Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/6140ba38-d138-33fa-85cf-2c082c0eedf8.roa
File:                     6140ba38-d138-33fa-85cf-2c082c0eedf8.roa (raw, json)
Hash identifier:          kkY8Q/r8JBPeEYcbpiCryWpXX87kNa9nUlrHIzBQKIM=
Subject key identifier:   47:B9:2C:29:D5:5D:5D:7B:1D:A4:13:B7:14:1F:5E:7C:A6:F8:FC:36
Certificate issuer:       /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
Certificate serial:       010D0C9F4328584827C54080D9A9F678F7572560
Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/6140ba38-d138-33fa-85cf-2c082c0eedf8.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     20454
IP address blocks:        64.38.252.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:40:80:d9:a9:f6:78:f7:57:25:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=98c565cf-ffc6-4ef0-ba64-fc918119a3e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:f1:e1:7d:13:b6:0f:e9:54:c3:ac:aa:0e:
                    4f:2e:0e:10:ff:d3:16:7a:b2:d5:1a:47:77:ae:8f:
                    81:e0:6d:67:6a:d6:5d:9c:e4:dc:e9:9c:35:11:83:
                    95:12:a3:7b:9f:1d:8b:0a:68:7a:c8:95:8d:eb:d1:
                    a1:49:ef:50:7a:8d:98:25:bc:8f:1a:e4:1d:a2:0c:
                    d6:0c:10:90:a1:03:4c:9e:fe:1c:6a:1e:00:c0:da:
                    aa:d4:c1:87:e8:a4:fd:89:c6:a7:49:70:03:e4:cc:
                    fd:1e:12:43:5a:12:f0:92:01:e1:e0:03:27:25:83:
                    62:b8:ed:88:20:1a:97:15:99:37:e0:90:af:3e:d8:
                    ae:d2:a5:62:58:c0:93:c6:dc:76:17:70:17:4d:ed:
                    0f:71:43:5b:6f:d3:f3:a4:2c:b8:87:ee:90:fd:18:
                    7f:52:ae:07:05:e7:0d:a9:ef:59:a6:c7:4b:86:88:
                    a9:63:78:86:eb:b2:47:f5:3b:c8:96:bb:5d:ac:36:
                    70:4c:93:ef:d6:e2:77:66:e2:21:70:93:8e:b3:3e:
                    3a:b1:4a:e1:e1:e9:ea:49:57:f0:74:c9:01:49:d3:
                    06:80:c2:bd:55:ca:0d:b0:dc:dc:0c:e4:06:9d:86:
                    fa:5a:9e:f3:90:57:3a:11:1d:c0:64:21:b3:11:03:
                    21:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B9:2C:29:D5:5D:5D:7B:1D:A4:13:B7:14:1F:5E:7C:A6:F8:FC:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/6140ba38-d138-33fa-85cf-2c082c0eedf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl

            X509v3 Authority Key Identifier:
                keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:07:d2:92:95:01:85:39:34:43:42:ef:ce:66:47:aa:66:5a:
         aa:5f:ed:7a:51:c7:de:1f:f8:3b:4b:79:04:6c:37:35:b5:fc:
         55:42:4f:82:f1:69:58:a7:41:c4:44:36:9a:1a:2a:c4:dc:3d:
         41:12:b5:a2:f3:e7:1e:0d:6e:3f:3f:73:e5:2e:dc:4e:5f:92:
         f8:32:d8:e9:21:59:3f:c6:cf:e0:83:1a:50:b3:68:ce:70:93:
         8f:10:f1:15:5b:5b:d5:3b:9f:26:f1:fc:d1:bb:06:bf:2b:76:
         72:2c:42:e9:3a:b8:97:bb:1d:9a:0e:93:4c:28:b4:08:c0:83:
         98:58:b7:37:93:dc:bf:76:a1:e9:10:5b:28:83:3a:da:2a:e1:
         f5:7d:9b:78:08:1e:67:09:7a:cc:56:73:ac:9d:44:17:4e:86:
         46:24:82:45:79:01:2f:e0:16:29:7a:8e:28:ac:76:c5:52:dd:
         1b:03:3b:4b:fb:c7:1c:54:25:da:26:a4:70:8e:b1:00:c5:b2:
         72:d4:61:15:30:c3:0e:b3:65:dd:d1:a4:9b:03:1d:33:16:ba:
         6f:f7:22:68:1b:b5:15:80:93:77:57:6e:05:66:54:7a:17:0b:
         6d:af:42:77:56:ef:32:b1:02:b8:5d:01:38:46:ca:6d:c9:ca:
         4e:7b:58:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----