Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/63ffc474-e1ec-3542-81e6-1632f95c2321.roa
File:                     63ffc474-e1ec-3542-81e6-1632f95c2321.roa (raw, json)
Hash identifier:          CQDVdx/O7AMCfIxPwIP6HYGhT8I+ZJitJwFcQFSnwgI=
Subject key identifier:   B3:A7:1A:02:94:65:06:7D:65:17:4B:6A:FB:2D:2B:3E:7A:11:FA:DD
Certificate issuer:       /CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333
Certificate serial:       010D0C9F432858482BED9CEE5A8E7ECBD553002C
Authority key identifier: E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/63ffc474-e1ec-3542-81e6-1632f95c2321.roa
Signing time:             Wed 11 Dec 2024 13:45:24 +0000
ROA not before:           Wed 11 Dec 2024 13:45:24 +0000
ROA not after:            Tue 11 Mar 2025 12:45:24 +0000
asID:                     198949
IP address blocks:        192.170.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:ed:9c:ee:5a:8e:7e:cb:d5:53:00:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333
        Validity
            Not Before: Dec 11 13:45:24 2024 GMT
            Not After : Mar 11 12:45:24 2025 GMT
        Subject: CN=5c814822-2e08-4845-84ad-06c698614fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fb:ea:e4:6e:c4:17:73:65:eb:1c:d1:22:96:
                    3c:51:cb:f3:00:a9:ed:a3:4c:20:98:5a:d0:ab:6c:
                    81:16:76:00:0f:0f:4c:1a:d8:7d:0d:61:ff:a4:c1:
                    9a:4c:52:dd:93:ac:95:ed:28:b7:21:06:03:e9:53:
                    93:55:68:03:07:2a:49:e3:32:7c:f8:60:9e:1d:74:
                    e2:84:64:c1:a5:60:a8:96:3f:6f:55:9e:b5:3b:1b:
                    cf:d2:f6:8a:07:36:14:28:5d:e1:d9:14:76:6a:03:
                    db:0c:ba:8c:c6:98:05:04:b9:2b:e7:13:c6:ac:e3:
                    56:9c:e0:e9:97:8a:70:2e:75:dc:63:ed:ad:76:31:
                    48:60:2c:4f:ad:0b:8c:c6:21:68:34:d3:2c:5c:81:
                    6b:ba:f2:b3:07:ce:b2:13:28:12:c6:9a:df:96:96:
                    b8:79:0d:39:19:75:0e:26:2d:2a:9b:c8:42:42:e7:
                    fc:5e:58:dc:99:7f:df:a1:e5:e7:81:05:28:7d:77:
                    b0:db:df:69:1d:e4:3f:d4:60:74:11:d6:9c:50:d5:
                    df:64:1b:3f:d0:b4:fe:1f:63:2d:95:06:52:27:90:
                    28:0c:16:13:96:b8:39:05:9c:f0:9d:3c:af:9c:fe:
                    e8:ef:11:30:44:76:d5:e6:e0:96:a6:f7:b7:94:48:
                    e9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A7:1A:02:94:65:06:7D:65:17:4B:6A:FB:2D:2B:3E:7A:11:FA:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/63ffc474-e1ec-3542-81e6-1632f95c2321.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl

            X509v3 Authority Key Identifier:
                keyid:E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.170.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:6f:1a:94:f6:dd:f3:bc:54:ec:17:71:80:49:27:37:c0:5d:
         d8:58:b2:b7:45:bb:ef:1c:77:d6:6b:9d:8c:0e:01:f5:84:90:
         e6:d0:cc:96:14:69:82:6f:7b:3e:13:97:df:f0:34:ce:1e:cf:
         33:4f:b9:f0:dd:d2:14:11:11:a2:d2:8e:c9:75:ec:4c:09:74:
         49:21:5c:dc:c2:84:d1:c7:48:53:df:74:aa:30:d2:8c:93:f0:
         bb:ff:3a:e7:9b:81:14:26:48:c9:76:8e:18:28:e9:d7:4f:c0:
         78:55:cd:4e:ae:ce:58:f2:16:91:5b:e8:6d:a2:84:6e:f1:e7:
         b6:6d:6e:ee:e3:e6:90:53:4f:78:3e:87:5f:6c:6f:8a:5d:b6:
         4a:96:b5:6c:bb:07:35:e0:e5:5b:c0:55:85:b2:9c:cd:aa:c3:
         2d:7b:26:36:85:e8:be:47:92:93:66:b8:3f:bc:33:2f:b2:46:
         56:f1:07:18:02:7f:0a:89:6c:a1:6e:16:6e:2c:90:9f:da:36:
         32:5a:be:12:8d:8c:fe:7e:a9:82:d3:70:7a:09:64:89:bb:ff:
         22:b1:a4:2d:42:7e:0c:1a:a4:ab:3b:76:89:c3:ea:84:fd:52:
         11:41:c3:8e:22:10:5e:c8:7b:01:a8:70:11:32:55:fa:5d:33:
         97:84:87:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgr7ZzuWo5+y9VTACwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTgyMjE1MGYtMmU2Zi00ZmM5LWIwZDMtNWE4ZTA5MDNi
MzMzMB4XDTI0MTIxMTEzNDUyNFoXDTI1MDMxMTEyNDUyNFowLzEtMCsGA1UEAxMk
NWM4MTQ4MjItMmUwOC00ODQ1LTg0YWQtMDZjNjk4NjE0ZmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfvq5G7EF3Nl6xzRIpY8UcvzAKnto0wgmFrQ
q2yBFnYADw9MGth9DWH/pMGaTFLdk6yV7Si3IQYD6VOTVWgDBypJ4zJ8+GCeHXTi
hGTBpWColj9vVZ61OxvP0vaKBzYUKF3h2RR2agPbDLqMxpgFBLkr5xPGrONWnODp
l4pwLnXcY+2tdjFIYCxPrQuMxiFoNNMsXIFruvKzB86yEygSxprflpa4eQ05GXUO
Ji0qm8hCQuf8XljcmX/foeXngQUofXew299pHeQ/1GB0EdacUNXfZBs/0LT+H2Mt
lQZSJ5AoDBYTlrg5BZzwnTyvnP7o7xEwRHbV5uCWpve3lEjpHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLOnGgKUZQZ9ZRdLavstKz56EfrdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ODIy
MTUwZi0yZTZmLTRmYzktYjBkMy01YThlMDkwM2IzMzMvNjNmZmM0NzQtZTFlYy0z
NTQyLTgxZTYtMTYzMmY5NWMyMzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTgyMjE1MGYtMmU2Zi00ZmM5LWIw
ZDMtNWE4ZTA5MDNiMzMzLzk4MjIxNTBmLTJlNmYtNGZjOS1iMGQzLTVhOGUwOTAz
YjMzMy5jcmwwHwYDVR0jBBgwFoAU6PtTQ2MJkFBb6KTESgm8RptQc+MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi85ODIyMTUwZi0yZTZmLTRmYzktYjBkMy01YThl
MDkwM2IzMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwKrAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFvGpT23fO8VOwXcYBJJzfAXdhYsrdFu+8cd9ZrnYwOAfWEkObQzJYU
aYJvez4Tl9/wNM4ezzNPufDd0hQREaLSjsl17EwJdEkhXNzChNHHSFPfdKow0oyT
8Lv/OuebgRQmSMl2jhgo6ddPwHhVzU6uzljyFpFb6G2ihG7x57Ztbu7j5pBTT3g+
h19sb4pdtkqWtWy7BzXg5VvAVYWynM2qwy17JjaF6L5HkpNmuD+8My+yRlbxBxgC
fwqJbKFuFm4skJ/aNjJavhKNjP5+qYLTcHoJZIm7/yKxpC1CfgwapKs7donD6oT9
UhFBw44iEF7IewGocBEyVfpdM5eEh+0=
-----END CERTIFICATE-----