Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/8392db65-a431-3b35-8f55-728a914af3f3.roa
File:                     8392db65-a431-3b35-8f55-728a914af3f3.roa (raw, json)
Hash identifier:          yOovmR1ZEI2fVVgMgnBHBHm6er40+c2JCRIsopy1L7M=
Subject key identifier:   A0:67:64:07:ED:9B:C6:AF:5C:C4:65:A8:96:C6:0E:F8:8F:09:AB:7F
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F432858484AAADEB19D62FEB0D3FEC680
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/8392db65-a431-3b35-8f55-728a914af3f3.roa
Signing time:             Sun 22 Dec 2024 14:00:51 +0000
ROA not before:           Sun 22 Dec 2024 14:00:51 +0000
ROA not after:            Sat 22 Mar 2025 13:00:51 +0000
asID:                     397171
IP address blocks:        205.213.101.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4a:aa:de:b1:9d:62:fe:b0:d3:fe:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Dec 22 14:00:51 2024 GMT
            Not After : Mar 22 13:00:51 2025 GMT
        Subject: CN=3d645af3-0084-411a-95de-a175ff99daf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2b:96:3a:9b:ff:3c:16:e7:2d:a1:71:17:28:
                    3f:37:cf:db:02:6c:70:e7:21:a8:bd:3f:36:f6:0f:
                    e3:aa:7a:df:c3:98:7b:96:a9:5c:4d:ad:02:ec:b9:
                    03:3b:4f:49:1d:41:6a:f0:90:e8:72:9f:d5:86:f7:
                    62:91:92:01:7a:08:94:cd:6f:f6:f1:ed:73:bf:2f:
                    52:96:21:7f:02:1e:88:d9:50:c6:61:ff:9e:c2:d5:
                    5c:33:5c:e7:2d:81:b0:a5:54:0c:74:e0:02:3c:b2:
                    aa:55:bd:70:1e:de:26:e8:f6:a0:93:6d:b3:3f:d3:
                    8b:79:e9:51:d7:a5:e5:01:18:9d:be:c0:ef:26:fe:
                    0d:57:a1:df:12:6f:05:4e:9b:ac:54:d9:8b:29:d6:
                    28:e9:c0:4f:22:27:e4:94:c2:69:a6:5d:75:2a:46:
                    1b:64:5d:a6:2c:87:32:55:69:43:ef:b5:48:e5:b9:
                    4a:39:d0:b0:ad:1f:28:0b:c2:ae:f4:c1:57:ee:e5:
                    aa:ae:e4:74:2f:58:cf:c7:9e:5f:05:69:7c:63:af:
                    61:52:49:3d:61:cd:d0:39:a8:22:26:2c:89:fe:b2:
                    12:17:cd:7f:4c:d1:c5:b0:d5:4f:51:66:d1:98:b8:
                    2b:75:ce:fa:31:18:e2:cd:d4:61:b2:9b:b9:cd:88:
                    49:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:67:64:07:ED:9B:C6:AF:5C:C4:65:A8:96:C6:0E:F8:8F:09:AB:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/8392db65-a431-3b35-8f55-728a914af3f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.213.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:62:ab:30:83:7d:a7:61:73:ea:6c:a9:3f:f4:15:0d:87:8e:
         ca:3a:62:16:87:89:4d:b7:b4:23:37:99:01:34:f2:81:ce:e6:
         80:b3:9a:8f:e7:86:4d:e7:68:80:b9:63:31:d6:b0:f5:73:87:
         b4:92:c8:6f:5b:85:5b:8a:46:7a:dc:86:9b:c7:86:e9:70:e4:
         7a:0e:f3:c6:9f:84:c9:ea:c0:12:40:7c:17:23:42:8e:e3:4a:
         d9:9a:64:92:3c:d3:73:59:40:b4:71:0f:b1:ae:ef:4d:79:db:
         55:44:db:2d:7a:96:e6:b3:61:f4:81:62:d0:99:76:6e:e3:d2:
         23:bf:21:90:be:1f:13:43:c3:a7:ad:4b:fd:c4:bb:dc:4d:7b:
         64:83:64:be:cc:d2:c7:e1:9d:e2:15:4f:28:44:1d:23:0b:74:
         12:20:54:b6:7f:ee:1c:fd:a5:51:11:d0:7d:40:cf:5b:e4:d7:
         8a:b4:ed:47:cc:98:da:22:d7:80:c1:14:46:ba:29:82:fd:ea:
         e5:98:2c:55:94:86:79:23:a8:99:7d:03:e0:4a:dc:92:0a:5b:
         d5:5c:8f:33:ee:00:13:ce:f0:7a:15:c1:6c:ad:94:fa:2e:93:
         5c:f8:52:4a:03:c5:2a:86:cd:ae:b8:e6:a2:78:9a:38:c0:8c:
         14:11:22:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----