Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb13f87-d920-43ef-92a7-c95c8064da54/9af27a97-7380-3c2b-ac11-bf41cc9c18db.roa
File:                     9af27a97-7380-3c2b-ac11-bf41cc9c18db.roa (raw, json)
Hash identifier:          PGr8tBAPPtb7Ws4E/f1uDXFgR4pe5eI+z6E0TRiQ20s=
Subject key identifier:   DB:B6:5E:75:C0:1B:20:E2:DA:93:91:C8:70:21:7D:71:5A:3F:FC:77
Certificate issuer:       /CN=3eb13f87-d920-43ef-92a7-c95c8064da54
Certificate serial:       010D0C9F43285843F4F3B14337D921FB39E46F00
Authority key identifier: 38:4C:2A:B1:7F:B3:30:6A:07:4C:24:75:8C:6C:51:F7:C5:8D:B0:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb13f87-d920-43ef-92a7-c95c8064da54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb13f87-d920-43ef-92a7-c95c8064da54/9af27a97-7380-3c2b-ac11-bf41cc9c18db.roa
Signing time:             Tue 21 Nov 2023 02:00:16 +0000
ROA not before:           Tue 21 Nov 2023 02:00:16 +0000
ROA not after:            Mon 19 Feb 2024 02:00:16 +0000
asID:                     212477
IP address blocks:        45.42.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f4:f3:b1:43:37:d9:21:fb:39:e4:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb13f87-d920-43ef-92a7-c95c8064da54
        Validity
            Not Before: Nov 21 02:00:16 2023 GMT
            Not After : Feb 19 02:00:16 2024 GMT
        Subject: CN=44e7d881-e8f7-4724-bbfb-554efdb7668e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:90:3e:62:1d:b0:99:27:b5:5b:bc:0a:e3:7a:
                    c1:0b:9a:24:61:6c:91:85:78:5f:1c:d1:5f:30:fb:
                    67:45:6b:6e:14:1b:93:e0:77:bf:84:3b:af:2f:07:
                    3c:6a:d2:34:8c:cd:33:d5:8b:8b:a4:65:05:ff:d3:
                    95:63:45:0f:df:30:9b:dc:8e:d1:aa:e8:b0:c9:6d:
                    e7:c8:d0:f6:61:61:3e:da:60:f0:55:bb:12:de:4c:
                    03:0f:78:bd:5b:5c:1d:a5:4b:9b:0b:ae:20:96:f5:
                    9d:da:ae:a1:7c:2b:b0:8a:af:6d:9a:c9:82:71:1d:
                    ee:d1:a0:ef:e7:64:3a:22:2a:98:5d:01:53:b2:c2:
                    c6:68:ec:19:23:1d:04:6b:14:bb:e3:4b:37:d4:4b:
                    b8:bc:fb:ae:0e:3f:96:43:15:52:bc:e4:e1:03:7b:
                    c9:43:fd:ba:52:2e:34:82:5e:c6:e5:10:17:7f:db:
                    3b:50:55:d8:31:53:3b:cb:d7:67:09:00:e5:1c:d5:
                    af:93:d6:3d:1c:97:20:ad:fe:e9:99:ea:73:57:0c:
                    1a:99:79:20:e7:9d:45:71:0b:a6:16:4c:ad:58:3b:
                    0f:b1:50:39:06:f0:b4:6e:9f:84:10:27:b5:01:2a:
                    ca:08:30:0c:2d:76:16:8a:df:4a:56:e7:93:0b:af:
                    ba:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B6:5E:75:C0:1B:20:E2:DA:93:91:C8:70:21:7D:71:5A:3F:FC:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb13f87-d920-43ef-92a7-c95c8064da54/9af27a97-7380-3c2b-ac11-bf41cc9c18db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb13f87-d920-43ef-92a7-c95c8064da54/3eb13f87-d920-43ef-92a7-c95c8064da54.crl

            X509v3 Authority Key Identifier:
                keyid:38:4C:2A:B1:7F:B3:30:6A:07:4C:24:75:8C:6C:51:F7:C5:8D:B0:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb13f87-d920-43ef-92a7-c95c8064da54.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:f8:a3:54:b2:59:0e:80:06:db:30:7f:c3:a4:a2:b9:51:e2:
         c4:69:ac:8f:f9:2c:74:e0:78:1a:e1:e6:0b:92:d1:4a:29:82:
         f4:0d:d1:b3:a9:fd:f2:6a:0b:52:a0:40:82:b7:d1:f6:95:d8:
         b6:3c:c1:7c:6e:36:b6:9b:43:e2:0e:c5:be:0c:d6:83:05:c4:
         d8:35:2a:ff:48:d6:fe:e8:2f:e5:f4:15:6f:94:3d:4d:7b:ba:
         64:12:3c:f1:1f:90:af:90:a6:f9:bc:3d:ea:45:df:38:79:8a:
         45:10:93:28:ff:22:72:b4:11:a6:8e:22:85:c5:fc:12:69:ff:
         52:81:39:7e:e5:63:a6:12:a5:56:ee:8a:2e:06:7e:78:47:28:
         17:ad:c5:e8:72:8c:79:07:fc:65:c3:6c:da:f7:6d:b3:5f:20:
         aa:9d:1e:95:9f:17:29:57:46:86:fe:cc:ea:b6:ae:6a:d6:bb:
         bc:14:a7:54:c3:e2:33:e8:b0:86:26:dc:f2:97:f7:c9:86:38:
         6f:44:a2:01:96:a2:dc:94:30:ac:a6:94:db:2c:6a:c7:ab:81:
         fc:4e:b3:c3:65:eb:10:57:6c:16:6c:9a:50:4f:ab:89:58:be:
         21:82:b4:7e:87:9e:91:fd:81:6c:1d:77:72:b5:1a:4a:82:18:
         37:89:4a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----