Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/3282be55-89d5-3cd3-84c3-39f0e2cbec64.roa
File:                     3282be55-89d5-3cd3-84c3-39f0e2cbec64.roa (raw, json)
Hash identifier:          0kzq6ZWEps5ApB33UF4uvyRtTLhJQUJEDG6G+PtAflY=
Subject key identifier:   B7:92:4E:F6:AD:68:80:38:C7:F0:14:2F:B3:39:E8:0E:E0:B5:15:6E
Certificate issuer:       /CN=01664fbf-983f-4876-bc33-31a4d5aed031
Certificate serial:       010D0C9F43285848F9269B5F2370BA2D74CC7E00
Authority key identifier: 95:4A:A5:D9:F8:E6:3A:D1:5A:18:DC:1C:28:6C:38:83:F9:ED:B9:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/3282be55-89d5-3cd3-84c3-39f0e2cbec64.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        65.110.52.0/23 maxlen: 23
                          65.110.54.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:9b:5f:23:70:ba:2d:74:cc:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01664fbf-983f-4876-bc33-31a4d5aed031
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=e1fa3270-c2af-4db4-8e90-e6385bbfc337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:13:87:3f:42:9d:1e:c2:1d:eb:88:41:63:cd:
                    9c:2d:e7:83:2d:75:0c:83:ac:95:e4:7e:7c:0f:27:
                    e3:7e:23:67:d2:86:80:cf:5c:80:18:2e:34:ad:90:
                    44:a0:23:16:7e:70:6b:dc:44:ed:62:20:e8:2c:4d:
                    d6:a3:67:fd:0e:a6:99:b4:53:99:cc:d1:ec:18:5a:
                    b2:e1:bb:8b:78:f7:64:73:84:45:1d:2a:79:bb:6d:
                    11:3d:a4:93:39:bc:f4:88:02:7b:3b:68:61:31:4c:
                    30:be:ee:b4:53:8f:b1:08:85:87:d1:bb:dd:d1:cf:
                    2e:37:ba:6b:c6:91:f5:f0:12:4e:d4:fd:50:79:2a:
                    a9:c8:19:f6:f9:a1:0c:c9:af:8d:8e:b4:56:59:62:
                    1d:c3:88:77:02:11:b4:3d:95:57:5a:79:80:12:83:
                    0c:b6:f0:e6:6e:94:a0:e4:e6:98:13:da:5b:d4:93:
                    8f:6f:f6:17:3d:ed:bb:d2:33:a9:7c:f7:d0:0a:97:
                    f2:4a:f7:d9:fe:d7:dc:8c:47:35:fd:f0:25:e9:b0:
                    76:ef:d8:af:8d:e4:e6:56:14:09:61:cc:e7:ed:8f:
                    a3:dc:03:8f:30:88:55:c2:6d:be:8e:73:2e:6a:ce:
                    a9:14:a8:87:39:59:54:4d:d8:08:14:ba:81:3b:cf:
                    bb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:92:4E:F6:AD:68:80:38:C7:F0:14:2F:B3:39:E8:0E:E0:B5:15:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/3282be55-89d5-3cd3-84c3-39f0e2cbec64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/01664fbf-983f-4876-bc33-31a4d5aed031.crl

            X509v3 Authority Key Identifier:
                keyid:95:4A:A5:D9:F8:E6:3A:D1:5A:18:DC:1C:28:6C:38:83:F9:ED:B9:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.52.0-65.110.54.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:9b:c1:75:1a:58:6d:d0:0d:f4:01:ec:8b:e4:68:e9:0e:dd:
         64:c2:b7:dd:da:2a:f2:a1:49:bf:e4:e5:ae:6e:d7:dd:43:2f:
         e3:ed:d3:fd:d0:fe:2a:45:e9:dd:55:19:1e:e0:b2:44:c9:e9:
         3f:c0:38:55:e1:8b:72:80:8d:f3:bd:dc:ee:50:9b:57:15:bd:
         a3:06:d2:03:05:28:0d:83:1f:e8:cc:67:a8:23:7c:a3:49:5f:
         e4:0a:a2:ca:d7:75:75:03:bb:d4:b4:bf:da:61:a3:9d:03:7c:
         76:7f:0b:d4:59:f6:a5:23:15:5e:1c:1d:a8:91:10:2b:fc:d8:
         7e:6c:36:12:4d:6f:92:67:8d:2b:4c:e1:ab:98:99:cd:f3:15:
         3c:48:cb:ac:21:c9:42:58:b5:6a:c3:f1:91:fc:c4:86:72:8f:
         45:00:de:ea:20:50:24:30:8f:8a:7b:84:39:2e:ea:7c:72:4b:
         8d:52:ff:5a:31:ac:09:71:e1:f5:9c:02:89:f6:0f:5c:7d:65:
         02:26:63:8c:c8:ac:a1:7d:2e:e1:8d:28:f6:18:00:3f:29:a2:
         49:5c:1c:6e:74:7f:d5:f5:6f:d5:b5:bb:cf:01:90:87:0a:78:
         e8:02:88:5d:89:2a:4d:35:6a:ea:5e:76:aa:5d:67:e4:a6:60:
         8f:01:e6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----