Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/51efee9c-4595-4144-8b00-687d5d4d64a7/86fa017f-21a6-392f-8747-fcd0b380064d.roa
File:                     86fa017f-21a6-392f-8747-fcd0b380064d.roa (raw, json)
Hash identifier:          vwClvpauK+kld4sriDybVRkA3nfzFr0LfaMO1oIxCmI=
Subject key identifier:   CA:E6:72:7D:46:A8:3D:FE:89:65:C8:C3:1F:5A:AC:0D:AB:B5:B6:92
Certificate issuer:       /CN=51efee9c-4595-4144-8b00-687d5d4d64a7
Certificate serial:       010D0C9F432858480214F5FFFE9FBECBA010B980
Authority key identifier: 14:40:E8:BF:37:0F:42:6B:CF:0F:2A:93:A4:F8:4C:60:E4:34:71:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/51efee9c-4595-4144-8b00-687d5d4d64a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/51efee9c-4595-4144-8b00-687d5d4d64a7/86fa017f-21a6-392f-8747-fcd0b380064d.roa
Signing time:             Tue 26 Nov 2024 14:00:39 +0000
ROA not before:           Tue 26 Nov 2024 14:00:39 +0000
ROA not after:            Mon 24 Feb 2025 14:00:39 +0000
asID:                     14618
IP address blocks:        69.12.28.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:14:f5:ff:fe:9f:be:cb:a0:10:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51efee9c-4595-4144-8b00-687d5d4d64a7
        Validity
            Not Before: Nov 26 14:00:39 2024 GMT
            Not After : Feb 24 14:00:39 2025 GMT
        Subject: CN=dc2b940d-9d6b-4dc0-b101-fb21aaba2cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a1:7c:5d:48:27:88:58:f6:53:30:ba:2f:37:
                    d6:54:f8:53:2d:f4:94:f7:29:78:23:0b:74:01:dc:
                    a3:56:f8:5a:96:ce:d7:8b:03:cd:f0:7a:1d:b6:4f:
                    87:93:6c:81:fd:78:0a:f1:4e:fa:2b:35:7e:4d:00:
                    63:00:f8:a7:0b:a5:e3:55:c6:04:3b:da:27:22:48:
                    fb:7c:96:32:51:a2:22:b2:ba:27:97:b1:8d:77:9d:
                    d2:25:d6:7e:6e:bc:6b:20:79:bf:ab:73:43:d3:f2:
                    1d:a8:84:f5:dc:f1:55:d6:77:69:d7:6c:e6:f0:a5:
                    d5:41:76:8a:e5:f2:4d:74:6a:94:ae:35:17:a3:50:
                    70:4e:27:a5:c2:b2:51:5b:df:da:ef:f8:37:4f:06:
                    61:8e:0b:08:f1:6c:3d:25:12:ba:69:8e:a4:c5:86:
                    15:c8:1f:79:a2:88:08:96:71:23:1b:61:9a:0f:14:
                    fa:97:c5:91:82:9e:c8:cc:c6:66:9a:c8:4f:c1:dc:
                    b7:af:9b:79:d4:20:4f:7d:4a:19:26:da:2b:28:23:
                    f1:fe:2c:41:61:e8:a5:44:2b:09:c7:3b:14:69:6d:
                    6b:4a:af:41:a3:4e:15:eb:39:85:39:99:67:9b:7d:
                    92:65:cc:9b:cf:87:fe:c7:26:da:3d:ba:e1:37:29:
                    6a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E6:72:7D:46:A8:3D:FE:89:65:C8:C3:1F:5A:AC:0D:AB:B5:B6:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/51efee9c-4595-4144-8b00-687d5d4d64a7/86fa017f-21a6-392f-8747-fcd0b380064d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/51efee9c-4595-4144-8b00-687d5d4d64a7/51efee9c-4595-4144-8b00-687d5d4d64a7.crl

            X509v3 Authority Key Identifier:
                keyid:14:40:E8:BF:37:0F:42:6B:CF:0F:2A:93:A4:F8:4C:60:E4:34:71:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/51efee9c-4595-4144-8b00-687d5d4d64a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.12.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ee:ce:f0:ba:48:54:7b:24:78:37:d1:0d:f0:b9:a6:c6:d7:
         03:e0:4a:19:d2:7b:f1:4e:17:35:f9:b4:5a:73:24:ed:f0:66:
         41:ee:ff:b4:fd:00:67:bd:e6:82:37:b5:ad:1b:b5:98:d1:13:
         dc:41:70:c0:b0:e2:37:8d:32:93:2a:12:65:9c:d8:3f:10:63:
         30:93:42:1f:36:1e:d9:8e:b8:eb:33:35:54:fb:86:75:24:e3:
         9b:f0:e0:83:e7:7e:c8:18:19:fa:24:8d:a0:ee:7b:03:84:22:
         27:27:59:7f:0f:39:45:de:1f:7a:e3:63:26:75:23:15:76:ae:
         74:55:a0:3a:32:92:10:b9:af:e6:49:20:5a:89:4d:3d:c4:49:
         07:df:53:27:a1:c6:ec:73:f4:9b:80:48:a3:2b:d4:4d:50:df:
         5a:4a:1d:23:3d:0f:c7:bc:15:b6:8f:b9:54:d3:4b:0b:23:02:
         27:3e:bc:53:1a:f7:c2:a3:78:d9:c7:ae:07:ef:76:1e:03:16:
         c7:3e:7c:45:36:46:d1:7d:b6:09:5b:af:bf:6b:84:14:27:04:
         7f:96:1d:5f:56:59:f4:7a:6f:49:8f:52:05:ad:19:6c:20:97:
         55:17:87:e8:20:f8:1f:03:45:62:bb:78:ea:84:a3:81:71:d6:
         0e:67:a1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----