Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b82c4bb1-41b0-3b8c-8ef0-6fc08df79924.roa
File:                     b82c4bb1-41b0-3b8c-8ef0-6fc08df79924.roa (raw, json)
Hash identifier:          44xiQ01V9VQ+d5GfCAff7L4Q0V+zjjGTw/vs4+OCNSo=
Subject key identifier:   74:F6:59:B7:A9:FB:4A:10:E0:E1:BD:A4:97:9E:8D:41:0D:66:69:B1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB1C8BFD11517F980FFFD80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b82c4bb1-41b0-3b8c-8ef0-6fc08df79924.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        76.133.218.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:c8:bf:d1:15:17:f9:80:ff:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=cab77d6f-5cfa-48b2-988c-bd8c9563fb29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:02:66:93:a5:e2:37:9a:df:d8:28:7d:8a:bf:
                    2a:15:f7:ea:3e:67:6d:2c:a6:47:01:a5:6b:17:f4:
                    60:bf:9d:c8:52:7c:0f:69:d2:c3:6a:9c:51:b4:f7:
                    f0:73:5e:cd:93:af:d2:25:84:18:04:ad:49:10:21:
                    79:e9:de:30:82:7e:f7:cb:ef:88:c2:45:5b:03:04:
                    ba:43:a2:76:a4:65:6b:06:a4:69:2b:c6:77:d0:18:
                    50:a2:e4:f7:5d:7b:40:51:62:6d:83:61:5b:84:57:
                    3d:fc:c1:fa:5a:d6:03:70:ee:9a:34:ba:d0:e0:e8:
                    c3:f9:af:c6:ed:2f:8e:ca:99:80:71:23:82:ca:b7:
                    fc:36:43:73:27:11:fc:91:5f:c8:4f:10:cd:b7:02:
                    62:0c:f2:e8:34:4c:f2:71:12:c3:06:1e:25:46:c6:
                    55:7a:d2:fd:1d:03:29:ac:57:2c:cc:72:a9:aa:35:
                    9d:4f:57:28:c5:d1:57:38:5f:69:95:72:4b:cb:40:
                    67:22:b5:a5:f6:0d:7d:86:08:7e:8b:1a:f7:73:9e:
                    92:10:6f:d6:97:ed:e1:4d:ba:74:29:fb:2a:d8:02:
                    ca:54:20:19:04:b8:96:99:ef:51:4e:d6:4b:52:d0:
                    f9:c0:a4:52:bc:e3:61:06:bd:67:6c:8a:98:73:39:
                    c3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F6:59:B7:A9:FB:4A:10:E0:E1:BD:A4:97:9E:8D:41:0D:66:69:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b82c4bb1-41b0-3b8c-8ef0-6fc08df79924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.133.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:73:6e:51:48:8d:a0:89:ce:76:5c:a7:52:b3:74:c1:3e:7f:
         85:fa:7a:54:fe:42:ac:a6:a8:9f:24:af:bf:05:83:00:15:47:
         0a:f2:29:91:cb:08:3e:53:79:ff:a1:93:80:ec:85:58:1e:68:
         89:7c:91:d7:cc:94:80:2c:d3:c1:cf:57:87:5f:03:40:0c:6d:
         ca:fd:73:98:c2:13:4c:47:73:a0:06:19:77:79:71:fa:45:51:
         38:03:a3:d7:d2:95:e6:4d:54:66:4b:80:9f:e5:df:d1:7c:2a:
         06:26:f5:fd:8a:bd:5e:a1:51:ac:29:af:3f:84:29:71:13:67:
         0e:32:a6:24:b3:57:c3:89:c7:12:5c:65:eb:53:de:21:de:6b:
         5c:d2:81:c5:ba:af:93:f9:95:3e:6e:05:3d:5e:b7:53:85:00:
         48:26:45:31:57:02:b6:13:dd:72:e9:5a:03:16:da:ab:7f:f1:
         3b:0b:c2:c0:7c:de:47:45:64:c0:ee:bc:0d:b5:8e:e7:12:48:
         99:4d:a3:3e:25:f7:e3:21:7d:7e:14:8c:24:09:6f:d0:17:9a:
         6e:ec:f2:3c:f3:d7:b5:0a:ab:78:5c:62:dc:df:78:a9:ff:c5:
         b1:fc:b4:8f:21:71:3f:44:47:84:cb:2e:e8:55:c7:a1:37:7c:
         94:b3:d6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----