Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/890756c8-89bc-3860-9d7e-6e5218522bfe.roa
File:                     890756c8-89bc-3860-9d7e-6e5218522bfe.roa (raw, json)
Hash identifier:          hG4WW/GHrF0KQWhMCYpB+fawWtFJIvdgZW0fD095SLU=
Subject key identifier:   11:0E:01:45:BB:B2:F8:9D:AA:AA:EE:B5:D7:12:B4:AB:B1:0F:5A:B8
Certificate issuer:       /CN=6bf0b484-94d2-490f-8a68-d7588d1f3683
Certificate serial:       010D0C9F43285848090FB64014FA418827AD1100
Authority key identifier: 2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/890756c8-89bc-3860-9d7e-6e5218522bfe.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     397444
IP address blocks:        208.68.4.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:b6:40:14:fa:41:88:27:ad:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf0b484-94d2-490f-8a68-d7588d1f3683
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=50f88aa8-9ed2-4cfd-bff9-ac9dbfdeb2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:52:f5:11:45:e9:cd:dd:53:91:35:57:fa:13:
                    f3:48:1a:62:c6:f8:d2:dd:75:64:93:88:9c:b2:cc:
                    8e:80:b7:47:54:5c:49:52:cf:4a:39:04:48:e7:1e:
                    5a:1c:f3:57:ba:c8:3f:b1:a9:1d:23:64:0c:50:f5:
                    a6:d0:38:75:82:ba:9a:f7:ad:ea:5b:a2:70:f2:a3:
                    35:07:27:6a:ad:50:db:8d:de:11:36:af:34:ca:2f:
                    4c:33:cd:ba:8f:0a:f7:2d:82:7f:15:ba:dd:79:62:
                    d3:5f:70:2d:d9:dc:ec:dc:30:93:22:7c:6c:72:29:
                    e6:70:4a:ae:68:ba:cf:5f:8f:a7:17:da:b8:cf:e5:
                    e4:4c:6b:9b:de:1a:35:e6:7f:06:c1:09:1a:de:36:
                    2b:93:0c:d1:48:01:e0:6b:8f:48:16:37:99:3a:3b:
                    14:5f:f7:de:9f:85:bb:2e:30:87:09:2f:26:11:1c:
                    15:54:fa:5a:52:7d:f2:bd:5a:6b:3f:2a:1b:e3:d7:
                    70:93:18:f5:1e:10:5a:0c:83:5c:9f:b7:5c:ce:51:
                    fd:18:f8:e4:3e:05:e9:84:08:ec:a6:cd:58:1a:6e:
                    03:68:50:bf:4e:89:b5:dc:56:5a:cd:8e:9e:1e:0a:
                    d1:55:21:cf:df:16:6a:5d:bf:5f:f4:d8:9a:e3:6a:
                    37:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0E:01:45:BB:B2:F8:9D:AA:AA:EE:B5:D7:12:B4:AB:B1:0F:5A:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/890756c8-89bc-3860-9d7e-6e5218522bfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl

            X509v3 Authority Key Identifier:
                keyid:2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:54:88:2a:22:00:a5:57:4d:a9:40:d9:0c:fe:01:0e:b1:57:
         94:c7:87:8e:bd:ae:47:fd:ea:ba:6e:72:6c:eb:06:d7:2d:85:
         f1:75:1e:f7:1c:9c:2a:f1:2a:95:e9:7b:46:6b:db:68:db:76:
         7a:5a:6a:17:64:4f:bf:25:2b:e2:09:fc:88:4b:5a:d6:2d:fd:
         ed:a5:7b:79:40:bb:20:52:01:87:46:05:42:29:9d:28:02:4f:
         7a:d9:20:ad:68:e1:7d:8e:14:78:7d:6a:8f:58:83:7a:ae:57:
         6d:07:bf:24:a3:61:33:8b:57:57:2e:e2:15:74:50:fa:33:69:
         1f:b3:9e:8c:74:e1:b3:3d:f3:e3:2b:c6:8e:a9:ce:d3:83:18:
         bb:99:59:a0:12:69:ab:53:12:9f:ec:bc:ee:b8:2e:b8:45:4e:
         b3:4b:e7:e5:0e:25:14:0f:79:cc:11:fc:8b:45:1d:fc:f5:0c:
         f7:41:0d:2e:7e:29:1d:fb:c1:e0:b8:f7:3a:5d:c3:29:57:69:
         40:36:5e:de:12:15:9a:42:d7:55:cb:c6:b7:0f:bf:b7:8f:6f:
         31:9d:99:2c:8d:9b:f7:a5:40:e2:15:26:43:38:ca:e0:68:1c:
         e9:a3:58:0c:77:60:c2:31:84:79:c9:0c:ec:61:49:8e:ab:5d:
         74:5c:21:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----