Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b72a77ed-126f-32da-ab5e-eae6b4b1f543.roa
File:                     b72a77ed-126f-32da-ab5e-eae6b4b1f543.roa (raw, json)
Hash identifier:          PTnT4MkWahsvHphKAoTYJuP4xRHtRrtdn945S+ipkEE=
Subject key identifier:   EC:92:6D:9F:61:A0:0E:39:A1:3A:24:FC:B2:9D:09:B0:9E:85:BF:4F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2B471B73E8A92DFEBB16C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b72a77ed-126f-32da-ab5e-eae6b4b1f543.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     21552
IP address blocks:        209.226.46.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2b:47:1b:73:e8:a9:2d:fe:bb:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=1b9d1ac2-8430-4b87-999a-5d755d421fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1d:ad:28:ff:81:0d:26:c5:e6:1c:38:00:67:
                    08:d8:19:63:d2:2f:12:b0:1e:2f:a5:51:23:89:28:
                    6e:03:77:cc:8d:31:c5:ae:29:45:3b:e9:82:32:56:
                    c3:56:b2:b7:f7:dc:1c:ba:03:fc:10:a3:d4:10:ad:
                    24:86:71:b2:5c:22:65:3b:cc:7d:61:69:af:8d:20:
                    ce:14:09:0d:eb:ab:56:8f:d9:bd:95:07:a9:c0:e2:
                    0b:a2:99:7d:55:00:6c:8f:c2:94:23:1d:73:7a:e3:
                    09:b3:41:23:b0:98:e8:dc:16:ba:69:9a:53:eb:19:
                    a9:cf:08:d7:3e:0a:a7:4f:f1:de:17:a9:4d:de:35:
                    ea:f1:99:42:c4:ad:2e:58:ac:ad:c1:03:00:3e:26:
                    b9:26:69:7b:99:bd:24:89:db:4e:7c:82:e9:62:55:
                    f8:43:6b:87:62:6c:0e:a4:2a:12:35:67:c2:f9:14:
                    f4:34:ea:30:81:ef:b2:a3:3b:cd:06:b1:c0:64:c9:
                    2e:c3:04:bf:d4:a2:df:31:c2:65:77:b1:0a:68:d7:
                    b7:e5:ee:0d:5a:e6:61:6c:4a:cf:24:a5:72:c4:4f:
                    1f:94:40:65:38:b8:3a:4b:6f:41:68:0f:d7:39:4f:
                    89:51:70:e2:14:be:6e:27:3e:c8:83:56:6e:c8:ee:
                    37:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:92:6D:9F:61:A0:0E:39:A1:3A:24:FC:B2:9D:09:B0:9E:85:BF:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b72a77ed-126f-32da-ab5e-eae6b4b1f543.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:95:f3:27:94:5a:36:e3:6b:65:b5:af:d9:74:1e:62:e9:72:
         66:66:05:fb:77:fa:b8:a1:9c:03:a7:b6:9f:4c:9c:de:3a:4f:
         81:1b:01:7f:4f:d2:61:d1:8f:4b:f5:d8:de:2b:10:ef:87:4f:
         01:8c:2b:a2:7d:32:9e:61:14:87:32:72:f3:af:05:27:b4:00:
         2d:6d:b3:96:3f:c7:5b:7c:b8:dc:1b:9e:d4:4c:ec:6f:1d:d4:
         77:d8:95:fb:f6:e2:98:cb:94:34:a9:03:9b:7b:b4:0d:28:0f:
         53:3f:e7:fe:0e:64:02:7f:c2:1e:8e:6e:70:45:b4:1a:a1:33:
         cb:b2:4c:00:85:50:e1:b3:39:0c:5e:7a:f7:f7:df:ab:cf:6a:
         b5:58:31:b5:ea:6b:0d:12:e2:47:98:4f:4f:22:b2:bb:e6:3c:
         e5:d9:46:7b:c1:74:85:27:9d:dc:6a:45:59:0f:a5:7b:5f:e3:
         0a:c4:3d:2b:f1:37:80:83:f9:69:05:78:4e:5c:8f:0c:8b:b9:
         bb:ef:e2:04:b9:fb:7b:2d:ca:3f:7e:35:91:1e:91:51:1a:07:
         a3:11:82:54:7f:2a:b5:3d:e8:01:10:b8:aa:a2:ae:65:d2:9c:
         b2:04:89:1c:ad:54:6d:15:93:77:1f:c4:ec:a8:10:d7:47:d9:
         b6:02:45:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----