Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b664a8a1-bd21-3b79-b444-8e36222065f8.roa
File:                     b664a8a1-bd21-3b79-b444-8e36222065f8.roa (raw, json)
Hash identifier:          y2bA0dpPfG7Rh+Sj3BLjfk6uBfGHIO0vM094VgZqQrM=
Subject key identifier:   E8:06:6B:D7:5B:8A:7B:B8:FF:0C:92:60:B1:36:39:FD:6B:34:1F:DC
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2A4B48C4A31B83F6B81620
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b664a8a1-bd21-3b79-b444-8e36222065f8.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     396110
IP address blocks:        206.47.182.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2a:4b:48:c4:a3:1b:83:f6:b8:16:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=18bcdc9d-0654-4501-9d57-dbb3cf7ed7a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:eb:97:6f:c1:3e:19:9a:a6:23:d9:92:ca:81:
                    ab:fb:81:ba:ad:f5:5e:d3:c2:3f:f8:81:23:38:c5:
                    24:e0:17:bf:95:82:c8:3a:56:da:56:da:16:d9:0d:
                    fb:9a:41:eb:15:d2:b8:e3:50:a0:45:ca:e4:8a:e8:
                    54:50:f7:46:fc:34:10:de:48:ae:27:00:ec:73:53:
                    84:57:76:29:a9:45:7b:c8:d3:ed:2a:3b:67:47:48:
                    38:78:bc:5c:d8:82:ac:8e:96:71:60:9e:f6:f9:26:
                    e5:9f:44:97:e9:2d:dc:fc:8c:1b:05:c0:b2:1c:7a:
                    06:db:92:2d:8b:50:bb:b6:c8:4f:2e:8f:00:8f:79:
                    d6:32:97:a4:71:ee:67:b9:dd:9c:c6:f4:ad:ca:49:
                    2f:e3:6c:7d:b5:5a:70:a4:98:cf:db:56:02:62:00:
                    01:be:63:c3:f5:1a:c1:4c:16:c1:98:89:8d:97:e2:
                    79:92:c3:fe:64:32:ba:f0:72:b2:de:e1:89:5e:5d:
                    57:fe:9f:63:2a:95:91:a6:de:fc:e1:fd:6d:24:0b:
                    1a:a9:af:00:89:f9:cd:66:e4:f3:5d:5e:5b:f6:0b:
                    3c:1a:80:79:d8:ec:ec:19:84:ca:d9:89:01:04:96:
                    95:02:e3:01:46:2d:8b:57:c5:1b:0b:a2:5e:d6:5b:
                    23:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:06:6B:D7:5B:8A:7B:B8:FF:0C:92:60:B1:36:39:FD:6B:34:1F:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b664a8a1-bd21-3b79-b444-8e36222065f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:fe:22:35:7e:ce:32:0c:b5:9b:b8:89:ee:73:84:b6:2e:5f:
         ef:50:6e:88:d5:27:c6:11:8e:85:6d:ef:59:c9:f8:91:a7:09:
         6e:db:75:ed:9a:b8:e1:49:7a:fc:c6:ea:2f:ad:e4:06:6d:a1:
         ad:5a:6f:d3:3c:e0:3f:a7:7f:cf:61:44:3f:b1:64:e5:c2:2b:
         15:a5:b0:af:9d:a1:ce:ac:de:af:d7:c7:09:28:46:c9:95:cb:
         d9:b7:b4:ad:55:e3:52:5c:10:85:56:54:64:17:d8:b0:c8:08:
         db:1b:ce:0e:93:d8:d1:a5:bd:00:fa:eb:18:e7:f8:36:84:fe:
         27:b1:00:1a:f5:48:94:70:eb:8b:19:cb:ec:bc:c2:46:93:59:
         fc:74:22:bf:53:68:8b:75:61:07:3f:0d:0d:0a:85:fc:05:c4:
         e2:cc:5f:38:9c:84:38:db:bc:3b:44:48:e5:f5:25:3d:65:2c:
         e0:6a:b2:8c:c7:fa:6a:9b:e2:34:5a:78:8f:55:8d:77:43:79:
         b8:de:1b:86:94:c5:ed:60:d0:11:90:57:99:3d:e1:8c:cd:bb:
         13:75:83:d8:01:9c:66:30:94:fd:59:1a:73:7b:3c:35:ea:32:
         fd:36:d5:fa:69:0b:28:2b:ca:7d:e0:66:fd:2e:aa:f7:c9:6c:
         41:e9:ca:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----