Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f7e9177a-305a-3be9-9aef-0b228a66de1d.roa
File:                     f7e9177a-305a-3be9-9aef-0b228a66de1d.roa (raw, json)
Hash identifier:          2aumeo2j6zAEZPcDcKeeplEeMqC3vXa6Wuv31USAFHM=
Subject key identifier:   97:39:84:22:22:CC:79:87:BB:50:4D:E7:21:1B:1F:81:EE:C6:2E:86
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584829E30ACF20277A161B1FE800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f7e9177a-305a-3be9-9aef-0b228a66de1d.roa
Signing time:             Tue 10 Dec 2024 20:12:29 +0000
ROA not before:           Tue 10 Dec 2024 20:12:29 +0000
ROA not after:            Mon 10 Mar 2025 19:12:29 +0000
asID:                     6167
IP address blocks:        97.207.132.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:29:e3:0a:cf:20:27:7a:16:1b:1f:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 10 20:12:29 2024 GMT
            Not After : Mar 10 19:12:29 2025 GMT
        Subject: CN=63b98ae0-fa70-49b1-9907-e0ee617db95e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9a:31:d4:1e:93:00:07:e8:f8:dd:17:51:d2:
                    5d:73:99:c3:a4:b3:32:22:53:ee:3f:41:03:ae:67:
                    aa:ab:61:60:4d:40:14:45:f1:cb:db:9f:2d:81:bd:
                    9c:4d:cb:6d:fe:77:3b:9c:d2:6a:04:d3:b1:e9:a9:
                    17:69:67:ae:6e:57:c1:51:e1:d9:21:c7:da:f5:3b:
                    aa:eb:35:d6:6a:a3:88:20:43:bb:b9:b8:87:d3:4b:
                    ac:a1:41:44:27:c2:90:f1:ee:8f:ba:ee:1a:75:81:
                    8a:75:1d:fc:a5:ba:ca:33:c0:11:b9:8d:e1:06:58:
                    cd:92:3e:96:82:0b:9a:34:10:0e:c8:86:a2:a3:67:
                    fd:d1:a9:17:5e:19:48:f2:bc:bd:76:d9:3f:df:dd:
                    7f:aa:af:65:b2:76:d9:53:e9:88:e4:fd:2d:45:68:
                    1a:0b:e0:cb:0a:99:c4:cd:a2:9d:6f:fa:07:68:6e:
                    a2:5c:fc:20:80:85:cc:7c:f4:cb:39:b4:58:5f:98:
                    9a:4f:53:50:f1:1c:47:95:fd:7e:db:34:25:c8:73:
                    68:6f:49:7e:7c:c9:2f:df:82:f7:15:02:d8:29:e1:
                    cc:1a:76:1f:e9:c3:a0:f0:c0:ce:ae:96:32:a9:96:
                    d7:bf:6b:bb:ea:bf:12:1e:eb:3f:4a:60:cf:af:37:
                    5b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:39:84:22:22:CC:79:87:BB:50:4D:E7:21:1B:1F:81:EE:C6:2E:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f7e9177a-305a-3be9-9aef-0b228a66de1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.207.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:18:53:33:16:7e:db:d9:d1:2f:30:18:e3:56:0e:6c:74:f7:
         a0:9d:aa:90:34:31:75:74:64:3c:f3:91:41:de:bf:71:61:53:
         67:d7:9e:cd:e1:84:50:1b:64:9a:3c:b9:a6:1f:8d:30:25:8f:
         d1:37:e7:fe:90:7e:2d:55:7e:a6:73:8f:a0:a9:78:50:fb:81:
         f8:c7:07:39:f4:c6:c9:97:bb:91:ae:d5:3e:f9:6b:41:73:af:
         d9:6e:be:c5:fe:aa:da:9c:8a:e0:f7:d4:fa:42:25:c3:e2:cb:
         c9:7a:b8:6d:ec:e5:83:ee:75:6c:42:05:c5:b7:60:69:00:c1:
         8e:02:56:a1:d3:96:6c:bd:aa:55:e2:19:3e:21:b9:81:09:27:
         a2:84:21:d8:a6:3d:e1:d9:d2:1d:42:77:f4:5e:8c:e6:0e:f0:
         7b:16:86:c6:b9:99:a2:20:5d:82:d2:12:d4:20:70:d8:b3:1e:
         81:50:4d:cf:9d:ae:17:b8:ae:fc:e0:a0:c9:cc:55:b4:9d:f1:
         e4:d2:b5:52:dc:bc:cf:fe:7c:a7:d4:95:f8:ff:35:f0:6f:5a:
         b8:40:cc:f3:5f:5c:c8:cc:26:4f:ec:0c:61:f1:05:89:45:58:
         15:51:52:ff:4e:04:a2:2d:0b:89:a0:4a:7c:ea:13:c5:8a:b2:
         88:99:95:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----