Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b959ffd-bf96-361f-a050-850b2227da3b.roa
File:                     6b959ffd-bf96-361f-a050-850b2227da3b.roa (raw, json)
Hash identifier:          cW9+CD0+UadcmzLJUrd77iP5w+YXwQlYJno1uewIPD0=
Subject key identifier:   1F:DB:85:82:EF:CC:05:18:4A:F5:55:73:18:2F:E8:EF:09:7E:EA:E6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5C5278C14A632927B4180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b959ffd-bf96-361f-a050-850b2227da3b.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22909
IP address blocks:        68.53.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:c5:27:8c:14:a6:32:92:7b:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=33c84536-8224-42b4-bfd3-f4e2ce37d7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5b:58:9b:44:f9:f6:d2:4b:f2:22:a8:d1:21:
                    36:f6:57:9c:56:dc:a6:de:e7:12:ec:b0:ba:1f:fd:
                    9d:eb:64:3f:e3:20:17:d9:d9:c2:0f:04:e7:fe:39:
                    b8:29:9d:0d:17:8f:3c:d7:e0:30:1f:9e:f8:af:e9:
                    43:2d:21:a6:0d:2f:2b:be:29:98:3c:32:b4:49:93:
                    f1:32:c7:01:9c:55:70:b7:b8:e0:40:7d:ff:ca:bd:
                    5a:88:e2:35:fd:6b:65:15:48:23:d7:f4:74:cf:7f:
                    e8:a9:d9:26:e2:1d:98:e7:36:40:60:3b:0f:2b:11:
                    84:61:17:2c:9b:86:f6:4f:86:fa:84:23:ca:80:e5:
                    54:10:1b:6e:e6:25:01:e7:58:35:76:f5:b6:be:0e:
                    be:70:9e:22:c7:26:4e:0c:19:e5:56:8f:a0:76:0a:
                    d3:e2:15:ce:48:7b:f1:6d:07:d3:c7:55:69:e3:1b:
                    48:5a:1a:67:24:8d:82:f1:c2:f7:d1:65:7b:e7:e0:
                    19:ee:8a:0b:db:36:3a:fb:57:84:5a:4a:c4:22:77:
                    71:85:c0:70:7d:08:83:9f:16:34:9a:b3:e1:b8:36:
                    d8:10:cb:99:c3:83:d4:ff:3a:dc:8d:42:48:5d:a1:
                    86:5d:05:23:8e:5f:d4:47:e4:4d:85:a8:d3:84:df:
                    5e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DB:85:82:EF:CC:05:18:4A:F5:55:73:18:2F:E8:EF:09:7E:EA:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b959ffd-bf96-361f-a050-850b2227da3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.53.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:fb:85:f2:35:73:b4:f4:ea:0b:1d:0f:69:55:d8:58:2c:bb:
         8e:32:f8:bc:5f:58:0d:e6:0c:cd:bb:16:bb:74:1f:5e:22:31:
         b1:19:c4:f2:20:b8:be:7f:20:e5:e2:6a:cf:d4:de:71:06:4c:
         fc:55:73:a1:39:d3:a0:ac:72:cb:f6:96:7d:66:41:b8:0e:4a:
         b9:73:16:51:bd:0d:3d:e9:4c:80:67:d3:27:ef:3b:cf:f6:25:
         a5:ea:a1:07:a1:ba:d9:e7:c5:aa:0f:51:26:93:7f:19:a7:38:
         06:7c:f7:1f:a6:70:be:c5:69:ff:3b:d1:1c:5d:ea:6e:e0:e1:
         a1:65:b5:54:87:42:5b:5c:cb:e4:b1:40:40:1f:2e:0b:5c:99:
         41:63:9b:87:f1:5f:f2:d8:a1:3a:2a:12:53:b1:f1:f1:7e:31:
         05:f9:33:85:12:56:2a:65:a3:7a:9d:e5:88:89:37:5d:73:58:
         0f:06:e1:4c:ba:ab:ca:32:22:d4:2e:46:9a:81:34:aa:17:f3:
         38:c4:0d:f7:0a:c7:ed:71:ef:30:e1:be:18:96:7c:d9:d3:dd:
         6b:b2:67:32:be:19:14:12:9e:27:2e:3d:ee:af:be:a5:5b:21:
         61:e8:f2:ac:6b:64:62:e0:4a:53:86:b1:9a:8c:f2:d6:2a:58:
         91:5c:20:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----