Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/358dc235-bb9e-3453-8c8b-71636611183c.roa
File:                     358dc235-bb9e-3453-8c8b-71636611183c.roa (raw, json)
Hash identifier:          YKAUxAOfU8QYa4kkVqQ5vCRH2Ur27uBHAiJIHlSkbDQ=
Subject key identifier:   D9:12:DC:96:1E:E0:B2:D1:6A:37:7F:3A:D2:CC:A1:4A:E5:0A:B9:44
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285847E62B6593A753A8090F0DB330
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/358dc235-bb9e-3453-8c8b-71636611183c.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     15169
IP address blocks:        207.126.154.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:65:93:a7:53:a8:09:0f:0d:b3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=4cc900d6-6ee2-4b15-beb4-aaa960bf45a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c2:ee:c1:01:47:5d:50:ee:d2:6c:3c:73:86:
                    8e:3a:3f:c7:20:22:c2:b9:90:d6:7b:3a:c5:b9:91:
                    05:cc:13:0f:19:b2:61:e8:1f:27:2b:35:f6:12:d9:
                    2d:ae:b6:07:57:ed:d0:ac:68:99:7d:e5:c7:7d:47:
                    54:4f:02:7e:66:f1:a8:17:95:41:da:33:28:aa:28:
                    69:17:99:5d:79:e0:9a:f0:4d:a4:71:9e:57:32:1e:
                    e2:20:c4:8d:0b:3c:39:20:ea:97:89:d2:c5:f1:36:
                    b9:db:06:b1:25:49:be:12:96:ad:90:2e:70:5d:e1:
                    8a:30:4f:e0:7a:24:6b:d8:67:76:e3:b1:4d:56:aa:
                    07:36:da:c7:a6:15:8f:0b:99:31:ad:ea:6b:74:b0:
                    6e:84:f1:05:15:5b:30:29:75:bb:b2:66:7a:52:80:
                    42:1b:2b:d4:ac:27:f9:98:12:28:38:a0:42:4a:4f:
                    1d:15:c9:79:28:13:05:e8:9a:35:73:89:93:78:b1:
                    7a:f9:2b:60:51:74:dc:e2:79:c2:7f:64:88:22:82:
                    12:f8:6d:08:b8:08:37:c3:44:8f:4b:c5:1f:82:07:
                    7e:19:95:da:ed:94:7e:02:78:08:09:28:70:5e:c1:
                    56:59:b3:9c:f5:02:22:32:1c:68:1a:98:0f:6e:d0:
                    a9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:12:DC:96:1E:E0:B2:D1:6A:37:7F:3A:D2:CC:A1:4A:E5:0A:B9:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/358dc235-bb9e-3453-8c8b-71636611183c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:07:d4:a7:77:5c:45:66:b7:7d:93:63:6f:3a:aa:41:67:b4:
         d7:32:52:95:45:e5:78:81:09:25:5d:81:98:c9:a8:d0:97:a7:
         7e:05:cd:a1:26:00:5f:b2:f1:7a:a0:c4:62:33:04:4e:29:bb:
         ec:8a:bf:ed:7c:1c:dc:10:e7:b2:21:a3:7a:7f:17:58:c0:c7:
         e2:d6:70:f2:02:df:9b:c7:98:ac:f2:97:60:45:67:3c:76:b5:
         d9:3d:f5:c2:f1:12:03:9d:6b:86:34:2a:6e:fa:d3:88:93:64:
         84:1f:d8:05:38:e3:55:53:09:df:3c:17:62:14:e1:42:0f:6c:
         2e:82:08:a9:c8:84:8f:10:32:86:04:1e:00:68:66:ef:21:4c:
         c5:81:71:0a:87:24:d0:e5:81:5c:9a:de:fe:a3:8b:7a:c4:51:
         c7:f4:c3:f9:2f:1b:2e:e8:63:ea:38:88:07:51:00:fe:72:62:
         ec:fa:76:3d:bd:14:69:ee:be:b6:cd:4e:d7:25:38:05:46:99:
         a0:d7:e1:1e:00:b3:0f:87:1d:a4:18:13:b4:13:23:5c:52:3f:
         6a:e2:96:ce:7e:a2:e7:9d:51:e2:d4:ba:75:5e:8f:3d:40:ed:
         c9:f5:a0:c2:59:fa:09:53:43:5e:aa:04:72:2a:8f:ba:07:0e:
         d9:95:b6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----