Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bde5b39-f853-3688-bf16-7e84bd965fb8.roa
File:                     0bde5b39-f853-3688-bf16-7e84bd965fb8.roa (raw, json)
Hash identifier:          8dTvym2/fkPOBSH9J0RSKhSY+9x2g9mw5lkr0mB/p/A=
Subject key identifier:   28:A4:DD:CA:57:F8:C4:55:6E:5B:09:24:5F:A0:35:A5:D8:73:33:E8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA6DA46B46E40CC1E2F3900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bde5b39-f853-3688-bf16-7e84bd965fb8.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     54286
IP address blocks:        107.1.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:da:46:b4:6e:40:cc:1e:2f:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=c73db070-0c11-466f-9ce7-87a45dfeb72c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:87:8f:02:dc:bd:01:75:39:8f:93:4b:8d:dc:
                    0e:92:f6:dd:ad:cc:09:09:30:8a:26:16:41:dd:8a:
                    6f:ba:95:85:0d:18:ca:6f:da:9a:ab:68:23:d4:b7:
                    de:3a:d6:ec:bb:4f:05:e0:a1:d5:34:85:d7:be:f9:
                    52:cf:1c:01:29:86:f2:e4:be:92:f3:f4:34:e2:f3:
                    86:7c:1b:58:48:d4:74:33:00:75:de:86:e6:2b:e9:
                    5c:eb:bf:b5:27:e8:d7:e5:05:75:cb:ac:1e:04:83:
                    a3:8b:2a:dd:47:e3:a6:14:88:da:6b:fc:6a:45:56:
                    1e:79:e4:ce:a8:fd:1f:8f:01:c8:03:b6:c8:06:78:
                    01:ea:f1:8e:ec:4d:77:fa:75:cd:07:ec:ed:2d:ed:
                    97:78:c9:5f:39:c0:76:f8:ce:f6:e0:a6:68:86:b2:
                    b1:de:34:51:91:15:ac:e0:de:1e:65:95:dd:23:6e:
                    4c:13:95:43:11:29:5c:a8:c5:f8:14:cd:1e:d1:89:
                    cd:70:ca:86:15:5b:97:a5:cc:f2:5f:21:d0:28:03:
                    ad:87:c7:7e:72:da:26:d9:12:d4:8f:d5:64:ab:9c:
                    da:a9:31:9f:4a:a1:10:d0:3c:dc:0b:06:e0:8c:52:
                    cf:c9:f3:9a:38:3d:77:a4:72:5d:a7:37:47:74:84:
                    ae:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A4:DD:CA:57:F8:C4:55:6E:5B:09:24:5F:A0:35:A5:D8:73:33:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bde5b39-f853-3688-bf16-7e84bd965fb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.1.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:db:9f:0a:69:43:e6:de:fb:ff:f2:fd:76:b3:85:b1:1a:bb:
         c9:5c:eb:8e:6d:b4:90:fd:d1:cb:d4:a5:d4:c0:21:97:6a:48:
         23:d7:83:11:7b:73:04:1c:79:b3:c4:60:bf:e0:39:c3:98:80:
         68:96:a6:17:0d:b3:98:e9:05:a4:d9:47:d6:20:bd:3a:91:77:
         c0:8c:ac:25:17:3e:a3:3f:f9:06:52:a8:d5:4c:1d:01:35:00:
         d8:79:98:42:0c:f5:02:9f:ee:8d:79:58:59:54:b6:71:8b:d9:
         eb:ff:59:83:c1:b7:d9:76:d7:e6:40:f6:c4:f3:f3:03:58:28:
         23:73:78:84:83:5d:03:f2:b2:b4:6d:bd:c3:e8:2d:de:b8:c8:
         a4:a5:b7:2b:ae:60:d7:f3:4d:51:c6:62:ec:53:8e:fd:2d:99:
         2f:65:2b:d3:1a:97:b7:8d:b0:69:ad:27:80:e0:e1:1c:d1:f6:
         48:66:70:e4:dc:a8:85:de:7b:31:96:69:97:b7:16:8a:ab:3b:
         ee:d9:75:76:4d:6c:c4:b1:6b:ee:ba:fa:a2:83:16:fd:c4:92:
         42:9a:2b:cf:34:67:84:c0:5b:7f:71:26:0b:7d:38:8a:44:5c:
         5b:b5:5b:1c:28:4c:32:ea:4a:9a:3c:e9:e0:57:55:99:90:fb:
         6b:88:20:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----