Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/75435132-2ff6-384f-8d32-78add8bb3809.roa
File:                     75435132-2ff6-384f-8d32-78add8bb3809.roa (raw, json)
Hash identifier:          wjwobX9nd35SFaAr4pTPu3IdVtRLgDIEugVLAG0XoeY=
Subject key identifier:   F7:23:41:F8:AA:BA:1E:2E:CD:95:C5:34:52:FC:6B:BB:78:A1:C4:E4
Certificate issuer:       /CN=e085fa70-312c-4786-b587-bdb5fc87c36e
Certificate serial:       010D0C9F43285848F4F699466358AF0D46352E80
Authority key identifier: FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/75435132-2ff6-384f-8d32-78add8bb3809.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     32098
IP address blocks:        66.208.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:99:46:63:58:af:0d:46:35:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e085fa70-312c-4786-b587-bdb5fc87c36e
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=f3401a1a-cc8d-42b1-8d36-991e8c1edcf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a4:44:df:ec:84:57:86:ce:8b:5a:4d:4b:c1:
                    85:b9:47:d4:17:f9:94:49:ea:8c:2f:a0:ad:3a:92:
                    c5:da:66:1f:15:70:b5:75:2f:ca:4b:3f:6d:05:cf:
                    7b:ea:86:18:03:c5:71:35:f6:e5:4e:b2:68:18:cc:
                    fb:36:3b:ed:e7:af:e0:62:57:54:1f:37:66:a8:b8:
                    2e:f1:02:42:68:7f:e3:9a:d8:47:27:7f:13:9b:c1:
                    73:69:58:f4:60:7d:19:34:b3:b2:22:7e:e3:57:a3:
                    f5:9d:f9:7c:53:03:2a:e2:c2:6b:7a:f4:d9:e0:aa:
                    6b:98:84:4c:be:d6:06:00:96:64:94:5a:88:30:51:
                    68:92:ce:fc:6e:03:0e:49:85:de:48:8a:81:21:0c:
                    13:c9:d8:e4:9e:8f:49:c1:3b:d4:03:35:74:c3:90:
                    bf:22:cc:55:13:9a:f0:61:46:f4:37:f4:60:d2:d4:
                    2c:6b:58:c2:69:8c:7c:e7:0a:d2:c9:29:d0:fc:0f:
                    f3:9a:e6:58:d2:1f:d3:0e:69:17:fe:c6:5b:10:5e:
                    38:02:83:29:22:d8:d8:dc:c1:75:a4:81:66:fb:4d:
                    2e:3d:b3:4d:db:75:7b:b1:bc:2b:a4:46:39:22:7b:
                    c7:65:18:8f:68:d5:21:77:c1:17:d7:25:a0:7f:6c:
                    b8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:23:41:F8:AA:BA:1E:2E:CD:95:C5:34:52:FC:6B:BB:78:A1:C4:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/75435132-2ff6-384f-8d32-78add8bb3809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.crl

            X509v3 Authority Key Identifier:
                keyid:FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.208.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:0b:d3:72:b1:07:8c:14:8f:65:af:cf:ae:cd:49:00:b1:e1:
         ac:c4:e5:8a:9a:f6:e4:2d:23:78:9f:2c:12:b0:77:de:c5:8d:
         1e:58:97:ff:0d:9e:b9:a6:a2:b9:eb:52:9a:31:61:44:97:fc:
         29:d2:8e:0f:4d:d5:0e:4e:70:bf:f9:af:51:2a:2f:aa:95:4d:
         08:b5:23:47:74:ae:c1:6f:46:1d:1a:e6:f0:b5:31:33:1b:28:
         4a:5d:ab:e4:e0:72:89:11:e8:53:ad:be:23:e0:51:e7:06:f0:
         d7:0c:87:70:08:82:c2:14:37:86:f5:2a:e7:7c:a4:6b:11:6a:
         fd:aa:35:ee:72:26:53:1d:fe:88:2f:11:46:ab:23:c4:e6:64:
         51:7f:8a:c2:ec:87:d7:0d:38:ad:e5:18:cb:a5:bd:b9:c5:bb:
         a8:f9:2e:01:ab:5c:9a:8a:51:c0:c2:c6:6e:d3:f8:34:ee:52:
         2e:7a:53:fc:9c:29:c1:54:3c:0e:c9:1c:26:92:6e:cd:c2:a6:
         f8:a8:9d:86:f0:4c:1f:68:fa:77:e8:fc:2c:a5:88:b3:ca:fd:
         44:81:71:b3:7a:08:22:3d:4a:ac:b7:df:fd:86:cb:63:6f:0b:
         50:6f:9f:f5:ac:68:4b:7d:e2:33:37:1c:c1:05:cf:66:20:8a:
         f7:f1:ac:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----