Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/0799c6c3-fa33-38b0-85b7-253ce955c08d.roa
File:                     0799c6c3-fa33-38b0-85b7-253ce955c08d.roa (raw, json)
Hash identifier:          cAkkqv2FBzAZnV91f3ksAKhAAeDedOk9lFAJhyowjAg=
Subject key identifier:   1B:BD:F1:B4:C5:0C:C6:69:D0:F8:05:AA:E1:24:AB:9E:C1:07:AA:58
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F432858482EBFFB4A55EFE21971E46D00
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/0799c6c3-fa33-38b0-85b7-253ce955c08d.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     13807
IP address blocks:        97.107.198.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:bf:fb:4a:55:ef:e2:19:71:e4:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=37f88dc9-3cd9-4bae-b8d9-2ad693df2974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c6:ca:e4:9d:9b:e3:45:a3:2a:e0:74:73:a8:
                    84:f9:27:3a:ef:59:3b:d4:d8:73:57:e0:aa:17:61:
                    95:15:24:ca:c2:fc:f1:4c:a3:b8:9c:2e:73:84:40:
                    6a:0e:c8:21:9a:95:dd:be:5d:d4:dd:69:53:e6:d6:
                    e1:45:c1:92:2a:db:b7:49:c3:4d:13:d4:37:46:4a:
                    4e:b2:82:17:c7:8e:21:92:21:f0:41:49:82:c1:96:
                    86:fd:60:0e:2f:cf:3d:c8:17:dc:aa:58:d4:60:72:
                    5b:4d:51:b3:30:07:ec:11:4b:0b:e2:23:1a:3c:73:
                    45:66:60:48:e4:c3:a9:7b:c7:cc:6a:73:bb:f3:22:
                    25:ed:4a:6c:44:1b:78:f6:a3:17:b2:e4:fe:10:e7:
                    6d:f5:19:77:00:35:28:c9:11:ba:77:7f:8a:96:2f:
                    4e:8e:4d:94:43:2b:31:c1:61:6f:4b:ae:3d:24:c4:
                    41:2e:d5:65:d3:6f:d6:0f:dd:84:47:59:ae:50:b5:
                    86:da:61:1a:d3:be:3c:7d:4c:2b:2c:67:39:aa:4a:
                    48:fd:24:f0:a8:60:52:6e:f2:78:c0:71:b9:a8:a0:
                    0b:db:51:37:dc:8d:4e:7d:8c:e4:70:47:5c:60:6c:
                    2e:0d:a3:81:c3:02:1b:18:ae:26:6e:42:63:ec:30:
                    87:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BD:F1:B4:C5:0C:C6:69:D0:F8:05:AA:E1:24:AB:9E:C1:07:AA:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/0799c6c3-fa33-38b0-85b7-253ce955c08d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.107.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:cb:aa:33:74:a8:12:a4:32:98:05:e3:6f:fc:d7:cf:ae:f7:
         17:ea:c5:76:0d:fa:44:14:91:40:72:ab:8e:47:07:42:0a:34:
         a6:c9:7b:19:2b:8a:f1:91:f8:68:c9:07:57:f7:af:ca:b9:95:
         da:bf:64:be:85:31:68:6e:25:65:2a:c9:de:65:09:ea:69:e8:
         65:58:5e:a0:c3:0a:e0:cd:64:e2:cc:af:27:5f:ef:73:a3:d4:
         5f:7d:04:e9:76:6d:a2:3e:94:42:fb:0e:f1:b0:f1:44:a2:ac:
         09:60:3f:3d:85:6b:ba:2e:87:1d:1a:6c:7a:2b:13:40:e1:fc:
         5e:f7:21:fe:e7:43:1a:0a:40:c0:1f:d2:6c:27:7d:74:1e:08:
         ec:7e:f3:96:c6:0c:d8:cc:6c:cd:3a:85:f7:eb:30:fe:8c:d0:
         de:af:cc:ff:74:b2:c3:16:cb:98:db:4d:dd:29:2d:57:47:41:
         f7:e0:12:74:3f:7b:83:d2:f2:b9:e4:3f:58:d4:fd:a4:e5:4d:
         3e:c6:bd:b5:04:df:c3:94:3f:b1:54:dd:ff:18:9d:74:c3:64:
         8a:8a:81:54:0d:ff:02:98:b8:9d:ff:c3:83:f2:09:07:6c:d0:
         6d:67:ab:d2:96:fb:8f:31:f3:89:5d:43:19:b0:d5:77:b6:be:
         39:52:7d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----