Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0e401836-9035-3c4f-a40a-71d8886f901f.roa
File:                     0e401836-9035-3c4f-a40a-71d8886f901f.roa (raw, json)
Hash identifier:          k+pdvgovkGakh1sdWxt858b60R+uNpy09u7UgHKJxAc=
Subject key identifier:   0B:82:98:F5:B8:33:4A:6C:4B:FF:73:64:F3:70:0A:28:79:DB:7F:89
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847E1FA0A4A7592E63C9BACA818
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0e401836-9035-3c4f-a40a-71d8886f901f.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     6167
IP address blocks:        174.219.30.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:0a:4a:75:92:e6:3c:9b:ac:a8:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=1fb01f17-7e82-49c8-b16e-50174c1c3f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:83:49:2e:e6:d7:fa:0a:87:75:04:1f:22:e0:
                    48:9f:01:62:3f:22:7f:40:5e:c9:be:fe:a4:e1:12:
                    f6:fe:c4:36:a0:ba:18:fd:84:15:29:77:ac:c6:31:
                    dc:fb:10:11:01:e1:ed:cb:e8:e6:19:98:cf:8c:77:
                    e3:aa:3e:4c:48:d1:b9:55:ed:ec:14:78:50:6c:56:
                    c2:c7:6c:10:c8:4f:ce:35:a3:ce:42:7e:ce:e7:88:
                    7a:24:d7:2c:6f:80:5e:a1:f2:7e:aa:b6:60:c2:66:
                    ba:82:a1:fb:fe:7f:1d:3e:99:5d:5d:a2:5a:39:4a:
                    5f:d3:66:4e:9f:23:f9:bb:82:66:42:52:c0:00:60:
                    ea:ba:6b:6e:77:35:d9:fc:7a:63:e0:7f:28:45:5b:
                    d8:b5:bb:b9:ea:14:0f:32:40:c1:7e:fe:11:fc:17:
                    7a:af:18:dd:ed:3f:04:25:2b:dc:cf:a5:91:a5:1b:
                    84:92:b2:f8:13:cd:3d:6d:42:fc:dc:9d:39:f2:75:
                    bb:81:58:d9:50:8e:99:b8:3e:b5:87:8c:75:d6:1e:
                    23:0b:2d:47:29:b5:2a:d4:3e:9f:3f:9e:25:53:87:
                    eb:36:3f:1d:1b:e1:4d:0b:e1:51:54:00:56:c6:e0:
                    53:95:94:0f:b7:08:b9:96:af:38:43:c7:dc:2f:13:
                    73:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:82:98:F5:B8:33:4A:6C:4B:FF:73:64:F3:70:0A:28:79:DB:7F:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0e401836-9035-3c4f-a40a-71d8886f901f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.219.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:29:b6:ba:a0:db:80:07:86:01:fa:91:be:65:7a:ea:a6:04:
         e2:a5:a5:f2:a1:4d:1a:d6:84:c9:c8:86:d0:a1:6b:46:e4:38:
         f3:7e:de:5e:5a:06:7b:dc:dc:dc:73:54:4c:4b:ae:50:40:4f:
         7e:4d:ad:f5:1e:12:14:62:f0:ee:c2:91:66:88:42:99:80:8e:
         77:af:15:c4:aa:e4:8b:0e:c1:55:1d:a8:3e:e8:cc:09:17:27:
         67:84:d5:0e:b9:f5:ab:b4:bb:14:41:f6:f6:38:e4:85:f8:25:
         94:4f:f1:64:17:4e:8c:ee:77:fb:06:b9:fc:32:15:a2:7a:99:
         43:4e:a3:d6:7c:14:c5:25:8e:d1:69:14:96:a5:29:78:62:f1:
         07:b8:a5:a1:8e:ff:fc:02:04:a1:3c:4f:4f:56:54:ae:b4:7b:
         b7:d0:e2:51:1c:63:17:7a:43:b7:b0:21:16:b8:67:70:1e:61:
         27:96:63:f6:c0:36:e2:a5:be:4d:95:3a:09:11:89:16:7b:8d:
         d5:10:1e:87:f7:55:ec:c5:39:34:7e:f2:ab:cb:2e:c6:1a:97:
         9c:8c:b0:8d:dc:b7:59:b6:0a:47:08:69:c8:c4:d2:c6:f6:b8:
         c6:9d:b3:cf:49:e0:11:d1:dd:8c:59:48:f4:50:13:75:4d:0a:
         5f:3e:cf:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----