Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b07e2860-fc0a-3a71-8fae-ef70d7d1a63e.roa
File:                     b07e2860-fc0a-3a71-8fae-ef70d7d1a63e.roa (raw, json)
Hash identifier:          aRxieA3s4dUJVMwMMpqMkgWkNXu1R0/pM3JYFbvz7kU=
Subject key identifier:   58:16:E4:24:10:68:46:26:3E:76:AF:9A:F3:E3:BD:F3:35:33:96:76
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB07B20DA4AC648DF0B23C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b07e2860-fc0a-3a71-8fae-ef70d7d1a63e.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33659
IP address blocks:        174.166.184.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:7b:20:da:4a:c6:48:df:0b:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=f67f8460-3002-48c4-a904-e923a661a392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b7:a7:22:4f:ef:35:e6:3d:a7:cf:71:f1:45:
                    ab:01:a0:79:85:57:5b:19:7c:6e:6f:07:1d:64:48:
                    bb:c4:01:b6:ba:68:11:58:cb:4b:55:42:de:ca:c9:
                    3b:59:f3:fc:d6:29:b4:1c:bb:a9:94:47:f5:51:4c:
                    98:31:2d:e4:d8:32:3f:11:15:93:a5:0b:8f:da:b8:
                    34:0e:89:31:8e:d2:f5:7f:07:a0:55:ee:07:be:9a:
                    1c:f5:ee:69:19:3a:5f:5d:6e:25:f4:44:1b:91:e1:
                    8a:20:a7:89:39:6e:24:3b:b1:94:be:42:f1:89:07:
                    c5:a8:16:e3:e4:a9:f9:71:9d:8f:37:63:73:44:46:
                    b9:f4:67:d5:53:c1:a7:46:7f:3f:9f:60:10:b0:db:
                    9b:0b:9c:6f:f1:ff:30:e0:cb:5f:35:ed:fa:4d:72:
                    d3:c4:e9:b1:e8:6b:11:f4:28:69:89:75:72:2b:43:
                    46:f4:cf:8c:40:f7:11:fd:eb:ca:ae:53:54:50:1b:
                    8f:3e:81:f8:3f:36:7f:c8:fb:01:0c:b4:39:5c:2e:
                    79:a3:fa:79:7f:e4:36:80:58:61:1c:d7:48:76:0f:
                    9a:bc:82:9d:be:79:c0:ba:d6:9f:d1:3d:63:8d:70:
                    62:5a:e1:fe:8e:71:75:d4:6a:c6:bc:eb:3e:47:d9:
                    65:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:16:E4:24:10:68:46:26:3E:76:AF:9A:F3:E3:BD:F3:35:33:96:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b07e2860-fc0a-3a71-8fae-ef70d7d1a63e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.166.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:aa:0d:8f:92:92:26:5d:1c:43:3e:73:44:11:eb:64:27:ad:
         cd:d0:00:73:1f:3a:8c:47:6e:3f:52:04:e7:a6:73:27:92:b6:
         8e:be:1a:8f:1b:9a:ed:9b:c1:a9:22:a0:63:17:3e:3d:fa:d6:
         ad:fd:f2:9a:8a:19:3d:3d:e6:99:ba:cb:5c:20:2e:95:a0:9a:
         8c:65:40:5c:4f:24:98:0f:13:8b:77:61:60:23:51:a0:5e:4b:
         d6:1a:4b:fa:bf:01:c9:bb:ca:1a:03:82:20:74:76:40:78:6e:
         66:04:c6:32:f4:ef:ec:50:79:ca:5d:6c:84:83:bc:ae:63:fa:
         66:3c:3f:66:08:07:e0:90:18:c8:64:e7:33:c6:ee:0a:97:c6:
         e2:2a:b2:db:e1:47:93:7e:67:35:15:b8:b5:17:3a:08:bf:bc:
         e9:19:d3:d5:0d:86:20:f5:bd:33:29:bf:c1:c1:a8:f7:32:b4:
         0c:0d:0f:b6:56:b6:6d:84:e3:28:eb:22:f6:1a:9f:6c:ff:10:
         1b:38:36:a2:33:26:be:73:53:7e:d4:4c:a2:23:7a:8e:45:ea:
         78:81:f6:5f:2f:c8:53:04:5c:ae:26:60:19:30:0b:c0:aa:5c:
         de:4a:1b:ed:e9:18:16:1e:3f:05:55:0b:14:af:71:9d:d9:24:
         50:41:60:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----