Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/9dae1eef-b51b-3bf3-87d7-7524f49f6087.roa
File:                     9dae1eef-b51b-3bf3-87d7-7524f49f6087.roa (raw, json)
Hash identifier:          7AAgIK6ForRDbVs8D4n+eeZDb+kAYFM2J3JYimIvUN0=
Subject key identifier:   A8:0E:18:CF:BC:7C:F5:B3:38:CB:D7:1D:6F:D4:E7:CF:04:16:89:4D
Certificate issuer:       /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
Certificate serial:       010D0C9F4328584855D5A1A7A7F575D2E951C280
Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/9dae1eef-b51b-3bf3-87d7-7524f49f6087.roa
Signing time:             Thu 26 Dec 2024 14:00:52 +0000
ROA not before:           Thu 26 Dec 2024 14:00:52 +0000
ROA not after:            Wed 26 Mar 2025 13:00:52 +0000
asID:                     12430
IP address blocks:        47.62.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:55:d5:a1:a7:a7:f5:75:d2:e9:51:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
        Validity
            Not Before: Dec 26 14:00:52 2024 GMT
            Not After : Mar 26 13:00:52 2025 GMT
        Subject: CN=054e9624-3857-4a15-a6b9-cf0f790dca51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c3:84:64:21:e3:8a:69:2a:2d:f8:70:90:32:
                    aa:50:2e:23:6e:33:dc:7b:b3:3f:0f:48:b5:cf:30:
                    74:ac:86:8d:68:be:c6:fc:7a:b4:ad:27:06:ec:60:
                    a6:9a:4e:6c:0c:13:8b:87:9e:59:5c:7d:ab:57:99:
                    e3:1a:35:c5:32:88:27:0e:8c:6c:35:c2:b7:8f:ad:
                    e5:fd:c9:6a:88:78:28:41:11:b7:69:6c:49:b1:b1:
                    ae:9f:32:f4:8b:1c:29:7b:48:bc:7d:05:57:68:2f:
                    9a:e0:e8:29:64:87:39:3d:b4:5a:ba:db:21:ed:f5:
                    90:d7:82:e7:a6:be:87:71:51:51:51:8e:6b:0f:c0:
                    79:96:f6:fb:10:34:6c:6c:93:20:3c:9e:53:66:11:
                    ef:72:e9:5f:45:c1:20:b3:10:a9:c0:da:fd:7b:d6:
                    76:4f:4d:6b:c8:65:e6:5a:fe:4a:06:70:0b:c5:02:
                    38:2c:f8:ae:b7:58:ba:b8:82:9d:10:64:d6:b2:88:
                    0e:4d:c2:3e:da:1c:9a:3e:0a:ef:ba:52:b8:8a:1b:
                    f2:c6:e8:2b:55:fa:87:f7:89:1c:c7:54:09:56:61:
                    e8:d1:39:43:e0:f7:80:10:fc:ee:bf:cc:02:ab:45:
                    d1:f4:28:df:c0:f9:9d:d2:0c:43:4a:77:54:5b:83:
                    36:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0E:18:CF:BC:7C:F5:B3:38:CB:D7:1D:6F:D4:E7:CF:04:16:89:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/9dae1eef-b51b-3bf3-87d7-7524f49f6087.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl

            X509v3 Authority Key Identifier:
                keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.62.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:db:90:68:bf:ac:b4:9a:ff:ae:2e:60:27:87:75:46:a3:95:
         76:7c:c0:d6:45:5f:41:21:6c:bd:d8:5a:93:cc:f2:45:1f:b7:
         2f:fd:c9:dd:e1:82:22:b8:f8:f5:4f:3c:fd:20:d2:25:ef:27:
         b0:ae:65:e7:49:2f:ac:97:92:b0:92:17:fd:b2:a4:76:08:68:
         25:03:bb:93:91:7f:d7:12:49:18:3d:9a:37:38:88:dc:62:01:
         42:7d:0f:cc:ac:22:ad:1f:c3:3b:5e:09:3f:18:33:35:02:a7:
         fb:53:93:4e:9f:25:40:4f:88:2f:7b:9b:74:b3:aa:fa:4e:36:
         83:cf:36:0f:eb:9c:16:4a:cf:e0:d6:cf:76:16:c2:d0:ff:49:
         70:2e:5f:91:7f:3c:7e:e6:b1:73:75:a5:d0:ca:2d:9f:1f:18:
         fc:96:a5:68:fd:26:4c:98:1c:d8:50:d2:eb:3d:66:f0:19:ab:
         59:b9:3f:86:e8:24:96:c6:39:3f:90:c9:f5:45:01:04:1d:2c:
         36:11:6a:32:4f:2a:34:05:51:02:0d:71:8e:3e:55:6f:b0:5b:
         93:61:f8:1d:4d:b7:3b:c1:53:95:46:f6:69:2f:e9:e2:ea:ac:
         0f:2b:86:2f:d2:aa:74:7d:48:30:9e:e5:63:ac:7a:d8:d0:ac:
         0d:d0:f5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----