Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5491f734-a589-3b90-b8fc-942c87d8a81e.roa
File:                     5491f734-a589-3b90-b8fc-942c87d8a81e.roa (raw, json)
Hash identifier:          SplRGka2KeKcoakdsjISynl+p6mM9QzkJwolsuMkc08=
Subject key identifier:   38:33:D5:C8:01:08:3C:68:65:AD:59:04:24:68:0A:66:12:03:A2:30
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584832F04E24197CD368BCA2D580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5491f734-a589-3b90-b8fc-942c87d8a81e.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     701
IP address blocks:        70.16.0.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:4e:24:19:7c:d3:68:bc:a2:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=ab2b21ff-6ca6-4dd0-bcf0-9af58bd9dff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:47:43:e4:fd:21:55:7e:a0:c1:f9:a4:2c:ef:
                    19:b5:86:97:66:12:76:b7:8c:bf:ec:81:84:4f:63:
                    5d:6e:c6:21:15:ef:77:7a:10:cb:31:90:74:af:3f:
                    0b:5d:ac:e6:88:0a:bf:52:69:1f:e5:bb:ba:2f:fe:
                    33:a2:64:30:a6:b7:ef:bd:8c:2b:8d:aa:d0:c7:89:
                    3a:77:64:43:65:d2:e5:a3:36:47:57:c4:de:3b:46:
                    f4:3d:f5:94:29:89:51:48:17:ac:60:cf:18:7d:04:
                    78:4b:6e:b5:39:4b:0b:86:cb:96:8d:55:09:9c:fd:
                    57:d7:10:59:13:e9:f0:5d:df:5b:85:e4:ac:4c:1b:
                    51:eb:97:52:13:96:a7:fc:30:ad:ff:b1:5e:8c:f4:
                    7b:2f:a3:4b:19:c1:35:50:4b:dd:0e:b6:43:10:e1:
                    fe:b1:95:60:29:af:75:a3:79:80:33:8a:52:6c:5e:
                    38:65:00:da:cf:18:d1:48:c3:12:0c:f9:62:66:42:
                    c9:37:bc:3d:54:8b:9e:9e:4f:ba:da:2d:50:27:81:
                    cb:cd:02:4c:e4:54:ec:9f:b7:3d:51:1f:07:46:99:
                    80:e6:03:8e:42:7f:f5:69:10:f8:a0:d9:5a:ca:a3:
                    5c:f0:31:2a:a6:27:86:09:b7:92:6e:96:f1:37:f6:
                    08:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:33:D5:C8:01:08:3C:68:65:AD:59:04:24:68:0A:66:12:03:A2:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5491f734-a589-3b90-b8fc-942c87d8a81e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.16.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:6d:e0:77:fc:c3:1f:b9:0a:22:c1:d3:e1:88:39:d5:19:2a:
         dc:d7:8b:b6:1b:89:5a:f5:e4:fe:21:5a:71:38:1d:b8:e0:74:
         a2:bd:2e:61:06:b7:8c:4c:de:3b:25:46:17:b1:a2:ff:16:d4:
         93:17:41:20:81:b8:83:33:1a:8c:22:8a:f2:bf:58:29:20:42:
         e1:35:16:b0:90:8c:7d:dd:cc:a6:4e:4a:6e:6e:32:83:87:1b:
         2a:a4:58:97:31:a9:0b:ca:42:cd:72:a4:a3:0c:1a:93:cc:6a:
         f8:43:81:d9:10:7e:68:cc:97:60:3c:71:66:2c:d7:e9:e0:51:
         c7:ff:08:14:e0:5e:69:48:9f:a2:67:50:00:e4:d5:41:55:2f:
         bc:29:47:cb:43:c3:f7:85:44:9a:4d:ff:ac:77:89:01:16:e1:
         45:e1:6d:4b:84:0d:cd:5a:bd:c3:58:36:08:da:7a:4b:18:22:
         3d:d3:90:4e:e6:74:54:4d:92:6b:f9:ae:7d:af:d7:3f:eb:40:
         87:d6:c5:61:12:e4:68:78:fe:44:9b:98:4a:08:8b:aa:c8:b2:
         69:b6:a7:94:22:b9:e6:49:d7:5c:51:61:35:bd:c6:22:2d:79:
         f6:74:46:de:0e:a9:5c:f7:f7:1f:ef:05:c0:b5:24:a5:c1:ae:
         0d:a8:ad:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----