Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f937f948-f1ef-3189-aeca-0050e84a549a.roa
File:                     f937f948-f1ef-3189-aeca-0050e84a549a.roa (raw, json)
Hash identifier:          qohgnDrAckg5IG3tDmssFR+W/ffdKAyqk0tOgdTKRN0=
Subject key identifier:   C2:58:D4:69:2D:28:70:E4:98:23:76:37:8F:D0:90:46:1A:43:4B:DF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0E09058069F2B910273C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f937f948-f1ef-3189-aeca-0050e84a549a.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     41264
IP address blocks:        104.133.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:e0:90:58:06:9f:2b:91:02:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=f813427b-5136-4871-996f-430183e9844b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:51:af:44:b4:cb:aa:c4:bb:1b:4f:30:22:ad:
                    23:d3:63:aa:c5:f4:4a:df:a9:ac:41:31:dc:54:48:
                    2d:0e:82:37:ac:6b:0a:2b:17:dc:f9:64:83:ab:ea:
                    f6:71:ce:86:b0:d8:e4:5b:76:0b:9c:6e:ef:bb:d5:
                    60:95:76:ab:25:20:87:10:98:e2:3e:2f:36:c5:45:
                    c0:e4:04:6e:15:54:fd:2d:8c:c9:e6:98:16:04:7a:
                    1e:f4:fd:ca:ad:e1:e9:64:9a:32:d8:fd:f6:9b:34:
                    7b:3f:17:09:06:f7:6f:c5:ed:2a:d9:c5:f3:14:27:
                    8b:51:f7:5c:63:b0:36:23:88:20:bc:f0:2e:55:c4:
                    77:d2:83:53:13:fc:a3:8c:c2:8a:22:94:f4:20:2a:
                    99:4c:61:ce:15:fe:91:7c:ca:8c:48:fb:ea:c3:b0:
                    0e:47:72:ba:a1:66:ea:42:ef:7d:ef:26:9d:ee:0f:
                    3a:eb:84:18:76:06:67:a8:5a:0a:a6:2d:f1:ee:5f:
                    cf:f1:4f:33:a9:bc:26:0c:81:a6:f7:cd:47:b3:dc:
                    de:f1:0f:e9:0f:6b:1f:7e:e7:15:a2:54:f1:5d:01:
                    90:49:85:90:11:18:34:3f:53:a7:85:24:5c:bd:3d:
                    27:64:21:ab:03:1d:de:09:b7:26:7e:d5:1f:85:7e:
                    54:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:58:D4:69:2D:28:70:E4:98:23:76:37:8F:D0:90:46:1A:43:4B:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f937f948-f1ef-3189-aeca-0050e84a549a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:73:02:d6:ef:b3:03:7d:f2:fd:72:e5:cd:ab:5b:6e:ef:1b:
         e6:88:15:ad:c7:73:84:1c:41:ab:25:13:1c:71:d2:bc:65:55:
         a2:bb:29:2a:8d:a5:5d:db:de:61:57:3d:6e:d0:20:77:a1:e3:
         a0:97:a8:0a:d3:38:02:bf:eb:21:99:73:7f:a7:92:a0:59:77:
         19:f3:8a:91:0b:f3:e4:b7:53:10:d2:e2:83:51:bf:c6:92:52:
         d9:92:9e:26:e8:67:cd:2f:6c:f3:77:7d:d3:1a:b5:53:15:40:
         b7:d2:39:73:1e:f8:d1:16:27:e1:de:4a:50:e9:9b:2c:78:94:
         54:44:d3:d6:dd:16:e3:25:75:8d:6a:31:09:a0:01:00:50:9c:
         f2:84:96:d1:8d:7d:22:14:72:18:e1:05:f7:e6:1d:9e:8d:4a:
         9f:ac:a5:0c:cf:91:b8:7b:b8:95:78:a5:74:1e:1c:2a:ac:f9:
         7b:21:aa:18:24:48:9e:9b:91:3a:16:3e:b8:99:e4:90:a8:e7:
         d1:f2:8e:43:f1:03:95:5e:07:9a:49:19:37:5e:7e:f4:4f:0f:
         67:1f:0a:d1:1f:ab:a5:b2:c6:94:ae:14:58:1d:3b:3e:74:33:
         89:b5:92:ce:31:a8:bf:3d:ef:42:fe:77:3d:0d:c9:b5:e8:64:
         ef:8d:49:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----