Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/edb23b91-d765-3a18-a66d-bbe4f8ea5fa3.roa
File:                     edb23b91-d765-3a18-a66d-bbe4f8ea5fa3.roa (raw, json)
Hash identifier:          qLOYgYuoO9LyabAMBx0F6g0AzqfEo3h+L8DOKD69YuE=
Subject key identifier:   30:20:DB:7C:1A:09:61:14:78:AF:98:FD:90:FF:79:11:68:4D:2D:05
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F43285847FF4A4A14B671A1817E918C40
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/edb23b91-d765-3a18-a66d-bbe4f8ea5fa3.roa
Signing time:             Mon 25 Nov 2024 14:00:39 +0000
ROA not before:           Mon 25 Nov 2024 14:00:39 +0000
ROA not after:            Sun 23 Feb 2025 14:00:39 +0000
asID:                     398823
IP address blocks:        107.148.88.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ff:4a:4a:14:b6:71:a1:81:7e:91:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Nov 25 14:00:39 2024 GMT
            Not After : Feb 23 14:00:39 2025 GMT
        Subject: CN=b26df127-efcf-4f95-80ac-ead2e7cd20ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:61:4c:fe:a9:52:2c:f6:c8:ca:70:ca:66:ff:
                    2a:67:1d:fd:46:22:8b:51:ae:77:1f:83:16:63:68:
                    63:aa:44:49:11:bf:9a:e3:06:6c:ff:6e:e5:b2:75:
                    6e:06:9e:10:23:57:c1:83:ba:c2:7d:90:2c:2b:73:
                    ac:26:ac:e9:0c:11:57:0c:11:6b:d9:85:43:e0:1a:
                    cd:15:54:c3:e1:9f:85:49:0f:35:84:61:56:db:62:
                    2f:17:a5:0b:d3:5b:f9:37:35:b9:39:64:df:fb:69:
                    5a:6b:65:0b:61:5e:a3:90:d8:67:49:7c:6a:c3:f2:
                    c0:d1:69:e8:78:0f:f2:18:39:0a:4b:bf:d5:b3:52:
                    6a:9e:38:4f:b8:0a:5e:5e:51:d7:57:d3:d1:c0:07:
                    49:1d:f4:43:53:7e:08:18:78:94:37:d0:10:00:13:
                    15:b6:b3:76:20:63:4d:60:d1:c0:ed:39:09:59:c2:
                    b0:1e:92:3b:f4:7e:7c:23:75:fe:97:d8:99:f7:ec:
                    37:40:ec:8c:33:7e:04:fd:d5:83:f3:60:28:e4:54:
                    3e:06:d2:5c:8f:49:b1:bd:92:06:72:c3:d6:c9:8b:
                    8a:42:84:75:ea:4c:0f:28:ff:5c:e5:73:ef:aa:19:
                    4a:bd:8c:f7:1d:82:1e:8e:8a:bb:a0:b7:6b:d8:7b:
                    a3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:20:DB:7C:1A:09:61:14:78:AF:98:FD:90:FF:79:11:68:4D:2D:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/edb23b91-d765-3a18-a66d-bbe4f8ea5fa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:dc:a8:c4:89:31:7d:82:eb:eb:63:12:16:82:53:32:be:1f:
         28:52:81:8b:98:4b:56:6d:01:73:77:6c:d7:c2:4b:f9:5a:fe:
         fe:b9:51:e9:9f:3d:a6:4c:86:82:28:ed:3b:27:ca:ce:16:5f:
         9c:6e:13:c5:04:17:6a:2b:df:73:93:0a:8f:9b:94:3c:44:03:
         14:15:2d:75:95:bc:4f:8e:70:81:03:db:39:90:06:ed:56:72:
         d0:07:57:5c:2d:94:03:10:a3:6e:ca:e3:27:ee:c7:46:cb:80:
         69:2c:eb:da:9d:2a:5b:fe:c4:02:0b:95:ff:fe:93:09:42:d6:
         87:67:69:5e:7c:a5:2b:b2:d9:94:0c:7f:33:98:62:eb:ab:3c:
         8d:ce:0b:5c:0f:1e:b8:c2:36:88:a3:74:85:45:b8:5e:41:2b:
         f7:77:d0:27:f5:9a:60:28:e7:fb:25:bf:7d:53:24:27:e7:50:
         f7:4b:ef:0c:bc:ed:63:ba:65:5d:a8:f7:78:f9:f1:f3:16:5c:
         0f:f3:b8:d5:50:eb:90:dd:9d:b9:d0:d9:79:de:bc:bb:72:d7:
         0b:0a:fa:8a:c1:ec:ab:41:9a:ce:8a:dc:9f:2a:25:95:de:b9:
         68:6b:58:25:b5:8e:16:2a:e2:1c:aa:ff:cd:ad:a7:9c:de:22:
         02:88:f3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----