Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c97b7fc-243c-3918-a0d7-9938c84a271b.roa
File:                     8c97b7fc-243c-3918-a0d7-9938c84a271b.roa (raw, json)
Hash identifier:          11jTmfvaa2ogzI+ZB4mKuFjVl4E7Bg8WC45hFfSGnJY=
Subject key identifier:   2D:59:BA:C4:70:E8:0C:2E:D6:4F:C4:A5:23:62:D6:BD:15:90:0B:C9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA61510D9384904AA628480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c97b7fc-243c-3918-a0d7-9938c84a271b.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     21508
IP address blocks:        71.206.128.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:15:10:d9:38:49:04:aa:62:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=1b9bdb3e-db21-4fa1-b7ce-5956e5321827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2e:dd:9a:e5:8b:d1:1c:3c:4e:84:f5:95:ee:
                    5c:87:b4:47:61:30:7b:35:87:00:3b:e6:66:55:d5:
                    a9:59:77:ae:24:75:6f:96:b0:ec:4b:ba:4e:81:9d:
                    b3:ff:e2:f3:1b:68:de:bc:fd:a4:0f:dc:e9:34:73:
                    7f:6e:94:93:d7:57:e2:9d:b2:c1:50:0c:6e:16:56:
                    08:9e:17:e5:93:b6:bb:52:7a:db:f2:20:75:64:3b:
                    42:43:97:4e:12:4d:59:93:05:d5:e7:c7:cb:3b:7e:
                    f4:17:8c:51:c0:69:96:c2:86:00:fe:78:11:f5:fe:
                    24:a2:53:99:b2:8f:60:30:bc:c7:42:ef:98:39:eb:
                    dd:12:7b:ba:6d:e4:cd:88:55:1e:35:22:f8:50:50:
                    3b:ad:ce:a9:78:f9:51:4c:77:99:22:4b:4f:6e:f7:
                    cf:04:56:22:f9:58:f3:1f:ed:73:f8:15:90:11:c6:
                    0f:0a:f2:a0:15:f1:02:cc:b6:d4:a2:3a:3c:42:49:
                    68:bb:a0:16:73:f2:8a:99:98:84:22:29:76:8b:d0:
                    c7:3f:16:7b:c6:a6:1d:ac:d7:04:61:f1:7e:f2:1d:
                    79:ab:14:1b:9a:69:23:2a:f9:6a:54:a7:ac:73:f5:
                    4c:1b:7b:e3:ff:77:f7:c7:e4:40:ce:e2:8f:49:03:
                    fb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:59:BA:C4:70:E8:0C:2E:D6:4F:C4:A5:23:62:D6:BD:15:90:0B:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c97b7fc-243c-3918-a0d7-9938c84a271b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.206.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:07:28:1d:df:84:2d:c9:2c:a2:1d:7e:25:3c:b2:74:80:d5:
         69:ec:e1:a5:ab:35:ec:6c:61:a4:e7:89:0a:d2:0e:31:28:af:
         44:fe:05:ba:6c:c9:c6:b1:a5:63:92:f1:38:1c:72:ad:25:65:
         36:37:9f:ac:fb:41:a4:0b:b7:02:ae:51:97:02:c2:ed:04:a3:
         86:4d:a9:6d:bf:d3:23:ea:71:4d:ca:13:ee:b3:d6:24:92:82:
         1c:10:31:d0:0b:82:a4:f6:88:3e:28:b5:d5:73:84:be:e5:54:
         cf:8d:2b:66:dd:a4:f9:93:5f:88:2b:13:ca:37:e3:60:3f:bd:
         f1:03:f9:b1:b1:46:46:3c:df:ba:fe:63:11:97:4e:ac:de:2f:
         d0:d6:5f:dd:00:23:0f:a3:f0:71:3c:33:39:99:ef:8a:b6:28:
         ba:e1:cd:99:52:53:35:28:43:cb:92:56:16:45:36:c9:37:a0:
         11:7f:66:6e:3e:d0:9e:f1:70:c3:55:2f:ca:05:ab:b1:ad:1d:
         d9:cf:9a:2b:c1:3a:f9:c4:76:25:e9:99:d7:9f:3b:8e:49:3d:
         f3:b5:16:58:f2:0d:94:5a:c4:5d:e3:96:60:6d:37:09:b2:cd:
         08:9e:5e:fa:ae:04:74:08:bd:4c:f2:19:43:36:f0:a6:76:ac:
         7d:53:9d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----