Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/49bbe62e-dbe4-39c1-a737-53299cd7ce97.roa
File:                     49bbe62e-dbe4-39c1-a737-53299cd7ce97.roa (raw, json)
Hash identifier:          zpVRIvlBJoWvaP+0RTzhRhoNiA1ARpJLGml9LIvlhg8=
Subject key identifier:   0B:3D:55:F2:E9:78:14:C4:D1:63:C6:79:3C:4B:2C:9E:52:16:52:A8
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F43285848EC9684122B9F72946C167500
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/49bbe62e-dbe4-39c1-a737-53299cd7ce97.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     4181
IP address blocks:        208.73.88.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:84:12:2b:9f:72:94:6c:16:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=3155c60e-7cdf-43cb-8822-7d6942eacafa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e1:59:ca:21:46:c6:1d:cd:0d:53:9d:87:c3:
                    7e:48:45:9d:0a:75:13:28:bf:58:34:e3:2d:a4:00:
                    85:58:1a:24:8e:a1:95:55:8f:9d:7f:04:3a:9a:5d:
                    c5:9c:91:af:0c:ea:89:42:81:31:f0:55:1c:39:6c:
                    0b:8f:0f:72:f3:22:c1:5c:14:d7:a9:80:b6:0d:71:
                    d9:4d:01:0c:f3:e7:85:f0:d8:72:68:ab:e0:19:39:
                    18:c8:cc:b3:16:8b:7e:92:f9:56:64:4a:2f:5d:3c:
                    61:f1:c0:76:f9:dd:ea:eb:7f:87:a2:40:37:28:69:
                    5f:e9:f0:6b:c4:58:bb:1e:bf:ef:4f:cf:0a:2e:fa:
                    a3:71:65:e4:21:38:04:7e:fa:ef:23:3a:6e:d9:5a:
                    62:d3:ca:a9:d9:4a:ca:2b:89:e5:02:6d:ae:a1:aa:
                    25:7f:29:6a:2a:e0:5f:c0:26:77:13:11:85:f2:5d:
                    06:4b:c2:23:51:60:54:7a:f6:98:9c:57:f8:b0:e0:
                    b8:c6:4d:1e:8d:11:df:6b:2f:50:ad:a6:85:12:27:
                    2a:89:1c:37:5e:44:91:16:30:d7:0c:bf:4f:ff:58:
                    2a:87:b2:54:13:75:8a:10:30:14:d4:0e:e9:5b:d6:
                    eb:4e:64:7c:2a:94:2f:1e:4e:c8:2e:43:1c:5a:5e:
                    0a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3D:55:F2:E9:78:14:C4:D1:63:C6:79:3C:4B:2C:9E:52:16:52:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/49bbe62e-dbe4-39c1-a737-53299cd7ce97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.73.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:87:39:87:12:c1:5b:04:3c:26:6d:18:4f:4d:20:49:c9:bc:
         d5:60:ab:2d:fb:6e:88:30:e9:18:ac:79:f9:2b:a8:ff:8f:ce:
         b7:63:b7:d0:b7:e9:10:c8:46:b6:e3:ee:7f:46:b6:94:53:9d:
         ad:41:e9:c4:d6:0a:95:89:82:09:ac:6c:1c:15:9f:39:cf:cc:
         c0:4e:83:be:c3:48:17:97:5a:b1:32:19:10:c8:82:fb:00:00:
         26:05:9c:22:4d:4e:37:e3:00:b0:32:f3:79:db:bc:d6:3d:3a:
         ba:92:f9:24:d7:e2:5c:da:42:3e:dc:1b:24:81:51:90:b3:0f:
         91:70:10:e3:e1:1a:73:2a:69:4b:40:b4:2e:99:b4:b6:5e:de:
         39:21:5e:3a:40:2c:4b:7a:e6:35:57:9c:43:d6:9e:4b:1d:b8:
         77:55:5e:f6:85:82:dc:b7:d7:6a:36:e6:d9:05:93:15:75:f5:
         9a:f3:cf:9e:90:19:db:a6:4b:3c:53:6f:10:fe:b2:c9:49:2b:
         e4:a6:5b:4e:fc:c5:ba:78:e1:57:bb:44:30:56:9a:09:fe:63:
         55:43:df:f1:5c:f4:22:3e:0a:1d:b2:bf:e2:cf:64:e2:d3:90:
         10:35:d9:bb:39:00:0b:14:8b:45:0c:fb:8e:c0:b6:e8:3e:d2:
         45:4e:b2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----