Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc2541d0-eb6d-3820-8e2a-514e44782a8d.roa
File:                     dc2541d0-eb6d-3820-8e2a-514e44782a8d.roa (raw, json)
Hash identifier:          OLQh9ybHTXjEB85m7ITacPN3GURnfwxBx3ZULcy3XMw=
Subject key identifier:   88:C5:65:31:24:3C:1C:8E:F5:9A:FD:1A:E1:C3:F5:FD:44:90:BE:DC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA4E354D0412AFB8E880E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc2541d0-eb6d-3820-8e2a-514e44782a8d.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33650
IP address blocks:        162.17.160.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:e3:54:d0:41:2a:fb:8e:88:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=f0c58a72-cc7f-4f10-b6e9-de6e99a8982f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0c:db:7a:dd:50:6a:04:65:04:ff:35:f1:84:
                    39:db:71:dc:47:40:39:89:7c:67:0f:b3:0d:99:dd:
                    68:79:52:0b:cc:9d:17:42:32:07:7c:1e:a9:78:f5:
                    49:b6:9a:43:4c:93:67:6e:15:11:44:70:72:75:74:
                    a3:5d:0e:fc:bd:3e:10:40:17:6a:9a:ca:2e:5b:5d:
                    ff:8f:68:32:66:83:90:66:e9:6f:71:a9:16:1e:02:
                    2c:c9:0e:ac:65:b7:75:96:51:a5:e0:2b:6e:09:5b:
                    77:6e:2f:c4:97:02:39:36:b9:97:98:eb:a0:47:77:
                    2f:82:b5:92:44:db:0d:d5:df:8c:f5:2a:b1:fb:5a:
                    e0:c8:72:5f:03:2f:ab:68:a7:a1:03:de:80:45:21:
                    3b:10:eb:68:66:a1:07:04:a9:36:be:09:75:77:d6:
                    b6:cf:71:d1:23:cd:97:3a:15:a9:4d:87:91:6f:86:
                    e9:0e:1f:49:21:48:50:e5:ec:11:c9:8a:58:1d:07:
                    76:29:2d:f3:34:e1:79:f7:53:b6:d0:cd:cc:b9:92:
                    91:e9:17:9b:4e:da:01:d0:99:e5:cd:be:5a:0d:11:
                    80:3c:94:8b:50:30:39:ba:a6:2c:10:0c:8f:83:d3:
                    5d:a8:06:35:3e:97:81:67:5b:4c:3d:ff:f9:f4:b9:
                    91:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C5:65:31:24:3C:1C:8E:F5:9A:FD:1A:E1:C3:F5:FD:44:90:BE:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc2541d0-eb6d-3820-8e2a-514e44782a8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.17.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ae:4b:e1:18:4c:98:7d:85:68:b6:0f:9e:f1:98:c4:1a:b3:
         86:55:31:f6:d4:c3:06:be:27:7b:7f:61:3f:eb:a4:5a:be:f8:
         62:e1:18:2e:9d:81:6e:ca:2d:69:f4:73:14:3e:31:94:15:e1:
         35:f5:87:e6:2a:c0:a1:0d:56:3f:9a:38:0e:3a:34:c9:5d:7c:
         4a:02:37:e2:72:09:26:df:fc:8e:7d:f6:d5:d6:1b:76:6f:f6:
         55:05:ed:8d:03:bd:63:53:27:f7:e0:77:f7:fe:05:b0:cd:50:
         97:14:ec:24:f9:09:9b:8d:fb:fb:96:7a:1d:3e:e4:d0:ba:0f:
         0d:39:28:57:b3:07:7f:09:47:24:fb:19:4e:c1:1a:0e:b5:3e:
         ae:67:3d:1e:82:94:13:e9:65:99:ba:0c:90:d8:ec:0e:75:04:
         f0:45:f5:b9:4a:85:fb:9d:9a:3b:5a:d9:b2:af:59:dc:77:6b:
         e4:ab:ac:24:5b:5d:db:5a:ed:90:4c:c9:a4:8d:af:16:06:3c:
         4f:3c:d3:71:03:24:02:42:32:07:cd:2e:e6:66:36:95:e0:3e:
         7d:28:59:e9:58:dd:54:a7:fe:18:75:cf:92:cb:ef:3d:ac:cb:
         9a:25:8b:87:56:ce:d9:99:4b:fa:ba:49:7a:a6:2a:13:b6:40:
         24:c3:d0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----