Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f4f990a-3830-3ead-9384-999385b5231c.roa
File:                     2f4f990a-3830-3ead-9384-999385b5231c.roa (raw, json)
Hash identifier:          3M14DhJ6L9juOkhH2RLiB166XJhbBkMUSUjpkTIT4P4=
Subject key identifier:   DC:04:28:D1:A4:5D:14:DA:ED:4D:0C:24:DE:E5:61:96:02:78:62:EC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA4872EB9179519C27CAD60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f4f990a-3830-3ead-9384-999385b5231c.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22909
IP address blocks:        69.138.154.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:87:2e:b9:17:95:19:c2:7c:ad:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=f1221f67-a27f-41bd-93ca-428e4db7a1af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:44:ce:3c:a2:01:77:91:d9:46:96:fc:19:50:
                    73:a8:23:b3:71:5a:17:12:ef:e2:fd:16:27:23:84:
                    5b:cf:d5:f4:53:89:f5:e4:bc:d8:68:66:cf:2f:df:
                    c8:ee:b3:c8:7b:ea:c0:dd:54:d9:be:bf:6d:d5:a8:
                    a5:13:ab:fa:6a:3b:f2:53:94:25:0d:90:ed:c9:93:
                    04:0b:41:ea:a0:98:89:30:26:fe:88:64:4f:b8:c8:
                    af:ff:1c:f7:b4:80:fc:32:36:fb:36:3f:ca:32:05:
                    de:c1:eb:85:e8:9b:1b:22:4f:ed:06:d6:cd:ea:44:
                    44:0f:7b:da:6a:f1:eb:57:85:75:e6:c6:46:c0:96:
                    14:40:4c:0d:b9:fe:4b:84:6f:a4:67:00:8c:09:d7:
                    1c:b9:cd:63:e6:44:82:ac:19:70:73:48:0c:b7:9b:
                    b9:58:4c:1b:9d:aa:0b:86:a4:05:a1:9c:b0:0d:75:
                    50:89:33:5a:f5:c4:49:a4:49:9d:2c:67:12:e8:b3:
                    93:ec:31:74:ec:e5:52:b3:d8:af:a6:c6:1f:a3:10:
                    c7:74:25:ce:b3:4f:85:81:50:d5:9c:e6:32:39:e2:
                    ae:dd:1d:56:4c:9b:47:49:3d:9a:e2:96:f2:66:5f:
                    a8:2d:c6:2a:4e:f2:f8:2c:21:1b:12:9f:c8:78:e8:
                    9d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:04:28:D1:A4:5D:14:DA:ED:4D:0C:24:DE:E5:61:96:02:78:62:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f4f990a-3830-3ead-9384-999385b5231c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.138.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:9b:05:e1:b4:e2:5b:ae:18:a9:61:d8:0b:e5:5b:ee:bf:11:
         1e:02:38:8a:bd:e9:d7:64:12:04:36:7d:f1:ef:62:19:d9:d1:
         c2:d7:ed:59:97:2b:b3:e9:73:3e:c4:b5:4a:f7:72:d2:05:b1:
         2b:9c:0a:a1:a5:7e:5c:01:de:8e:81:27:cf:cc:7f:91:af:c8:
         52:f2:ae:45:e5:0c:b2:3d:4f:7b:26:28:bc:be:ba:06:07:fb:
         96:67:24:a1:ee:cc:7e:ca:fb:8f:a7:5e:07:79:7c:f2:8e:6e:
         2f:dc:07:6e:06:71:22:29:c2:94:bf:67:09:46:44:fa:14:60:
         fb:56:4a:0c:2e:b0:a1:43:8a:6c:6b:69:a1:31:a2:4c:ac:a2:
         12:81:cc:20:ae:21:75:56:4d:fc:2f:04:93:f3:32:0b:18:2a:
         e3:40:f2:8b:b6:e4:de:0e:f0:3a:bb:5b:47:ed:dd:c0:60:b3:
         b3:b2:d3:7e:dd:93:d3:11:a2:2b:36:ae:68:d4:4e:3f:ea:91:
         e3:43:a9:ef:bb:3f:3b:da:67:0e:88:41:4a:43:7e:62:b5:09:
         37:64:93:be:62:fb:d1:b1:ac:45:7d:c4:ea:ba:7e:09:f1:35:
         46:d0:e7:e4:60:98:5d:91:51:47:79:96:7f:20:92:84:7b:8f:
         50:1d:b6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----