Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/de2b23cb-f504-3c48-9f13-c9c082c146db.roa
File:                     de2b23cb-f504-3c48-9f13-c9c082c146db.roa (raw, json)
Hash identifier:          kCvqqhvq1pASdhbN88553hY2oO6jTMGFjV776CblK0g=
Subject key identifier:   CD:AC:4C:0B:33:CD:6E:87:66:E0:A1:3D:E1:DC:57:2E:8B:FF:AA:7B
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285847E62AA3577741C19E441C2200
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/de2b23cb-f504-3c48-9f13-c9c082c146db.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     32381
IP address blocks:        207.126.146.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:a3:57:77:41:c1:9e:44:1c:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=9238eafd-f095-4759-a0c8-4aaa7fe03242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f2:54:e6:31:28:25:69:dc:ed:c7:6f:49:11:
                    c9:18:a3:d7:dc:28:79:de:30:45:88:c6:3c:a8:bf:
                    ba:e1:09:78:0c:7d:ad:6a:8d:1b:b9:b1:f1:0d:23:
                    4a:39:9d:0e:6f:14:c0:73:bf:5f:0d:0b:96:b3:99:
                    12:f3:c2:5f:ca:3e:47:e7:ef:b0:0e:8a:53:fd:63:
                    0f:25:b9:9b:c4:2b:3b:47:2f:47:bd:c2:4d:be:59:
                    31:03:92:dd:6c:19:7e:7e:59:e7:60:05:a7:2f:fb:
                    c3:a9:77:bd:2f:3c:de:07:50:67:b3:5e:6d:0b:a4:
                    d5:bd:24:6a:59:5e:f2:a7:a1:bf:21:83:01:53:df:
                    ae:38:e6:6e:fa:53:9c:69:bb:2f:d3:8e:d9:27:29:
                    73:56:50:90:76:19:64:27:4c:63:8a:85:dd:cc:90:
                    7b:f7:f2:e5:8d:1c:7f:c3:9d:a7:ea:21:a7:b9:d2:
                    d9:fe:b3:28:27:a2:27:2c:76:e5:c0:95:29:a5:7c:
                    43:dd:7a:8d:74:3b:49:83:06:0e:fa:41:ef:bf:86:
                    47:59:48:79:46:59:55:5e:8a:82:92:da:42:78:de:
                    a2:e7:03:7c:ed:8a:6f:2b:7b:7a:fa:cc:30:9e:a8:
                    ab:17:39:c3:83:39:9b:3c:0c:6f:c1:10:e2:d4:e9:
                    44:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AC:4C:0B:33:CD:6E:87:66:E0:A1:3D:E1:DC:57:2E:8B:FF:AA:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/de2b23cb-f504-3c48-9f13-c9c082c146db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:cd:9c:9d:15:47:a5:7d:7d:9e:5f:16:77:89:3e:d8:6f:80:
         c3:b9:36:7e:70:68:f7:1b:ca:b1:57:63:aa:ab:fa:56:41:69:
         59:44:84:b6:61:f4:41:d2:9f:c6:42:95:15:bb:1e:b8:19:52:
         3f:0b:c8:a3:ec:ad:4e:07:39:35:c0:08:19:46:05:63:f5:5f:
         26:29:5f:cd:f8:ea:cc:74:7e:2a:18:c5:5c:92:57:e2:5e:05:
         96:f0:95:5b:11:3c:29:12:2a:ed:b0:46:00:db:a0:c3:09:79:
         1d:9c:6e:ec:3e:05:2f:88:6c:e8:3b:56:fe:cb:56:44:2b:e2:
         77:40:e1:35:23:a0:c9:2c:7e:31:a0:91:f2:7f:30:9c:18:12:
         f5:67:04:ff:d3:09:50:72:84:a9:8b:ec:ff:54:3c:6e:3f:d0:
         7c:b5:97:7f:a4:82:bf:34:4a:b0:53:e3:90:47:23:bd:22:0c:
         1b:3c:cf:10:37:b5:12:c9:dd:f8:a0:6c:e6:4a:a7:69:37:30:
         96:9f:64:c6:d1:fb:e3:37:93:23:e5:ff:b9:22:b9:73:cc:cb:
         79:14:83:f1:9e:c6:db:4f:33:9f:a8:21:21:42:0e:63:77:3e:
         44:5c:dd:96:4d:69:6a:51:a5:cf:b9:ba:71:5c:56:0e:b4:d6:
         e0:ab:b3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----