Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43b1e0f7-1630-387e-94dd-362f8bf2d031.roa
File:                     43b1e0f7-1630-387e-94dd-362f8bf2d031.roa (raw, json)
Hash identifier:          o0c7dOblkLsO+1llzcqUCfobGkvQG5PPVgSVpl1ypxk=
Subject key identifier:   C0:83:68:85:93:ED:96:FB:02:64:1A:DB:5F:94:44:11:F4:34:5E:1A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F772F548E41D605450C180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43b1e0f7-1630-387e-94dd-362f8bf2d031.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33668
IP address blocks:        24.127.56.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:72:f5:48:e4:1d:60:54:50:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=92b8c973-2cab-4a8a-b6e9-aec10be48b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:36:24:b3:5d:50:bd:18:a8:39:c5:b7:84:2b:
                    fc:f8:60:6b:44:52:64:a6:bc:67:5d:54:49:79:22:
                    05:1d:ca:bc:4e:02:92:3e:6a:05:da:67:89:ad:68:
                    b6:0d:9f:5e:59:0d:29:e5:b5:f0:38:b4:e4:bd:92:
                    f4:ae:19:15:2b:e0:22:d6:c5:19:c0:46:f6:95:65:
                    97:f5:ad:b1:91:93:ab:c2:15:09:3f:7b:3b:b7:db:
                    c9:88:c9:32:43:aa:3f:01:6c:9b:25:0b:37:a0:27:
                    4f:4d:07:59:c3:02:2e:94:fe:9c:38:73:67:a7:47:
                    c9:97:5b:3c:17:00:2f:b5:25:17:5c:8b:ec:24:8f:
                    1a:37:d9:a0:87:d2:92:aa:bc:17:25:71:ee:f3:29:
                    b6:90:83:f9:a3:77:e9:0d:ef:91:97:2c:47:14:b7:
                    7e:bb:59:0f:7c:bc:b2:35:51:1f:13:a7:e4:5f:66:
                    ef:af:d9:72:4f:03:40:37:b1:6e:15:c4:4d:c2:78:
                    35:e4:0b:b4:7f:1d:bf:1c:05:b8:af:98:d8:60:6f:
                    fc:6b:3a:c8:4c:06:cd:fd:e1:8a:9b:c4:9f:d4:fa:
                    64:68:b0:88:ae:71:fe:62:d8:da:99:ea:09:0a:c2:
                    e1:f3:73:80:cd:00:fe:1f:28:54:5b:13:2e:fa:d9:
                    4c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:83:68:85:93:ED:96:FB:02:64:1A:DB:5F:94:44:11:F4:34:5E:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43b1e0f7-1630-387e-94dd-362f8bf2d031.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.127.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:80:a3:be:34:fb:43:5b:86:d2:3a:ea:e1:7f:46:3f:61:78:
         cc:b1:14:4a:0b:3d:33:f5:59:93:c7:df:2a:84:41:db:9e:20:
         d6:e1:7b:55:f7:c9:21:26:8e:24:b4:91:61:3e:d7:7c:a5:dc:
         35:eb:7f:63:c4:b9:96:0a:01:ac:da:4d:49:c3:a7:c7:73:97:
         f1:65:14:8e:21:2e:39:ad:81:94:ab:d3:28:d5:07:59:4e:d8:
         fb:46:12:45:dd:ee:36:64:ac:f6:7a:4e:b2:81:87:d1:ce:ec:
         6a:77:07:c4:f1:f1:c3:c3:fb:2d:e8:4e:3c:27:93:4a:7a:ba:
         55:9d:01:1a:9d:1a:1c:9e:6d:db:5e:bd:e8:19:75:e0:93:55:
         81:41:65:a8:e4:1b:bd:2e:12:7d:ef:62:22:51:e9:cf:07:27:
         cf:ea:4e:f2:53:f4:9c:b2:d5:22:55:98:db:0f:ae:c2:6e:15:
         23:ca:c6:f9:11:a5:43:84:bd:4a:6c:38:08:d6:a1:22:fe:8c:
         38:53:8a:5a:5c:f9:e7:b5:c7:96:e6:c1:05:e6:08:af:1f:12:
         08:a1:4f:b3:fe:39:45:a5:3a:b0:3f:1c:53:de:7d:a3:5d:e8:
         a4:5b:3c:f9:ec:2b:80:72:58:30:72:d5:b4:f9:91:cd:e2:ca:
         1c:cf:7a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----