Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/110cc6b5-07b2-332f-a2e4-ec5810a5a4e5.roa
File:                     110cc6b5-07b2-332f-a2e4-ec5810a5a4e5.roa (raw, json)
Hash identifier:          MEibeURKqZBZGDHgweRtrO1U1Ipw3fwUyezwM2OILBg=
Subject key identifier:   B3:B0:FF:0A:7A:9F:88:2E:25:E1:8F:14:DA:89:C0:39:DD:55:95:12
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5326CD788345D1E399180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/110cc6b5-07b2-332f-a2e4-ec5810a5a4e5.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        71.195.42.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:32:6c:d7:88:34:5d:1e:39:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=240932b9-44ab-4e55-83e9-6599f0925791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8f:00:0b:80:01:7b:27:4e:c7:c5:2d:57:cb:
                    27:b0:a0:db:05:13:52:27:bb:b6:37:53:32:66:6c:
                    fe:0a:7c:e8:81:2d:a8:55:f3:15:10:0a:b0:df:af:
                    25:85:ec:81:90:9c:76:35:20:73:4a:e1:9c:45:6a:
                    00:d2:80:fa:ea:16:af:f1:be:d6:82:f2:28:5c:55:
                    65:7c:d6:c0:85:c6:8d:b3:ad:3d:06:ec:56:df:0e:
                    34:8d:07:c9:2e:8a:81:73:fa:f7:50:10:35:96:c3:
                    86:12:9d:f6:ae:37:e8:b1:e7:1f:b3:6a:46:1d:75:
                    71:ba:34:c7:11:59:fa:dc:0f:51:81:27:21:99:5d:
                    62:b0:92:3c:8c:37:ec:3a:48:81:c9:f8:f5:ab:eb:
                    ca:48:68:48:61:88:d2:c9:db:50:4c:b5:8f:d0:3d:
                    81:90:a3:8d:5c:52:76:41:a3:78:bf:c6:68:49:97:
                    32:f8:7e:7c:af:27:aa:e7:66:4e:db:cd:e0:37:88:
                    8d:d9:39:b4:da:c4:6f:4d:fd:78:c7:2c:b8:c8:6e:
                    40:b7:d7:06:3c:90:c2:05:2a:b0:41:b6:09:72:8c:
                    ae:95:5c:fe:07:04:15:ea:ea:b7:4b:7f:ce:6f:f0:
                    1d:f3:5f:b5:cb:d7:7d:5e:d8:a8:10:bc:51:e0:5f:
                    8f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B0:FF:0A:7A:9F:88:2E:25:E1:8F:14:DA:89:C0:39:DD:55:95:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/110cc6b5-07b2-332f-a2e4-ec5810a5a4e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.195.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:f1:72:c5:49:b3:2d:c2:25:df:55:41:b7:39:38:53:69:56:
         55:7f:15:1c:36:68:77:b1:8a:cb:5a:26:c4:99:b6:1e:e4:d7:
         46:cb:c2:e5:11:40:e6:d1:48:52:b5:f2:80:4a:71:46:d3:9a:
         3d:24:49:68:e6:b8:32:e7:b2:81:17:0b:4f:80:c9:64:96:32:
         64:5f:e1:ba:54:c0:b9:ba:58:57:02:fd:b5:81:69:b0:88:0d:
         38:47:06:ec:33:45:46:2f:ec:cc:50:84:da:45:f2:d8:af:b8:
         99:12:46:fb:73:eb:2e:a9:e3:d3:d7:18:b6:6d:2a:68:5b:ec:
         5f:e7:bf:3a:28:b7:df:75:ca:28:65:ee:6a:4a:0f:08:cc:5d:
         e3:c1:23:a5:2f:c8:60:91:08:e6:1c:6c:c3:a1:91:cd:4a:da:
         80:5f:e4:0e:cc:34:c2:bf:20:e9:2a:1f:bf:55:ec:ab:41:5e:
         1b:e9:42:bf:0c:8a:6f:d8:10:e4:23:a0:c9:2a:7e:ae:fe:ec:
         99:54:34:60:31:23:67:cd:82:e5:d9:de:36:ff:e7:27:ac:c5:
         47:b7:c9:32:73:df:d0:ef:57:5a:06:b9:9c:3a:3d:26:0b:e3:
         2a:d6:8e:57:61:5d:52:ea:eb:0b:0e:9a:ea:2f:f9:fc:2d:67:
         e6:bf:67:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----