Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/5d9a62ec-643c-34da-8c6b-7eaa536a8c4f.roa
File:                     5d9a62ec-643c-34da-8c6b-7eaa536a8c4f.roa (raw, json)
Hash identifier:          CUla1+W5qR8f82as6HPCXK3PF9rjEvk6ctuwKYgct18=
Subject key identifier:   5B:FB:B6:A8:AB:F7:06:79:1D:B5:35:AF:0D:53:C8:4E:72:FB:D6:D4
Certificate issuer:       /CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb
Certificate serial:       010D0C9F43285849071BE9CDCC153758E6CB2CC0
Authority key identifier: 00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/5d9a62ec-643c-34da-8c6b-7eaa536a8c4f.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        208.89.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:e9:cd:cc:15:37:58:e6:cb:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=2f88d466-47c3-4da8-931b-8898db68230c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:70:87:75:c4:85:23:da:52:e0:83:e3:00:66:
                    fb:ba:ea:68:7d:22:ea:35:7d:c4:0d:07:6d:1e:c1:
                    a0:7e:2f:df:96:03:94:43:a9:9a:e5:af:ed:b6:cb:
                    94:6d:14:5c:8f:f2:fe:f0:44:1b:db:19:0c:ca:47:
                    04:4b:a9:f5:da:9e:8d:8b:d1:7d:f7:bd:a9:0d:60:
                    ff:e6:a5:94:eb:77:08:e5:c8:90:8b:37:ed:7f:ae:
                    17:84:75:bb:88:24:68:a2:f6:88:88:1c:f3:06:1c:
                    59:83:c2:7c:03:b0:4d:55:1d:d8:7a:a8:93:f5:5b:
                    7f:00:72:fa:02:34:96:84:33:88:8c:d3:53:7f:d9:
                    32:e7:f5:9c:77:4e:04:ea:a3:d8:e9:74:98:bc:c6:
                    25:b5:b6:b4:0e:3a:f5:cf:19:e6:18:e7:cf:e1:0f:
                    d5:a1:39:e5:ff:4c:7c:35:a5:37:34:a9:d0:2c:77:
                    c3:cf:a4:94:3d:2f:f0:23:ec:c1:5d:98:fe:40:44:
                    1a:2d:5f:d4:08:2c:3c:28:4a:6c:3d:33:10:ae:a2:
                    b5:95:2b:af:83:47:f2:4b:58:09:8b:62:03:a8:ef:
                    cf:fd:aa:23:eb:7c:52:8f:50:87:02:b3:a0:cf:45:
                    42:ac:69:9e:a7:a5:4e:17:bc:b7:67:1d:1b:2d:10:
                    d2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FB:B6:A8:AB:F7:06:79:1D:B5:35:AF:0D:53:C8:4E:72:FB:D6:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/5d9a62ec-643c-34da-8c6b-7eaa536a8c4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl

            X509v3 Authority Key Identifier:
                keyid:00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:48:16:5c:2f:54:58:a8:08:ac:a7:45:55:f3:41:20:98:f0:
         b4:7f:e1:04:22:d5:40:79:ce:0b:37:06:0c:b5:58:2d:ca:f0:
         35:bb:83:28:e5:30:a0:64:49:4c:8c:c2:ee:79:d7:1e:65:ae:
         c3:68:88:18:e2:e0:46:ea:cd:09:e1:c3:4d:85:25:09:7c:b8:
         0d:0f:02:7d:0d:8c:1d:ad:95:2a:f8:3a:be:58:fb:1e:18:99:
         5b:02:1d:92:d2:38:30:01:e2:ae:27:2d:4b:d1:b7:5c:b2:0e:
         d8:79:a6:d1:87:a6:72:55:a7:09:a7:4f:43:d5:c8:77:fb:45:
         ef:da:49:76:75:17:18:bb:89:bb:f6:de:11:75:52:fd:c6:8a:
         27:53:ca:8d:7a:72:66:ee:ed:10:6d:aa:e8:73:39:81:aa:c1:
         1e:e3:ec:a8:3d:50:37:5e:6b:3f:6b:cc:ef:18:63:ff:f2:99:
         d7:6e:47:49:af:a4:5a:c2:32:2a:6a:ff:f2:87:22:c4:2b:09:
         4e:b6:35:2b:f0:26:83:52:de:40:0e:c7:2c:a0:52:4a:58:42:
         bb:21:53:06:27:f0:53:40:5e:f8:d3:59:43:91:96:7a:3c:c0:
         3a:97:ce:ce:fb:ba:ac:37:1f:86:e1:3e:53:4a:e4:ee:bd:b6:
         f6:ff:4a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----