Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17145ad8-3156-3ec1-81f6-9a8131968765.roa
File:                     17145ad8-3156-3ec1-81f6-9a8131968765.roa (raw, json)
Hash identifier:          sL4tq0aGwEdbN1QUAvIAIrbHz+/Sg7/AYw088dR2UGk=
Subject key identifier:   10:AF:08:25:C2:2A:83:09:77:1E:5D:85:21:26:D0:DB:5B:F2:F4:83
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5C916C355CF08E74CD440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17145ad8-3156-3ec1-81f6-9a8131968765.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22909
IP address blocks:        68.59.150.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:c9:16:c3:55:cf:08:e7:4c:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=f22c07f7-4af2-4325-895c-a3cd5f10d8cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9d:8d:fc:c8:52:fb:cb:45:40:20:c4:4e:37:
                    78:4c:12:ef:30:3a:b0:4c:0f:dc:23:60:ba:bd:8b:
                    64:a0:53:24:68:18:16:4e:74:b7:14:d2:61:43:a7:
                    5d:16:b7:6e:8c:9a:1e:3b:36:1b:6d:60:67:ba:91:
                    76:49:e2:a5:f2:5b:0e:f4:10:ad:83:99:10:30:a8:
                    41:98:5a:98:61:f3:e0:19:89:53:e1:0d:d0:79:51:
                    89:4b:bd:52:87:fe:ac:e1:67:07:51:fb:72:e7:2e:
                    b8:0a:5a:9f:dd:82:dc:69:2b:f0:ad:41:82:96:04:
                    c0:13:22:ad:35:83:45:b3:2d:91:74:a0:29:7b:56:
                    03:bf:e3:17:a6:54:63:e8:42:6c:ec:77:9d:22:9c:
                    d2:e2:b6:fc:2f:4b:22:73:01:3a:25:e5:0e:aa:6c:
                    e6:33:4d:28:a1:77:df:ce:12:ca:0f:5c:ed:09:7e:
                    2c:3a:a5:fa:f8:3b:35:18:10:4d:e6:c4:21:66:1e:
                    b3:bf:0f:8c:47:6d:ae:58:17:20:6a:41:f6:1c:06:
                    8f:c3:5f:70:d9:cd:16:87:99:38:f7:1d:5f:a7:89:
                    86:d2:eb:11:e3:e7:5a:0b:6c:95:4d:36:c0:b6:be:
                    9f:12:df:55:61:ee:91:f1:81:0e:32:cf:28:c4:16:
                    89:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AF:08:25:C2:2A:83:09:77:1E:5D:85:21:26:D0:DB:5B:F2:F4:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17145ad8-3156-3ec1-81f6-9a8131968765.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.59.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:b0:78:79:5b:27:d3:59:7e:fb:14:30:6f:44:0b:9e:b5:a2:
         a3:d0:35:48:78:98:8e:13:a3:44:e5:69:be:ef:50:a0:94:64:
         16:b8:ae:d5:68:9b:eb:e1:db:a0:8c:13:47:f7:96:e3:09:eb:
         93:db:8b:69:74:ea:46:e1:0e:15:e9:28:53:19:e4:bc:e4:88:
         3b:42:5e:9a:b3:bd:19:e8:76:b0:7c:c1:32:28:0d:66:1c:6d:
         d0:13:2c:b5:f2:05:31:88:22:30:ab:f7:e7:7d:4d:b5:af:9f:
         e7:fc:63:c2:03:69:be:ea:c1:04:26:ef:9c:6f:61:b6:16:9f:
         fb:aa:18:c3:74:07:be:fb:62:89:bd:4d:78:4b:3a:2e:dd:75:
         98:9f:23:51:cc:f8:ec:cd:56:3c:3b:7c:84:78:f4:ff:53:f1:
         fa:68:78:15:e2:70:c9:5f:ef:61:fe:e6:5e:21:a1:f3:0c:50:
         8b:72:e9:c1:10:7c:d2:45:19:7c:21:7a:e6:04:26:80:9c:09:
         92:35:34:1b:4b:2a:78:4e:33:c6:e9:39:0f:fd:d8:ca:56:7d:
         7d:de:b1:98:ad:3a:57:47:81:56:0f:7e:bf:ee:85:04:af:29:
         a1:cb:fe:42:d9:6f:b4:d6:d9:0c:4e:8c:74:c7:9b:b8:3e:48:
         44:77:28:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----