Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ef2bba2d-10a1-35c8-b977-16ffbfb685e5.roa
File:                     ef2bba2d-10a1-35c8-b977-16ffbfb685e5.roa (raw, json)
Hash identifier:          ExsKo4bY6HwBbVowEMyOg39Iu8pTdD5xKlBtUiSofx0=
Subject key identifier:   51:01:AB:8D:BA:03:66:00:10:E7:95:E1:03:0C:0F:98:89:49:E5:81
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584953C415113F705FC5F1594E80
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ef2bba2d-10a1-35c8-b977-16ffbfb685e5.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     0
IP address blocks:        192.68.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:15:11:3f:70:5f:c5:f1:59:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=f217edbf-9aa2-4dbc-bd33-01674a7abac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c8:18:62:b5:74:d4:ec:88:02:b2:e6:eb:7f:
                    d8:29:ce:87:c6:5c:b5:6b:0a:11:ac:f3:b4:0c:45:
                    70:42:c8:c7:59:13:c8:c9:99:ec:ca:1f:90:dd:d4:
                    f5:1f:6e:c9:96:3d:b1:d1:01:45:9a:3f:28:6c:62:
                    9e:00:60:c0:f3:03:c3:c7:75:c3:e3:2a:74:77:37:
                    f1:ad:58:2f:68:15:fa:11:7b:09:b3:3d:a1:79:a6:
                    97:58:17:bc:b8:61:34:da:a0:c4:f9:1a:96:dd:4c:
                    81:85:18:02:10:2f:7b:67:dc:10:f3:cc:ea:5f:4e:
                    b2:19:21:37:a9:d0:61:72:23:1a:ab:46:2a:25:6d:
                    86:81:d2:c0:3e:e7:fc:89:54:d4:d5:53:2e:15:49:
                    55:a9:e1:be:cf:c6:9b:ea:65:f8:d4:2c:5f:04:dc:
                    bd:57:d4:12:13:68:11:db:5e:1d:99:41:47:dc:a4:
                    ce:eb:ce:5a:15:d9:d3:2e:ad:cf:68:cf:ad:9e:eb:
                    eb:37:83:8d:13:8a:32:ac:5a:82:ae:87:ca:e2:36:
                    76:9a:5b:47:35:6b:35:60:fa:5a:51:41:ee:93:d0:
                    2d:29:07:36:08:10:7f:d1:75:f8:0c:d8:2d:09:41:
                    09:67:3e:3a:01:24:9f:f4:9f:7b:0e:15:a4:f3:5f:
                    6d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:01:AB:8D:BA:03:66:00:10:E7:95:E1:03:0C:0F:98:89:49:E5:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ef2bba2d-10a1-35c8-b977-16ffbfb685e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c2:bd:d5:96:4e:e0:7f:b1:0b:6c:85:80:31:29:2e:5a:1d:
         15:a0:15:15:28:3a:01:b9:e0:55:ff:1a:7e:97:92:64:25:3b:
         29:90:4c:19:ed:1a:e8:ec:e3:97:da:d2:49:1b:29:fa:86:1b:
         6f:27:3b:55:41:f0:6c:68:a3:ca:4a:89:f4:4b:d5:e8:b3:8c:
         fc:91:29:63:20:df:ab:c6:f7:c9:2d:59:6f:92:71:28:14:2a:
         b1:81:f4:0c:18:47:45:80:66:f2:17:7f:90:cf:1e:1f:6a:01:
         e2:fc:9d:ef:79:f6:a4:ac:08:31:e6:98:63:c7:87:a9:c7:91:
         d4:99:1b:b5:42:b9:14:51:e7:87:19:76:41:74:4d:b2:f7:91:
         59:bf:88:46:b1:e0:72:0b:26:8c:67:90:15:85:3a:1b:82:73:
         7c:c6:99:92:17:53:dd:0a:91:30:05:99:e0:80:b6:59:16:1d:
         55:bf:75:9f:f2:35:49:e0:4a:22:ee:13:bb:7e:f8:eb:50:ee:
         71:f4:6c:06:7d:02:d3:a5:1f:c2:9c:5c:74:ee:89:35:40:7f:
         6b:a2:63:bd:e3:c1:64:f6:7a:40:c6:fb:5d:84:4e:b0:41:04:
         07:2a:fd:f5:0f:9d:30:37:b8:92:80:b9:51:98:83:e9:15:51:
         3f:a2:48:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----