Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/390db201-5086-347b-8580-4147cc48b8e6.roa
File:                     390db201-5086-347b-8580-4147cc48b8e6.roa (raw, json)
Hash identifier:          dXBW9ITHb6+i56P0gyFRpm0lIHb1U8jeNp1daD1Y5wU=
Subject key identifier:   CB:7F:B8:0D:75:F4:A2:91:16:2D:D5:F3:4B:87:44:1D:05:C6:9A:54
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA61A9EC21CDAE588EF3200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/390db201-5086-347b-8580-4147cc48b8e6.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22258
IP address blocks:        76.123.128.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:1a:9e:c2:1c:da:e5:88:ef:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=47a15f5a-264f-46d3-bdd1-a4aa3e3ccb8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:15:f6:a4:71:e7:a8:1c:10:41:17:8d:79:4c:
                    be:8a:49:3b:64:c2:83:ac:7b:79:fc:39:ec:62:39:
                    a2:56:e4:f2:35:8c:d8:20:54:90:1b:3f:de:cf:4c:
                    b9:af:db:f7:ab:d6:13:cf:8b:0b:d4:c2:eb:b9:6d:
                    82:36:4d:d7:45:77:12:29:f7:69:ae:31:08:34:bf:
                    c8:92:3d:a8:e3:18:7a:37:54:81:af:66:c9:e2:cc:
                    53:68:a4:ce:1f:18:78:7d:90:0d:fa:89:5b:b4:f4:
                    50:a2:9a:eb:36:c1:d2:25:65:fb:f0:da:b4:bf:2c:
                    db:38:04:fb:db:5c:b6:5c:0d:f2:ee:11:9f:15:6d:
                    49:b6:88:8c:31:7f:7d:27:29:d3:60:b3:b6:e9:78:
                    36:09:37:39:3e:0e:35:a9:fb:cd:6c:96:d7:2f:ab:
                    ac:b6:ff:db:df:bd:64:1e:93:4b:a7:dc:24:8d:c1:
                    00:7b:11:5e:6b:59:62:8d:c1:f2:e8:3d:bb:9c:40:
                    10:82:0c:48:96:32:18:3b:ef:ee:4b:3e:6f:8a:93:
                    cc:ef:f3:97:2d:67:7d:33:77:3a:a0:6b:b3:b5:d2:
                    f3:80:bd:58:ae:1b:49:33:e1:79:c7:2b:c0:69:76:
                    1a:80:6e:df:39:b0:22:3b:18:b3:51:c3:fe:1c:62:
                    a2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7F:B8:0D:75:F4:A2:91:16:2D:D5:F3:4B:87:44:1D:05:C6:9A:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/390db201-5086-347b-8580-4147cc48b8e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.123.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:a2:06:dc:7e:f3:20:26:0b:22:39:06:e6:1a:ba:68:ac:a6:
         a1:eb:e7:57:6e:a0:03:d9:c0:68:bf:50:05:5c:5b:6f:93:df:
         7e:85:63:d5:08:da:00:ae:ff:01:21:ad:bf:4a:69:91:ef:93:
         43:27:71:fe:b1:bb:ae:58:cd:0b:49:8d:a0:57:55:03:8e:53:
         da:4d:46:8a:e8:09:44:a2:10:5f:eb:db:f4:ec:4d:4b:18:f3:
         d3:2f:48:b1:5f:d0:5d:2b:b2:ce:83:a0:53:4e:6e:3a:81:34:
         57:1e:0f:75:b8:aa:8b:4d:35:69:f2:3d:a3:bf:7c:e3:5b:42:
         7c:83:2e:4a:24:16:12:47:74:36:f4:de:19:7d:bf:41:5e:3e:
         fd:1b:e8:c7:4b:2d:ca:f8:ff:70:57:01:ba:57:5d:51:12:89:
         65:cb:99:8f:3e:0b:8e:b9:54:a2:26:3f:2f:2a:26:4e:f3:dd:
         c2:9a:d6:f2:db:95:82:dd:d7:5a:f6:13:ef:6a:ab:2f:db:2c:
         14:b2:fc:61:3a:8f:e8:04:8f:bc:b9:a5:f2:b2:3a:5d:ec:96:
         d0:3d:cf:92:2f:89:dd:72:93:ac:44:66:be:6d:e3:ef:63:df:
         c3:56:0e:08:22:d7:18:3d:94:d0:22:36:a9:cf:bd:3e:50:c7:
         50:3c:aa:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----