Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/31079cd1-9f2c-3713-a951-cf974c5ecd73.roa
File:                     31079cd1-9f2c-3713-a951-cf974c5ecd73.roa (raw, json)
Hash identifier:          D07PYY+HTd21fjwSw7aop7Jl5GmQ0CAqmsxolutevN8=
Subject key identifier:   8A:87:20:74:FA:16:1D:51:51:67:31:10:1C:E3:10:FD:E7:C8:26:86
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858492134708C7E7349ED5F47C280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/31079cd1-9f2c-3713-a951-cf974c5ecd73.roa
Signing time:             Sun 09 Mar 2025 10:21:10 +0000
ROA not before:           Sun 09 Mar 2025 10:21:10 +0000
ROA not after:            Sat 07 Jun 2025 10:21:10 +0000
asID:                     577
IP address blocks:        2001:4958::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:70:8c:7e:73:49:ed:5f:47:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:21:10 2025 GMT
            Not After : Jun  7 10:21:10 2025 GMT
        Subject: CN=cd7d214c-a541-494e-a486-ffe7ce61bba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d4:79:1e:0e:9f:32:c4:f1:d5:59:06:d1:fd:
                    6d:ed:aa:a7:86:86:f8:ae:9c:50:c5:b3:dc:19:10:
                    3f:d6:e0:d5:6d:0b:f9:31:e7:49:b4:c7:1e:5e:e6:
                    26:92:8f:c7:ae:d2:6b:86:cc:ca:d2:50:06:5d:4e:
                    f4:1c:a9:7a:62:09:57:95:10:7e:10:4e:5f:24:59:
                    7e:de:88:7c:b1:02:80:a0:0a:e1:01:bb:dd:bb:19:
                    1f:79:93:2f:b5:17:2c:df:7b:86:ed:53:e8:85:37:
                    4d:45:82:a1:92:17:35:80:33:dd:7c:a6:34:15:e9:
                    9c:cb:16:2d:d9:82:a7:7d:73:95:76:82:f2:9c:d3:
                    e4:13:d8:e0:2d:1d:d2:f8:05:bf:28:9f:5c:95:69:
                    19:1a:35:54:2b:f6:84:4c:84:1a:ac:d2:bf:21:2c:
                    20:3a:af:0e:f1:af:c6:30:ab:8b:05:e5:fd:5a:8e:
                    45:95:f7:5a:a4:0a:3d:bc:64:0d:84:43:58:1c:bb:
                    88:c2:1c:9b:be:f6:4b:9f:4f:04:d1:46:b4:01:8e:
                    3d:a8:3e:47:5b:d3:61:bf:aa:75:53:b9:69:70:04:
                    6b:f5:64:78:88:81:3d:b8:38:23:ce:9d:49:20:40:
                    3e:e6:21:38:b1:7f:dc:04:dd:1c:96:17:dd:7d:9f:
                    4c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:87:20:74:FA:16:1D:51:51:67:31:10:1C:E3:10:FD:E7:C8:26:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/31079cd1-9f2c-3713-a951-cf974c5ecd73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4958::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:7c:53:71:47:25:36:72:2d:56:50:a0:fb:29:94:27:0e:9c:
         1c:4a:b0:5c:b9:5a:a3:91:66:4f:63:fd:ee:86:a8:0d:48:31:
         85:99:6d:e0:01:c0:90:35:aa:8d:02:24:45:73:11:a7:ab:80:
         81:a6:97:3f:f3:17:3d:d9:fd:9c:e2:be:68:8a:e0:41:6c:7e:
         a9:29:7a:22:1d:e8:be:de:56:81:5b:56:22:85:14:8e:7a:cf:
         4b:c9:00:50:7a:9f:6d:57:97:2b:b3:ec:28:41:2e:13:68:39:
         a3:43:96:eb:61:84:23:a6:5d:b4:e0:48:04:36:0d:56:78:81:
         02:94:40:55:7e:a9:fd:db:6e:d7:c4:b9:68:c4:e7:48:bc:c8:
         c3:f4:de:6a:f9:45:18:96:3c:68:23:35:34:fa:16:ca:eb:d8:
         59:61:f3:bd:1d:0e:30:a3:58:3c:20:31:09:7c:b3:b0:1e:72:
         e9:c5:ce:1a:47:df:ab:40:3f:a1:b6:3c:6e:94:e2:b7:11:08:
         02:e9:7c:07:da:2a:3a:d8:0f:87:79:80:9b:8a:e9:77:b6:41:
         ff:dd:81:87:ab:64:f7:77:eb:86:4f:6c:f3:b8:a2:37:a7:ab:
         ab:36:0e:ac:a3:af:57:de:da:92:1f:ae:8c:13:66:c7:56:7e:
         99:31:04:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----