
         30:a1:ef:e8:53:c3:d4:ef:51:5c:f4:83:65:8c:25:97:15:13:
         a5:57:5e:e1:54:9b:ac:6e:e6:75:09:3b:b0:04:dd:76:5e:d9:
         df:e8:81:1d:23:11:9a:3a:56:86:1d:ea:73:50:ef:a7:de:e4:
         7d:8c:6b:d4:1a:64:39:78:b1:a2:b5:dd:05:e5:0b:d5:94:0f:
         6c:2f:bf:d1:5e:c6:7a:f7:58:55:74:ca:ea:86:8a:1e:0f:0d:
         a5:6b:f6:9a:7b:ef:28:04:d1:35:6e:d5:f7:dd:11:f4:46:5c:
         d6:2e:ab:23:3f:68:75:16:89:e1:80:67:1f:f5:b6:1f:20:9c:
         a8:d7:55:b4:34:09:21:38:48:76:4d:ae:89:e7:4e:a8:8a:13:
         b5:ad:2a:e5:f0:ce:b5:7e:bd:56:69:b7:d7:73:b4:b9:1d:b9:
         cb:b9:77:f5:a3:40:61:64:0c:81:02:b2:ab:d8:e9:a6:e2:81:
         b4:16:13:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhRpXdiLfTDQCeiGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk
YWExZjRlYTYtNTIyOC00ZmJiLWJmZGMtNDIyOTkzNjFiMzVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZAkEjkAkpRqBNtGLNsA4wQlCTlTdNwkx8GP
k92EtksdjUb8kJIeNEZ9xz1VRulyZiXRHgVhCnYzB36nT2nB+kUL0jJm54G9m4Xo
Km5dMYaO5E7VT3YMtWg7JWGgdR09G2Vl6xDzbmTs/JPTRhOH2+dEqwuqNWyqkj1W
k70UGLkHAynju3oeDzdxaCXLCFYr19D5nxBvhNoedV0J3xNX9XMc9myfDgIpW9M5
tUFTDhfz0JzqLwsRiDNKgHLBl/yWz5qyyRgj7IaAKQBykGAVpBVGLkFnRnDlkbZi
UwJ6+mq6hJrfPaTUfQxaMw+EjT0coz7aKb8yf8tHi1aSENFCTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBH5iamIOwF/K8hQzZJTzreNqoQaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNzZjOTU0YzgtNzIzYS0z
MDE0LWFjYzctYmIwYzQwNGIxZjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAdwLBgZ7Ka0+qckY38fXlCLYVpvjPRW8/cjjpetlK790YGsvEavq+9E
rzeCBpS3WbvAXrpYxqckqHB8Z+oi+HlEFBB4dwvf6jCh7+hTw9TvUVz0g2WMJZcV
E6VXXuFUm6xu5nUJO7AE3XZe2d/ogR0jEZo6VoYd6nNQ76fe5H2Ma9QaZDl4saK1
3QXlC9WUD2wvv9Fexnr3WFV0yuqGih4PDaVr9pp77ygE0TVu1ffdEfRGXNYuqyM/
aHUWieGAZx/1th8gnKjXVbQ0CSE4SHZNronnTqiKE7WtKuXwzrV+vVZpt9dztLkd
ucu5d/WjQGFkDIECsqvY6abigbQWE+U=
-----END CERTIFICATE-----