Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e/ad5e7590-c068-35c0-9e3f-642180b60356.roa
File:                     ad5e7590-c068-35c0-9e3f-642180b60356.roa (raw, json)
Hash identifier:          BCQeUCxLGJVf701Z716bykWEdzi5y/aBgfgCVLPYtJ8=
Subject key identifier:   6B:68:80:28:89:8D:28:52:17:75:1B:BE:EA:0B:F4:16:39:72:41:1E
Certificate issuer:       /CN=e6e2c8e3-cce6-4734-bf05-d45daaa2af3e
Certificate serial:       010D0C9F432858485F9ADF9EE881FF998CE11000
Authority key identifier: BA:4F:D9:5B:71:8D:D4:4B:C8:0C:E0:4A:B2:B2:53:3A:15:9A:6A:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e/ad5e7590-c068-35c0-9e3f-642180b60356.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     33412
IP address blocks:        216.170.117.0/24 maxlen: 24
                          2602:fd86::/36 maxlen: 36
                          2602:fd86::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:df:9e:e8:81:ff:99:8c:e1:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e2c8e3-cce6-4734-bf05-d45daaa2af3e
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=5b17ab74-d946-48f8-9ff9-27c25169d1e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:66:62:6b:8d:13:42:0c:33:5f:1f:26:16:c1:
                    bb:16:5a:b8:f6:47:e9:45:4a:0d:9b:3e:2c:01:05:
                    d9:8f:8a:1b:4c:70:bc:d9:a3:48:0e:6f:b9:71:c2:
                    24:9c:b2:0b:ed:a2:06:c9:b4:18:92:08:87:5b:9a:
                    5e:7e:3c:b4:f0:bf:7d:1c:d3:9e:cb:07:6d:64:1c:
                    c0:8d:db:59:b9:da:db:f2:96:67:2e:69:14:86:a9:
                    b2:05:16:22:46:8a:c5:fd:a9:2d:f5:85:40:6a:c5:
                    e5:bc:cb:2c:fd:91:a9:57:43:33:8f:97:dc:fe:9c:
                    0e:62:ec:68:68:40:e2:74:c4:4c:67:8f:c1:13:ec:
                    00:2f:2c:c2:09:95:ee:86:16:7b:55:a5:87:d2:7f:
                    d9:2f:90:31:8e:bf:8e:ca:11:2b:21:9f:d3:74:f4:
                    ca:00:7a:8f:b4:34:98:46:33:c8:43:20:3b:c4:0b:
                    58:4a:7e:79:74:e7:0f:32:0a:44:39:7a:a4:19:fa:
                    f1:50:d3:e0:53:1d:00:b5:45:2e:05:04:3e:ad:24:
                    7a:d9:f9:c3:d7:79:59:dd:b6:1a:9a:6f:ff:ac:5b:
                    43:dd:6c:a7:6d:62:b7:05:c4:64:90:bb:27:23:8c:
                    fc:27:3b:5a:15:f3:8f:10:b3:c9:f5:3b:ad:2e:aa:
                    6f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:68:80:28:89:8D:28:52:17:75:1B:BE:EA:0B:F4:16:39:72:41:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e/ad5e7590-c068-35c0-9e3f-642180b60356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e.crl

            X509v3 Authority Key Identifier:
                keyid:BA:4F:D9:5B:71:8D:D4:4B:C8:0C:E0:4A:B2:B2:53:3A:15:9A:6A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6e2c8e3-cce6-4734-bf05-d45daaa2af3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.170.117.0/24
                IPv6:
                  2602:fd86::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:eb:e3:29:1d:1c:30:80:29:57:e8:f9:ec:38:c2:f9:38:5d:
         21:f5:42:be:53:4c:0d:38:f1:f4:86:d8:ab:91:9f:2d:cf:50:
         70:8a:a8:76:5d:35:f4:4b:af:96:80:d2:1f:1d:b2:a1:77:01:
         dd:55:01:29:39:26:e0:03:18:33:bf:de:3f:fd:86:35:62:65:
         5a:60:63:65:ec:d1:36:49:f3:5b:c2:27:3d:6f:40:ea:ab:b8:
         32:48:fd:b4:b0:21:da:b6:76:31:b1:86:08:04:2d:49:ca:b0:
         73:f9:80:18:92:cf:39:80:05:5e:b2:d0:86:b0:e6:64:2a:a5:
         27:9b:7f:ec:cd:56:a7:5b:bf:a3:d2:9e:1d:c6:dc:52:a6:59:
         31:79:64:57:de:0c:03:93:ac:12:5d:5e:60:c2:dc:01:67:8e:
         43:03:8e:95:37:4c:13:42:51:b0:26:55:05:59:ed:32:00:f5:
         e0:10:1c:b1:79:17:50:bc:21:21:d5:88:a2:ce:d6:f9:38:9e:
         21:ae:c5:9b:d7:a9:85:8f:89:1e:3f:f3:18:11:1b:e1:df:3f:
         a1:54:02:e7:4b:d8:f9:e0:4e:6f:d7:ee:6f:81:eb:7b:53:b0:
         4b:f6:19:78:d1:7b:ef:9f:2b:fd:37:26:b0:e2:4b:5d:53:9d:
         0c:29:d3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----