Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/7434e83b-96da-3967-bc11-e2c68ce3f8b6.roa
File:                     7434e83b-96da-3967-bc11-e2c68ce3f8b6.roa (raw, json)
Hash identifier:          hKLRj8+wD5YQYeDGX/4jqb8meBjDYAr6NI51iYr9xLI=
Subject key identifier:   A6:C5:E9:6A:D9:4A:F3:43:89:0B:C6:5B:05:15:51:41:1E:86:65:81
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F432858484AAADE3BFF7FF4AB7F3E6E80
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/7434e83b-96da-3967-bc11-e2c68ce3f8b6.roa
Signing time:             Sun 22 Dec 2024 14:00:51 +0000
ROA not before:           Sun 22 Dec 2024 14:00:51 +0000
ROA not after:            Sat 22 Mar 2025 13:00:51 +0000
asID:                     395963
IP address blocks:        205.213.90.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4a:aa:de:3b:ff:7f:f4:ab:7f:3e:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Dec 22 14:00:51 2024 GMT
            Not After : Mar 22 13:00:51 2025 GMT
        Subject: CN=26af7f81-8c6f-4bd2-819b-fceb1f6206ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:35:cb:53:b0:dc:8c:22:a4:3a:39:97:a6:
                    87:e1:9d:7c:b4:df:3d:f1:50:26:2b:04:46:84:c5:
                    0d:16:c8:37:3a:03:e2:0d:0e:0e:37:06:aa:41:27:
                    05:34:74:15:1d:bc:65:52:7c:d1:14:7f:e1:4f:0a:
                    e3:a0:4c:2c:ec:2b:e0:60:27:85:50:c8:fc:c1:53:
                    0c:0d:3d:b4:d9:50:7b:6d:e6:59:91:e6:d4:be:53:
                    b4:ca:96:63:d3:c6:9d:2a:a6:0c:8a:27:2e:ef:2c:
                    42:7b:6e:4e:60:c7:1e:b5:b0:ea:ef:8b:0b:13:bf:
                    23:c2:dc:5d:c5:69:c7:f0:3c:fe:a4:0a:2f:3c:10:
                    44:59:c9:f7:9b:9b:02:92:3e:f0:bd:d7:03:d6:a1:
                    68:5c:e8:a1:5c:1d:20:88:c2:d1:b1:c7:bb:fa:23:
                    1d:36:01:19:c9:7c:d6:35:14:9f:7d:fe:55:08:9d:
                    de:5d:8d:92:d2:f9:6e:ee:2e:ae:08:96:fd:18:b9:
                    59:cc:47:00:c6:36:f1:61:ae:9d:c0:85:94:c0:90:
                    c9:2c:f0:8d:c8:fa:94:77:30:c5:07:bd:78:fd:d4:
                    0d:9f:24:35:a0:00:cc:11:81:bb:25:e2:51:63:d6:
                    b4:dd:48:c7:50:d7:60:7f:e0:83:31:3d:22:82:25:
                    f4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C5:E9:6A:D9:4A:F3:43:89:0B:C6:5B:05:15:51:41:1E:86:65:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/7434e83b-96da-3967-bc11-e2c68ce3f8b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.213.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:3e:2a:bc:5f:8f:0e:63:d3:d6:e8:cd:87:91:f8:ee:83:2a:
         c6:cb:4c:11:47:ff:e2:cc:e4:f7:0a:c0:48:bd:f9:28:69:18:
         a8:2a:95:2a:2a:d4:7f:cf:8b:01:02:97:53:51:9f:2d:e4:07:
         df:90:5c:e2:e2:b2:33:0a:9a:0e:5d:7f:70:1b:a4:21:d6:9a:
         2e:e9:64:5e:c1:d8:e7:2c:36:ac:5b:54:c5:21:04:66:a4:e5:
         74:88:73:0a:0a:3c:64:c9:4d:42:3d:57:37:84:9e:f1:48:88:
         40:58:85:86:8c:57:9d:9c:25:8f:66:91:33:d8:14:53:b3:f4:
         da:e7:3a:1d:d5:93:a3:4f:65:21:77:3c:9f:d5:b7:b3:eb:dd:
         e9:23:89:9d:ea:59:9e:c4:a1:ac:12:b0:53:8e:d5:a9:0e:ff:
         4b:ef:5d:eb:16:da:66:28:2a:d5:21:2d:ab:19:1c:d4:ac:a9:
         f5:3d:a7:fe:38:90:3b:7a:74:d4:21:80:30:91:d7:1c:13:66:
         f1:e3:63:3c:9a:3c:8e:06:df:f8:f1:4c:c5:fe:64:f2:52:9b:
         a5:19:71:05:dd:1f:4e:29:05:5f:51:9c:cf:57:cf:3b:ab:f3:
         b5:00:38:8f:b2:7d:1d:f6:e8:56:67:a5:1e:4c:35:8e:b2:7d:
         e2:80:28:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----