Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6dd2cf15-2a1c-3a55-b7fd-c748e7a74f50.roa
File:                     6dd2cf15-2a1c-3a55-b7fd-c748e7a74f50.roa (raw, json)
Hash identifier:          xzkAxgA3cLoKMuatxYRl6QFJAuD2BvxA7TKjUnI5fE8=
Subject key identifier:   ED:1C:A0:A9:08:A2:CE:8A:18:98:9E:9C:72:79:56:E3:10:34:AE:87
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA60AA97876E8E99C84D4A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6dd2cf15-2a1c-3a55-b7fd-c748e7a74f50.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7725
IP address blocks:        96.67.224.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:0a:a9:78:76:e8:e9:9c:84:d4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=27e35d2b-695a-4939-8896-93b6964ddf97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:10:e1:1e:96:a8:d8:8e:5b:7e:e8:2f:33:35:
                    3d:ac:35:04:f5:3a:42:66:8c:82:ec:72:e4:46:11:
                    96:37:a0:2c:22:f4:57:05:c8:b5:68:ab:ed:ff:ae:
                    f0:6d:8c:dd:93:25:c6:ae:e0:34:e1:13:0f:25:4b:
                    8b:ad:3c:5b:56:9c:ec:92:ae:74:66:7f:c1:0e:d9:
                    f8:45:a9:e8:53:24:a7:45:1f:ce:d0:6b:be:aa:ad:
                    3a:18:84:cf:90:fb:8d:70:2c:68:28:d3:b1:62:70:
                    4a:80:a0:86:0b:95:18:81:9f:42:c9:ca:8a:31:3d:
                    6d:0c:b3:77:ec:81:ec:fd:01:e1:4f:d0:94:c2:8b:
                    c6:2c:05:63:12:96:de:c1:53:47:10:c1:31:5b:b9:
                    63:e4:70:b1:c4:33:ca:47:9c:9a:0a:14:4e:44:5a:
                    35:7d:25:50:a2:80:9b:92:30:29:bc:d2:69:3f:85:
                    09:ce:54:7e:30:f6:f0:14:ad:7f:aa:aa:d0:af:a7:
                    a3:8a:05:42:70:6f:6f:bd:19:86:58:de:93:1f:c0:
                    7f:54:3a:bc:b6:ab:74:6f:c7:d5:ce:3e:80:ca:7f:
                    25:30:54:8a:6a:68:f1:43:d3:1c:ab:e7:60:2f:a5:
                    c3:87:32:11:93:68:82:17:0f:b5:7a:12:a0:01:aa:
                    a6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1C:A0:A9:08:A2:CE:8A:18:98:9E:9C:72:79:56:E3:10:34:AE:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6dd2cf15-2a1c-3a55-b7fd-c748e7a74f50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.67.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:d9:db:8c:0d:56:a7:cd:2a:f0:87:3e:d8:0a:cb:8c:c2:e3:
         73:fc:e5:b8:e0:98:07:5b:33:37:6f:db:eb:1b:83:53:44:5f:
         1f:b7:46:6e:85:03:40:9f:79:7f:ee:a1:88:69:50:56:54:0c:
         11:c6:3d:5b:af:ec:1f:c3:f7:b4:13:9e:7d:2d:6d:49:db:01:
         12:e0:45:ed:85:a0:23:0c:f4:7d:82:11:41:c4:d6:3a:53:ea:
         11:bc:59:20:cd:e1:fd:73:4c:7c:81:39:95:21:af:48:28:b1:
         3b:44:b5:d7:1b:82:8f:8e:fb:e1:08:b4:8d:03:f2:9d:db:7e:
         78:9a:87:3b:50:fe:0b:48:f0:d3:5a:05:a7:b8:b4:16:c9:8a:
         76:2c:50:8f:4c:da:43:fe:62:ba:4a:38:da:f8:10:2f:8d:e7:
         68:43:aa:2b:f7:8f:84:ed:6e:1c:24:b0:7f:a7:03:9e:da:14:
         d3:92:3c:48:b1:ce:27:f8:17:2d:41:3c:04:47:ce:6b:d6:bc:
         e5:bc:63:17:7b:3f:01:8c:ca:bd:2d:21:86:83:eb:0b:36:fd:
         94:1f:b7:34:01:38:14:e7:7a:ae:e2:6a:17:50:b4:d6:c3:c0:
         14:7f:d4:9c:72:68:60:e3:d0:4b:ac:9d:56:19:23:83:0d:0f:
         d5:c3:42:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----