Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e0cb133-9edb-3366-b359-b5b8d8f6eed9.roa
File:                     9e0cb133-9edb-3366-b359-b5b8d8f6eed9.roa (raw, json)
Hash identifier:          b9Ir+UpQQGN4vKjQYV5Qix+0Y8bfaKVuL1AMkduJdsg=
Subject key identifier:   C8:D4:12:DF:D2:31:59:85:5F:4A:CE:43:D7:E0:30:10:7B:F7:48:7F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA4E7170FC0F28233647A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e0cb133-9edb-3366-b359-b5b8d8f6eed9.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33651
IP address blocks:        67.169.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:e7:17:0f:c0:f2:82:33:64:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=85a9cc8b-49f8-4e13-ac59-a7c46b093f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ae:b9:34:77:bf:00:68:6c:36:91:38:29:44:
                    f1:bc:0d:51:4b:6b:ba:3f:1a:b1:4b:dd:a1:bc:40:
                    55:87:37:78:c2:00:3a:59:d2:0d:2c:99:2d:4c:c5:
                    44:62:8f:ec:ed:91:6e:9c:e2:87:a4:56:94:9b:ea:
                    cd:0a:86:9f:b9:20:b0:cb:b6:2b:49:c8:b5:0c:7c:
                    5a:d6:41:8b:c7:bc:26:c7:60:c3:f0:8c:69:19:a5:
                    b9:23:d7:6e:70:b9:c2:ad:e8:c2:89:d8:68:4c:08:
                    6d:ab:6e:ec:1c:57:a9:ae:9c:11:78:3e:a2:5e:a1:
                    ee:af:0f:dd:1b:7f:10:45:64:88:ec:82:9d:a6:92:
                    44:3c:c0:18:df:5b:94:e6:5e:92:7e:9c:bb:12:3e:
                    5e:1c:79:6e:a3:9c:1d:91:2e:47:15:90:04:d9:ee:
                    9f:f4:1d:7f:b1:20:b4:c8:9c:6b:e8:7d:88:ae:8e:
                    d2:a4:58:4f:a2:7a:ec:02:47:2f:7a:3a:c1:94:e6:
                    8f:c4:d5:c0:36:5a:7c:bc:1d:cf:c3:2f:ba:c8:98:
                    0d:63:35:33:4d:ae:18:40:df:7b:95:b5:74:34:48:
                    09:f2:d4:c4:09:fa:42:f5:a7:10:4a:94:1e:53:e4:
                    e5:fc:a6:0f:a4:56:35:00:fb:d2:fa:45:b8:54:d2:
                    70:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D4:12:DF:D2:31:59:85:5F:4A:CE:43:D7:E0:30:10:7B:F7:48:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e0cb133-9edb-3366-b359-b5b8d8f6eed9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.169.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:f6:56:ee:e2:34:2c:44:62:92:18:ab:5f:ca:8f:dc:0a:9b:
         8e:80:59:60:f8:58:b0:6f:14:3d:38:92:ef:09:ca:d1:3c:3c:
         e2:74:35:29:5d:b0:ed:27:0b:03:c4:c0:f7:11:1a:fb:17:4e:
         da:78:b3:e7:e1:2b:65:e2:8d:ec:6f:9f:fc:86:29:d9:a4:d6:
         c1:d4:63:71:6c:af:6a:42:b7:6f:87:41:f0:4d:17:81:31:31:
         69:cd:6b:a9:83:31:0d:14:c6:a2:28:19:c0:03:15:46:77:00:
         a3:8f:94:ee:9e:67:43:c1:01:56:c4:01:55:81:0d:63:63:bf:
         42:5b:df:c9:ad:3b:22:27:72:3b:cd:b1:3a:85:0f:b1:c4:dd:
         5a:86:4e:92:ad:58:13:b1:4f:48:c2:4a:90:bc:ad:cf:1c:c2:
         2d:11:a8:df:94:68:af:11:13:98:2e:f5:cd:4a:48:1a:f3:27:
         91:cd:94:b5:8b:d5:58:09:5c:31:c9:d9:10:f7:ed:37:38:e6:
         aa:3e:bc:64:e5:c4:74:9a:df:d7:f3:e3:28:4d:cd:6b:8e:e7:
         6c:e0:f9:b0:89:15:12:7c:c7:7b:0e:77:40:34:a7:fb:ce:b2:
         38:a9:c7:1b:66:7a:69:f9:80:1c:39:be:d9:07:2c:c7:df:28:
         76:f0:db:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----