Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2215d47d-f8e7-3ef9-bcbd-1bc18c0b74c3.roa
File:                     2215d47d-f8e7-3ef9-bcbd-1bc18c0b74c3.roa (raw, json)
Hash identifier:          Xe+35Pen1hjYxLki6pu5FaUnCJZsDgi0rXdTHHruTcM=
Subject key identifier:   06:E3:52:6C:F6:D8:60:EE:DF:95:BA:07:CB:2B:41:F5:B2:0B:5D:42
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA54A9EDBF6A8B04922C0C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2215d47d-f8e7-3ef9-bcbd-1bc18c0b74c3.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        107.4.156.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:4a:9e:db:f6:a8:b0:49:22:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=aaec915e-9637-4832-94bf-7d086f1be4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d6:26:42:54:59:c9:b7:f3:46:bf:e7:e8:82:
                    ec:82:59:70:dd:3f:31:f7:89:ef:49:ab:58:fc:fb:
                    9b:b5:ed:01:c3:b4:be:63:41:28:b3:e2:37:c5:44:
                    e2:87:f3:a3:77:9b:63:ae:2e:ab:95:d1:26:13:2f:
                    a4:ab:0f:26:30:05:11:7a:e6:f1:5e:ea:53:1a:84:
                    b2:a2:a9:46:08:24:c7:4c:95:2e:65:21:f8:ca:d7:
                    81:b2:c6:c0:74:38:00:e6:a7:73:94:b9:1d:c1:33:
                    8b:94:44:88:26:e4:97:80:74:08:6b:c7:e6:fa:1c:
                    62:f1:b7:45:e7:56:40:67:8c:c8:39:ca:12:85:d8:
                    a4:81:09:5e:e7:04:cb:e7:be:b5:da:a8:bf:e7:69:
                    d2:d3:e1:24:60:aa:a1:2f:5a:e2:f1:b8:ff:1f:26:
                    05:e8:c4:34:bb:4a:c3:49:59:5f:39:2e:a2:79:36:
                    34:23:a9:2e:c8:ac:41:fb:47:fc:52:69:d8:12:47:
                    8f:95:ca:b7:e6:79:69:4a:22:81:f0:7b:40:a9:23:
                    4d:b2:f4:ad:eb:7e:b0:f4:d5:6b:ef:87:a9:b3:87:
                    07:81:2f:64:b3:9a:50:e9:09:ce:96:09:94:c6:18:
                    a0:9a:fc:1b:e4:6c:13:c0:f3:0f:39:a3:1f:b4:e5:
                    3b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E3:52:6C:F6:D8:60:EE:DF:95:BA:07:CB:2B:41:F5:B2:0B:5D:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2215d47d-f8e7-3ef9-bcbd-1bc18c0b74c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.4.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:c7:e2:51:39:b3:d3:54:72:42:b3:7d:b2:ef:68:c2:18:ff:
         6a:a9:be:10:67:a4:07:fa:be:96:41:62:e6:74:67:9e:c5:1f:
         9e:5e:6e:ae:ea:eb:62:48:fb:2c:4e:cb:44:00:34:8b:a9:a5:
         bc:4f:da:e6:18:0f:9b:57:46:a3:06:35:3d:a7:98:56:cc:30:
         5d:4f:39:f4:c4:1a:09:d8:d2:6f:ee:4a:a9:82:9e:86:48:f7:
         c0:e9:9b:e7:57:42:cf:e5:0c:b1:df:87:1e:2c:fe:4b:9a:82:
         8d:96:47:01:83:b7:98:4e:28:6b:38:d5:d7:6b:2b:24:57:f6:
         bc:2e:31:50:52:d7:5a:f3:c3:02:df:f3:b0:13:82:80:98:56:
         68:f8:05:28:5b:15:ec:97:11:e2:f7:5b:32:a6:d3:b1:93:43:
         93:3a:38:44:d8:71:57:f6:5c:4d:e7:a5:69:fc:58:ec:5c:05:
         04:48:c7:b0:49:26:4a:0f:4d:20:63:52:a2:58:1f:06:56:f2:
         73:d6:32:4e:20:57:f0:37:71:d5:7f:63:90:e6:28:91:11:f6:
         2c:76:61:bf:f8:88:23:49:50:2f:2f:79:e7:c1:d7:5a:9b:27:
         7b:63:61:00:5d:24:0e:13:a8:e7:83:7d:ac:2b:f8:5b:92:7c:
         ad:48:45:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----