Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/40385064-d713-3c6c-b460-5575e111dfd1.roa
File:                     40385064-d713-3c6c-b460-5575e111dfd1.roa (raw, json)
Hash identifier:          p8XZ+fC9tex4WA3Ed/0HT26HPg8TDrVSD1rGMuWdnF4=
Subject key identifier:   A9:3F:B7:93:4A:10:C3:3E:F5:DD:36:1C:8F:0F:58:A2:9A:0F:D3:80
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0F73E43427120A8B68380
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/40385064-d713-3c6c-b460-5575e111dfd1.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     15169
IP address blocks:        104.134.180.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:f7:3e:43:42:71:20:a8:b6:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=26048133-176e-4382-8ee0-4134b86c835c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:10:8e:e9:a7:a7:f7:d4:26:c7:03:b2:fd:b2:
                    56:18:99:3d:df:62:9a:1a:b3:99:1c:d3:a6:21:26:
                    27:e8:fe:17:1d:ac:54:e9:1f:f7:f1:1a:c9:a4:99:
                    68:e8:90:23:d7:70:a4:4c:d0:5f:43:9d:3c:96:13:
                    2d:67:f9:b3:f5:d1:c6:2d:66:ba:ad:18:c8:f5:ef:
                    1e:9d:fd:a1:cd:29:28:d3:03:9d:31:6b:08:ad:3c:
                    79:e9:5a:bc:b6:9f:19:e3:8e:d9:ee:ed:6b:0b:00:
                    c0:cc:03:13:ad:59:66:fe:47:1e:dd:f9:23:1d:7c:
                    6d:be:07:19:14:d0:e3:cf:4d:a5:81:a0:4c:91:d0:
                    45:9c:1f:c9:95:f8:5d:db:0e:ff:d8:b2:c3:9a:3f:
                    20:d2:9c:ff:94:2f:31:00:7f:28:9d:5c:a7:09:06:
                    a6:8b:ae:87:0c:4f:48:8b:e8:f7:b1:d9:58:ee:76:
                    f0:10:f0:ae:0a:63:af:be:ee:61:3a:87:6b:1c:e7:
                    8e:0b:27:cf:94:75:77:80:5d:86:a7:bc:7d:97:8c:
                    4d:9d:cf:0a:18:27:50:4c:a1:84:e0:49:f1:44:cc:
                    58:39:c6:93:46:3d:77:38:cc:dd:12:ef:90:16:b3:
                    2c:24:0d:ab:96:f9:07:28:40:e3:a2:46:b3:ba:cd:
                    87:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3F:B7:93:4A:10:C3:3E:F5:DD:36:1C:8F:0F:58:A2:9A:0F:D3:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/40385064-d713-3c6c-b460-5575e111dfd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ed:c6:b0:fb:10:6a:7b:71:2a:72:e2:68:e4:5b:10:e8:7e:
         2c:6d:3d:e1:1b:54:30:4d:ec:6d:32:da:a7:e1:16:29:82:8c:
         50:2f:53:34:a9:74:43:d8:47:d2:9a:1c:6d:e1:99:b1:c9:55:
         8b:3a:92:1a:db:2d:3b:1c:dc:95:58:c5:ea:37:97:01:2a:99:
         10:e6:16:30:3c:74:f9:62:90:28:b4:ae:d2:bc:79:5e:08:12:
         88:62:40:d9:84:c7:bc:fe:9c:ad:df:29:2f:b5:20:38:1b:65:
         47:a8:09:cf:f5:c7:32:32:88:1f:70:83:7f:09:aa:c4:ac:a9:
         ea:4d:2f:50:83:e1:8b:3a:c2:da:fd:aa:28:2d:7d:36:84:44:
         5c:47:ff:fe:e8:5d:f3:03:e2:6e:75:98:12:42:9a:a5:6c:42:
         49:70:12:70:39:4b:8a:2d:ab:fa:2e:f9:12:77:51:aa:a0:7e:
         3a:30:42:dc:fc:0c:21:d6:bf:25:f5:ce:fc:d8:02:08:76:07:
         ef:0f:21:a9:f6:2c:b5:3d:af:a8:b9:b7:15:b3:af:fc:20:67:
         8a:19:5e:1d:a4:a6:a3:e6:6e:b2:5a:f7:5a:b8:74:f6:0f:c7:
         96:38:24:e3:16:99:33:55:95:67:a6:35:24:23:db:79:2c:32:
         e9:44:15:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----