Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/b7ac1bbd-76d9-3be3-9b83-0d2ac5cafc1e.roa
File:                     b7ac1bbd-76d9-3be3-9b83-0d2ac5cafc1e.roa (raw, json)
Hash identifier:          b3ljXFeCXXB/lLAf4L+k0sLUwK1RG1uQCLD7exCt9KQ=
Subject key identifier:   69:BA:48:BD:33:37:93:D4:D7:2D:B6:D9:50:5C:B7:73:B7:97:64:D0
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F432858494B640AF0CA71B4C1D871EF00
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/b7ac1bbd-76d9-3be3-9b83-0d2ac5cafc1e.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     4181
IP address blocks:        217.143.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:0a:f0:ca:71:b4:c1:d8:71:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=7570c0f3-bff4-489c-9572-abec8bd97621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f0:ff:5d:9a:64:09:4a:22:cc:6b:da:34:c2:
                    ee:3f:76:6f:8a:4c:83:9d:43:7c:03:0e:16:44:a9:
                    5b:99:92:e3:1b:0a:1c:22:94:58:76:9f:04:d2:ad:
                    d2:21:f6:99:0e:79:66:18:2c:75:c6:e0:a3:34:bc:
                    94:f1:54:d3:db:8d:31:c5:30:85:14:44:77:8e:cb:
                    46:f3:fa:8b:e5:23:2e:cf:60:08:79:84:51:82:4b:
                    94:6c:2e:fb:f3:eb:b2:40:b6:ca:98:ab:f5:de:55:
                    c9:7f:c3:9a:ab:45:ab:ec:7f:9d:4c:fb:ac:c1:26:
                    37:26:f5:1a:63:28:3d:64:78:a3:29:77:fa:4b:fc:
                    a3:95:e9:55:16:e3:30:84:bf:fe:eb:f1:84:fa:a3:
                    4e:7e:2c:79:47:e2:48:4e:c8:3f:f5:10:22:1a:5a:
                    cd:bb:33:f0:93:0b:3d:4a:a8:d4:4c:e0:0d:33:15:
                    8c:b1:e2:d0:cf:d5:43:50:d3:f4:b8:af:7b:8f:ca:
                    36:59:ac:7f:fb:0c:f1:4a:b1:6d:94:fb:45:35:f0:
                    84:18:6b:49:22:01:4c:a4:c5:5b:74:e7:e6:9f:e1:
                    3a:25:68:5a:50:e1:db:90:61:48:10:68:f9:39:76:
                    4f:fc:03:a4:82:0e:63:ac:d0:5c:fd:cf:ef:a9:4f:
                    53:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BA:48:BD:33:37:93:D4:D7:2D:B6:D9:50:5C:B7:73:B7:97:64:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/b7ac1bbd-76d9-3be3-9b83-0d2ac5cafc1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.143.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:5a:26:06:a4:46:ba:fc:4a:90:0c:ca:b6:f3:09:ca:7e:14:
         28:29:0e:9e:6e:19:b0:11:0e:09:21:54:f8:80:ad:e5:07:ac:
         2c:13:73:5d:e0:d9:38:47:a7:09:4b:3b:ea:61:38:e6:67:de:
         0b:28:dd:66:57:43:9d:96:88:10:be:11:ae:95:3f:d3:a4:be:
         a6:8e:7e:9b:04:b7:9f:9b:ea:76:22:9d:8c:73:ca:6d:b8:fe:
         93:3f:35:4e:77:cc:94:92:7c:5b:8c:13:ed:21:ed:da:d0:38:
         38:76:08:02:90:19:6c:06:79:20:7a:d8:73:f3:c1:d1:6f:d6:
         05:36:66:95:22:9e:52:3d:c4:cc:1a:36:4f:ae:ca:8a:d4:12:
         d5:55:b3:fd:52:8e:85:29:0a:5a:1c:21:9c:d7:2b:a7:1a:f2:
         cf:c1:56:e7:3c:d2:a9:c7:fa:94:35:e1:82:d4:c2:e0:cc:fb:
         21:eb:a8:c6:fd:8d:36:e2:10:03:82:f8:0c:2f:7f:84:be:b9:
         b4:a0:98:27:33:73:0a:92:f1:8f:2c:2d:c8:66:9d:f0:7b:0c:
         08:55:d0:34:ff:e1:a8:9a:18:d9:35:6b:2f:af:d4:32:a4:ea:
         64:92:11:a3:2e:e6:d3:f1:1e:be:51:03:0f:05:37:a8:50:f1:
         e5:7e:93:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----