Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/58165949-ec1a-34af-af0b-d904d66bfab4.roa
File:                     58165949-ec1a-34af-af0b-d904d66bfab4.roa (raw, json)
Hash identifier:          zcidFdGSgWSQ7ZgNTIX8mMcqcBiPratl+qxYPUKt5i4=
Subject key identifier:   6E:B8:45:01:49:8A:47:8A:82:27:0A:4C:A8:BF:F1:46:C6:1C:DF:15
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848424B1569E2B0650422324EE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/58165949-ec1a-34af-af0b-d904d66bfab4.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        97.180.224.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4b:15:69:e2:b0:65:04:22:32:4e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=3b3489f7-4781-4a93-a4fb-c0fc98757ddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cd:03:db:9e:a8:06:ca:72:93:e3:b0:44:2e:
                    d9:41:2d:fb:83:08:18:f0:f5:f5:51:90:71:5b:e2:
                    9f:f8:89:9f:c0:f5:18:36:e6:18:8b:13:b3:89:f6:
                    07:23:37:2f:65:66:34:ae:ab:18:f5:57:75:d3:33:
                    45:c0:83:21:fe:10:8e:19:42:c2:39:37:18:d5:08:
                    b2:e5:71:cb:ea:16:70:ee:25:2f:4e:02:2c:5a:67:
                    e5:31:27:99:e7:da:9f:ba:86:8a:f8:ce:78:9d:09:
                    b9:52:a3:2b:9d:0b:39:20:4c:4e:ae:ef:73:3d:ab:
                    f0:de:38:a3:dd:27:78:ec:e6:b6:ef:85:44:fd:2e:
                    69:f0:59:19:e4:d7:3a:bb:65:36:d2:af:22:40:11:
                    db:e6:87:1d:37:59:60:87:5c:34:75:94:2b:a5:40:
                    bc:89:45:86:b1:1e:b0:35:97:b5:06:bd:31:1f:0f:
                    20:2f:4d:c5:f5:2a:51:88:27:f4:1c:21:60:46:3b:
                    f9:53:e5:09:4b:48:65:df:e0:7f:bf:bb:8e:dc:de:
                    44:eb:c5:57:ce:5d:0f:d9:57:d1:aa:ad:82:f3:97:
                    c2:9b:52:04:6c:62:15:00:97:b2:b8:73:d2:14:9c:
                    9e:98:87:94:4c:c6:43:74:40:3f:5f:d5:9d:a5:82:
                    d1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B8:45:01:49:8A:47:8A:82:27:0A:4C:A8:BF:F1:46:C6:1C:DF:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/58165949-ec1a-34af-af0b-d904d66bfab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.180.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:ac:02:f5:a4:2d:f3:2e:07:6a:a6:db:cb:c4:17:b3:b8:c3:
         5c:48:e7:a0:59:30:d9:00:83:97:e3:e3:9d:e7:7a:fb:a9:b0:
         ef:d7:a1:5b:3d:31:5d:2e:f1:74:f8:05:d9:41:a6:72:e1:53:
         08:26:71:62:d1:4d:21:85:2d:88:68:4e:48:22:a7:8f:5d:6a:
         6b:8a:78:f8:ae:f3:54:60:c1:1e:31:e4:45:f3:d6:a3:99:90:
         cc:1f:7f:11:59:4b:ae:28:20:d2:9a:cb:dc:66:88:c4:ca:99:
         e1:42:3f:03:11:e1:16:ae:2f:97:6b:8f:19:73:b9:9a:fa:bf:
         83:32:e9:9f:e7:70:cd:7f:5d:22:8f:b3:32:04:da:b1:65:6d:
         6d:bb:d4:88:73:62:0e:b0:d8:78:c1:a2:b0:77:d2:78:8e:e6:
         40:3b:7e:65:28:a2:5c:af:38:2d:dc:ae:44:ad:9c:03:81:06:
         69:55:0d:2e:bc:d3:45:e1:f0:20:07:d8:a2:44:b6:9d:08:bf:
         28:47:ea:ee:0a:25:f4:b5:a7:ff:07:8b:8f:c0:ba:0b:03:a5:
         80:28:2e:72:28:a3:1c:c2:21:91:9c:1d:ca:8e:a2:9d:b8:f5:
         a1:21:a1:b3:fd:d2:ac:7b:fb:a3:14:01:81:07:78:48:81:9e:
         69:68:4c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----