Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f5ca213-518b-4ee7-9fb6-854fa2002a11/293b9a63-68dd-3a71-b379-c7a61017c37f.roa
File:                     293b9a63-68dd-3a71-b379-c7a61017c37f.roa (raw, json)
Hash identifier:          ENvL02FEnsNrpTRaJ18HiX6e9BIIRTEMYBSsC0VkS6I=
Subject key identifier:   15:CC:C3:85:FE:2B:A2:98:B1:73:7E:50:2B:93:3D:8B:11:12:7E:9D
Certificate issuer:       /CN=5f5ca213-518b-4ee7-9fb6-854fa2002a11
Certificate serial:       010D0C9F43285848854B440A8EEB579C6FC08C00
Authority key identifier: 6B:CB:1B:C1:65:27:AA:68:53:70:A9:D4:B6:2F:21:84:1E:C7:19:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f5ca213-518b-4ee7-9fb6-854fa2002a11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f5ca213-518b-4ee7-9fb6-854fa2002a11/293b9a63-68dd-3a71-b379-c7a61017c37f.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     36640
IP address blocks:        64.40.20.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:44:0a:8e:eb:57:9c:6f:c0:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f5ca213-518b-4ee7-9fb6-854fa2002a11
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=66116d41-e0b3-46c4-9fcc-cc86d4f46ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2a:af:26:84:4a:4d:3d:c4:16:8e:d7:87:c1:
                    ba:7d:14:44:7f:90:8e:95:b0:ad:65:78:0f:de:05:
                    cd:e9:81:ea:5a:f0:fa:92:38:34:e7:3f:0e:bb:14:
                    da:69:08:3c:bd:50:53:37:f3:70:1d:88:cb:08:ba:
                    8a:77:62:a6:6f:18:92:c4:68:0d:9c:58:67:31:cb:
                    12:40:b3:e0:3c:0f:79:7b:72:64:42:82:f5:07:2b:
                    a2:0e:36:df:e6:85:74:6c:5f:09:c8:a5:52:4f:3b:
                    81:72:68:fe:e8:14:df:18:26:87:16:ab:99:82:20:
                    93:f7:1b:81:0f:e0:d6:95:fb:0e:35:c2:ee:b3:2a:
                    7a:31:ee:d2:e3:52:94:81:e7:88:21:87:79:f9:ed:
                    7f:c4:59:6e:d3:2f:db:c8:98:14:1c:4b:bd:f6:9f:
                    23:7f:ef:25:ce:96:36:b4:67:cb:d2:57:f5:51:30:
                    c9:16:16:81:b1:11:67:ea:2a:81:76:fd:e3:8f:61:
                    7f:36:fb:db:1f:1d:c9:d4:33:e3:80:14:e6:b0:ad:
                    3c:83:60:2d:14:c9:5d:8f:f1:4f:c5:9d:56:b8:e4:
                    ea:d1:bb:a5:ac:28:24:b6:ef:15:ee:e0:bd:15:01:
                    b5:77:ca:21:1a:1d:85:a6:ff:e1:4d:3a:9d:9a:8d:
                    50:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CC:C3:85:FE:2B:A2:98:B1:73:7E:50:2B:93:3D:8B:11:12:7E:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f5ca213-518b-4ee7-9fb6-854fa2002a11/293b9a63-68dd-3a71-b379-c7a61017c37f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f5ca213-518b-4ee7-9fb6-854fa2002a11/5f5ca213-518b-4ee7-9fb6-854fa2002a11.crl

            X509v3 Authority Key Identifier:
                keyid:6B:CB:1B:C1:65:27:AA:68:53:70:A9:D4:B6:2F:21:84:1E:C7:19:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f5ca213-518b-4ee7-9fb6-854fa2002a11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:6b:c0:7a:03:a5:5d:4c:a6:f2:a0:58:71:0d:00:8b:cc:f5:
         0e:94:77:34:eb:7e:61:77:e1:39:34:3d:10:42:10:5b:a5:80:
         6b:12:fb:ae:ac:dc:74:6a:a7:1f:93:5a:21:eb:dc:d4:fd:05:
         a3:9e:b8:5c:b8:d6:1d:1d:3c:ab:7e:90:71:d9:e3:ff:d4:87:
         d9:83:d1:8a:61:d5:39:1e:2e:66:01:b9:87:82:f3:18:d8:62:
         0e:af:fb:22:a7:e5:7d:d4:68:a3:3d:f6:49:c3:73:b6:38:9f:
         92:9e:1c:82:95:36:45:6f:76:8b:44:54:8c:2d:ac:f3:28:6f:
         c6:41:33:ab:22:83:ca:dc:f5:3f:70:85:70:94:44:d2:77:01:
         d5:a1:d1:bd:3d:0f:4d:0f:c6:93:75:82:8f:72:71:2a:be:29:
         56:55:f1:40:a4:12:e5:d0:2c:5f:fb:a3:62:09:9a:8f:58:eb:
         e7:ee:80:cc:09:d3:15:4d:a2:85:52:c4:e4:d2:3d:0e:9c:ae:
         3b:4c:61:32:54:d5:8d:47:64:8e:40:c6:81:b5:f5:1c:05:2b:
         1a:a9:a9:8e:c7:5b:4b:7f:31:8e:5b:f5:53:04:7f:4c:fa:58:
         d1:c7:ca:58:d6:37:62:f7:3f:29:f3:43:f8:77:8f:af:37:e1:
         c8:fc:f5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----