Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/32820479-a239-326c-8975-e576d45bb353.roa
File:                     32820479-a239-326c-8975-e576d45bb353.roa (raw, json)
Hash identifier:          feL5v8VahPaGWGtGs03+SoozlZlpiqPuLMddNdl3/m4=
Subject key identifier:   95:A6:DF:82:8C:D5:49:FB:43:5A:05:40:C0:9E:76:AF:15:3E:93:77
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858484D757F6A480055606FB14500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/32820479-a239-326c-8975-e576d45bb353.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     140405
IP address blocks:        2001:470:39f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:7f:6a:48:00:55:60:6f:b1:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=24731f3f-844f-4302-9012-94a72262934b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:05:98:36:9d:ea:86:1d:88:be:74:13:f9:1d:
                    f8:76:12:f0:33:55:cd:6f:1c:fd:dd:06:09:dc:b2:
                    6c:0c:f3:38:8b:a6:9c:b1:01:8e:d7:36:1d:36:40:
                    6c:48:15:ad:47:a5:4f:5e:cb:1d:9d:3d:98:01:d0:
                    fe:f0:23:37:07:e8:50:a7:38:fa:5e:bc:68:33:ea:
                    0e:8a:97:f7:89:fc:0e:60:de:df:e7:cd:85:3e:b1:
                    93:78:99:7f:3a:fd:7c:c0:a7:a3:73:1c:f5:fd:38:
                    82:64:77:71:2f:bb:ac:19:63:82:3a:80:d7:b9:e2:
                    fc:70:b4:5a:6d:c3:b4:e2:3d:29:0c:91:6d:68:a5:
                    7f:b6:63:96:37:5d:84:b8:8e:4d:17:9b:b4:e4:1f:
                    07:0a:0e:88:68:03:fa:92:5a:a6:ec:be:2b:e1:69:
                    cc:f0:42:b9:b0:fa:b9:02:88:cb:e9:dc:64:1e:d9:
                    4d:8e:2b:52:72:2f:b2:c3:12:cf:74:9c:1e:89:f4:
                    b0:ec:47:59:44:98:a5:25:47:ae:26:96:86:6c:65:
                    f0:38:cc:1c:2e:35:5a:df:79:90:e1:99:b2:7a:39:
                    03:95:f0:55:dd:48:2c:73:49:d0:13:bd:cf:47:6c:
                    3a:4b:01:2a:7a:59:9c:13:60:fc:d7:29:46:8f:3f:
                    49:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A6:DF:82:8C:D5:49:FB:43:5A:05:40:C0:9E:76:AF:15:3E:93:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/32820479-a239-326c-8975-e576d45bb353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:39f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:1f:12:27:d2:b8:9c:c0:38:c1:a7:06:37:e7:40:b9:d3:9c:
         ad:73:59:3f:c9:06:73:d4:8a:4f:84:e5:be:b1:81:ff:3b:b4:
         aa:0b:65:ba:d4:06:71:dd:63:3e:0d:42:92:e9:51:a9:6b:39:
         17:d6:88:14:42:5d:94:26:a1:2e:ef:8a:44:85:46:42:97:55:
         a2:aa:ba:a9:e0:12:05:7a:68:92:86:22:42:e1:68:f8:50:c3:
         f1:4c:08:fe:ba:cc:dd:86:69:a5:7b:21:20:cc:a0:57:70:25:
         52:1c:e6:d0:01:40:03:50:25:e6:02:11:eb:1b:ed:39:5b:cf:
         f7:f7:64:78:6c:a1:81:ea:5a:0c:38:19:15:4d:f9:00:55:49:
         0e:c6:79:64:b8:cd:33:54:93:a7:e3:b1:8c:52:9a:98:39:33:
         b0:e5:51:8c:5a:be:30:6e:d0:6f:af:3a:8c:1c:21:49:22:e5:
         cf:17:81:c7:44:7b:f2:9c:eb:58:ad:24:09:e5:cd:4e:d4:8a:
         0e:ee:8b:6b:25:6e:15:75:2f:d9:a1:59:f1:30:cf:d3:6b:f5:
         74:bf:ca:43:39:53:13:48:e4:4a:0f:79:20:df:a7:8f:5b:db:
         d9:ed:78:fe:c4:ee:7d:e7:fe:3b:e5:11:80:1a:8d:17:f1:39:
         b4:f4:73:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----