Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/675d4af7-5725-33fa-bfda-fff3218e3d37.roa
File:                     675d4af7-5725-33fa-bfda-fff3218e3d37.roa (raw, json)
Hash identifier:          veZMxfJlCcZncriGTUsHQsH3kQlR5vkDgQPe3N8s8JE=
Subject key identifier:   2E:CE:97:94:6A:A0:22:24:D8:E0:97:02:24:77:44:61:87:EC:06:F4
Certificate issuer:       /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Certificate serial:       010D0C9F432858480BDA6CF29F4C472DDF594BC0
Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/675d4af7-5725-33fa-bfda-fff3218e3d37.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     3807
IP address blocks:        207.196.176.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:6c:f2:9f:4c:47:2d:df:59:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=232b07bf-1315-4823-a470-c9bcfb15d467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f4:3a:a9:d7:7b:b5:f0:5a:e4:cb:01:1b:fc:
                    2a:73:d3:d5:c6:26:34:cb:61:9f:88:40:90:8e:37:
                    52:22:19:99:81:ca:da:57:4b:df:84:58:c4:61:f2:
                    71:11:c0:71:64:26:da:fe:d9:9e:29:66:af:a3:16:
                    db:8a:65:cb:ac:68:0a:79:98:db:ff:43:f5:c9:07:
                    13:cc:b3:7a:72:2c:97:33:38:1a:16:dc:02:89:8a:
                    c2:34:22:ca:4c:05:79:8a:39:53:1c:e6:31:31:c4:
                    d3:c4:6a:14:b4:c0:db:68:8e:0f:87:d0:f5:85:f9:
                    67:fe:c2:b4:15:9d:91:00:36:65:cd:41:45:1c:7a:
                    2f:76:f2:65:e7:d0:93:bf:d2:47:c5:ef:12:de:97:
                    10:64:59:b9:ec:c4:55:97:e1:86:f0:81:b6:56:cc:
                    f6:5e:95:60:8d:f5:cd:5c:22:2b:84:6f:c6:6a:60:
                    05:a4:45:1d:02:66:45:62:f8:11:43:c0:47:fd:3b:
                    fa:3b:3e:52:0d:3a:ca:2b:ed:62:58:a6:c9:5d:15:
                    6e:13:eb:88:6a:86:20:42:91:c7:45:8f:cb:25:55:
                    3c:00:81:d9:4d:06:74:22:de:04:98:cd:d7:d9:78:
                    e2:05:d9:46:1a:84:fa:cd:cf:f5:9a:fb:c8:ad:4e:
                    02:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CE:97:94:6A:A0:22:24:D8:E0:97:02:24:77:44:61:87:EC:06:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/675d4af7-5725-33fa-bfda-fff3218e3d37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl

            X509v3 Authority Key Identifier:
                keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.196.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:7e:8b:48:7f:9f:58:cf:35:2f:5a:7d:6e:93:8e:4a:57:00:
         85:41:12:4e:95:ce:3e:49:a3:d8:62:18:a1:0e:ec:fe:ee:5d:
         55:9c:32:8e:e6:32:94:92:ee:d0:92:e9:48:e5:23:9b:dc:d5:
         97:d9:29:cb:6d:b5:0c:bc:fc:99:d2:47:c4:70:e5:5a:f2:55:
         0a:51:6e:9f:46:62:fd:1a:4f:c7:82:96:fa:a1:e2:dd:d7:28:
         05:f5:52:2e:1b:33:02:e2:27:9a:8c:43:7f:8a:45:94:db:eb:
         23:4d:70:3f:70:1f:86:aa:86:8a:a4:32:72:d4:ab:98:ee:25:
         00:99:3d:97:38:33:69:ca:b4:8e:63:6f:e9:fe:f1:76:c6:ef:
         c5:36:c1:ff:49:14:d6:b4:75:ed:99:b6:e0:8b:e1:a1:e6:ce:
         96:7e:ab:47:7a:9c:f9:be:cd:7f:96:fb:f0:c2:cb:a2:1a:48:
         c4:ff:1b:84:b0:1e:d2:e9:fa:83:ac:85:12:c5:7c:97:17:a0:
         d9:ce:4d:50:59:30:71:2a:46:b3:41:ff:ee:b3:ea:11:06:99:
         e0:81:79:f9:54:8d:8b:51:60:fa:95:b8:6f:3a:9a:8c:35:84:
         28:eb:16:07:91:86:53:b3:d6:fb:72:d1:3f:7d:81:6d:bd:7c:
         1f:b9:84:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----