Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d135e39-3ac9-3ff5-b4ea-7f23618ed5f5.roa
File:                     4d135e39-3ac9-3ff5-b4ea-7f23618ed5f5.roa (raw, json)
Hash identifier:          pD+1LbU6+fWBw7vObKzKTHFkCgbWoe+btOG94jQ57y8=
Subject key identifier:   5E:2A:F7:1E:BE:71:73:26:6B:F3:91:65:DA:EE:E1:7D:8E:C0:51:F7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848B735864B9E47DBF650B11660
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d135e39-3ac9-3ff5-b4ea-7f23618ed5f5.roa
Signing time:             Thu 30 Jan 2025 11:07:40 +0000
ROA not before:           Thu 30 Jan 2025 11:07:40 +0000
ROA not after:            Wed 30 Apr 2025 10:07:40 +0000
asID:                     30036
IP address blocks:        104.166.192.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:35:86:4b:9e:47:db:f6:50:b1:16:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jan 30 11:07:40 2025 GMT
            Not After : Apr 30 10:07:40 2025 GMT
        Subject: CN=817a2cbb-90e7-47dd-b012-de158164cfae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:81:cf:ed:f1:dd:83:45:37:38:c6:bd:8d:6a:
                    d8:de:90:08:1c:d0:3e:1e:5f:3e:7a:71:15:be:3a:
                    f6:0c:a8:c5:e6:67:48:fb:77:1c:99:31:a0:60:38:
                    42:7e:fe:d3:44:69:82:77:8e:f2:5c:0e:d2:27:b6:
                    61:91:fb:5b:a5:2e:9c:0f:fe:70:92:a0:3c:fa:71:
                    78:e5:4e:15:72:67:94:0e:78:eb:03:b3:de:cc:38:
                    3e:16:bd:a2:37:56:d8:76:50:02:a0:d0:bd:18:43:
                    b4:49:b0:53:00:48:e0:2c:32:d1:09:95:04:29:d7:
                    5b:3b:68:a2:45:aa:59:05:bf:75:04:20:09:a9:19:
                    8b:4b:ff:ef:b0:84:cf:e3:c3:08:ac:53:f5:e1:2a:
                    13:f7:11:9e:31:6b:6f:59:67:73:03:30:ad:7b:2e:
                    57:8e:9d:ae:ad:52:2b:a1:b2:fd:2f:a7:1a:c8:b1:
                    8a:23:4d:0e:a7:a5:48:5b:6f:f5:00:33:32:94:5a:
                    92:91:e0:7d:6c:ce:64:9a:90:b5:5c:82:3d:49:1b:
                    18:0b:57:b1:b3:0c:d6:80:af:1f:3d:d9:01:5b:43:
                    d2:43:83:3c:5d:22:9f:b1:98:fd:67:65:ed:b9:27:
                    0e:f0:3f:49:78:68:52:8b:8e:bc:55:41:59:f3:02:
                    f0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2A:F7:1E:BE:71:73:26:6B:F3:91:65:DA:EE:E1:7D:8E:C0:51:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d135e39-3ac9-3ff5-b4ea-7f23618ed5f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.166.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:5d:13:eb:46:0b:52:4b:3c:1f:f0:d7:c0:18:7e:fb:d5:45:
         c4:1c:40:f1:1e:10:12:b0:57:02:34:82:c8:5d:ea:16:4f:89:
         de:b3:d2:19:88:80:db:16:55:68:99:01:d4:c0:f4:cb:d6:60:
         d8:9b:3e:03:dc:35:8a:60:5b:c9:6d:31:45:c8:7d:aa:96:b6:
         25:90:35:b8:c0:3f:85:72:bd:1e:45:f6:fd:12:21:b3:f8:a8:
         f7:c2:46:a6:11:5c:3d:0a:c4:e9:66:01:56:29:51:e4:75:ee:
         ca:d5:5c:d8:dd:7a:19:90:2d:1a:91:35:f9:48:c0:f6:2d:28:
         52:94:f7:a7:6b:ec:ad:12:5e:92:2c:56:0f:0a:d7:60:bc:68:
         96:50:93:5e:aa:7c:5b:d8:a4:0a:88:b8:be:37:be:b6:a4:ec:
         c1:1c:f7:c9:78:46:ae:2a:1b:8b:84:8a:be:99:fd:7b:9c:af:
         2d:4a:97:70:a9:1b:c9:f9:04:83:f6:5b:f9:f5:fd:de:0a:29:
         92:b3:cc:ad:5c:bf:f3:7c:27:86:44:a3:f0:f0:8f:f0:df:38:
         0e:55:88:e1:2b:05:c5:be:a3:ef:4f:f5:42:65:37:f2:60:fb:
         1c:8b:5d:f3:ea:ba:45:36:5e:3c:81:5d:85:d8:2b:58:2c:91:
         f6:a0:7c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----