Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/4900a0dc-ee81-3d5d-a9c1-8a2e5b9b6eda.roa
File:                     4900a0dc-ee81-3d5d-a9c1-8a2e5b9b6eda.roa (raw, json)
Hash identifier:          HTqMPK6BS8sWLx+X3aa4tIHiKM3zZSLD2vFh43tdUQA=
Subject key identifier:   ED:4C:24:13:16:FE:4A:23:39:B8:69:53:75:65:FE:AF:EA:6F:8A:A0
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584832F038723E10A6A2B2923C80
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/4900a0dc-ee81-3d5d-a9c1-8a2e5b9b6eda.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     398116
IP address blocks:        65.51.247.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:38:72:3e:10:a6:a2:b2:92:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=3ea7f67e-9c91-4be3-bcd0-4bb999106e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:30:4b:61:7c:ff:a9:5e:ea:43:bf:4a:b3:1e:
                    04:cd:4f:bb:40:ac:29:b8:f9:6f:00:98:45:99:b4:
                    fc:b5:77:18:c7:41:81:b3:0f:5e:36:f7:ee:88:32:
                    1a:b8:2a:a9:f4:2f:3e:62:4f:bc:dc:bb:ed:13:c4:
                    2a:fb:1e:46:e0:35:50:da:03:59:0b:28:c8:28:a7:
                    f5:8e:72:8c:7f:dc:0d:92:93:02:31:ea:e6:6f:61:
                    9a:f7:14:5d:6b:ce:00:dc:a9:51:10:4f:71:76:4f:
                    a4:37:e6:e3:3b:34:3b:af:26:a0:0a:e7:42:46:42:
                    e5:62:c0:e5:3c:d9:30:51:32:b9:10:49:4e:74:50:
                    c3:9e:8d:15:2b:89:4a:b8:d4:35:d4:f3:1a:45:58:
                    62:cf:e5:fb:28:88:ee:13:ab:fc:ff:97:8f:d3:ae:
                    44:6a:96:a6:bf:61:e6:4d:d1:dc:e7:dc:17:f9:e6:
                    58:93:42:9a:f8:17:51:22:8f:88:97:f8:16:49:fd:
                    dc:a7:63:ba:45:c9:9f:c3:3c:78:a6:03:bf:b5:a2:
                    89:37:d5:fd:e9:c9:06:91:80:44:77:dd:fc:4f:26:
                    6b:57:5e:ad:bd:15:2c:79:0c:13:34:ec:43:41:88:
                    04:63:80:0c:3d:98:10:73:2b:68:25:a4:48:86:83:
                    45:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4C:24:13:16:FE:4A:23:39:B8:69:53:75:65:FE:AF:EA:6F:8A:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/4900a0dc-ee81-3d5d-a9c1-8a2e5b9b6eda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:0c:8a:ea:c5:bf:59:3f:74:85:61:60:c4:b4:cd:89:9e:cf:
         a9:93:3e:0e:ee:b6:9b:a8:ed:74:d4:a1:47:83:fe:87:6d:b3:
         5d:6f:37:30:19:e4:02:3a:56:db:43:d8:02:84:aa:c7:41:d9:
         ed:09:cf:c4:cf:62:b1:b0:71:2a:08:d8:0b:ab:76:2b:c9:5c:
         3f:8d:21:78:73:a8:ea:77:a9:9f:90:98:4a:0a:c2:0b:11:cf:
         e5:da:18:47:2b:e8:1d:ed:15:1e:0e:14:c0:01:c4:99:ec:76:
         0d:66:de:45:36:d8:e8:cd:0a:27:e6:cc:11:66:28:57:bc:81:
         52:d4:c5:5c:c9:e3:00:d1:59:05:d3:7a:99:7e:87:50:63:b5:
         42:68:04:dc:fd:5e:01:bb:81:53:f4:ec:b7:1d:cc:66:97:d1:
         d1:b8:85:54:e2:48:4e:a8:ae:e2:b2:9d:56:a9:95:30:fc:a6:
         ae:08:93:32:69:dc:2a:bd:ce:48:63:5e:33:50:b4:f9:65:b5:
         b6:bd:d0:66:4d:21:54:2e:76:d8:62:64:63:0e:e3:cf:ca:76:
         e3:eb:47:79:0a:90:9e:f3:17:61:59:e9:02:f4:eb:c7:59:b5:
         a3:cc:df:bb:c4:e5:ea:ef:ed:75:b6:0e:1f:75:a9:c0:ec:a6:
         a4:12:71:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----