Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/367fc8ff-0cdd-305d-a798-0ff7a5205555.roa
File:                     367fc8ff-0cdd-305d-a798-0ff7a5205555.roa (raw, json)
Hash identifier:          NfWaOuaffVZGWnC54bVQl2yAlxJxbMpe9EDX0CMClb8=
Subject key identifier:   09:FA:51:B4:09:D8:76:5B:22:16:E7:5B:3D:2A:9A:DC:ED:72:18:96
Certificate issuer:       /CN=fe86722c-27ec-4059-a1ef-757cf5e15715
Certificate serial:       010D0C9F432858492E13B93556659AC71A2F8780
Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/367fc8ff-0cdd-305d-a798-0ff7a5205555.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     21976
IP address blocks:        130.156.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:b9:35:56:65:9a:c7:1a:2f:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=9bc022d4-ae6f-4b69-b418-cc8fecdfcbbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f7:f8:ba:01:d3:96:7a:64:01:81:d0:24:c0:
                    39:0b:7a:7b:c9:30:23:71:59:7b:b8:85:5f:c7:0d:
                    82:21:03:cf:5c:0d:0c:a0:ba:bd:93:57:be:01:a8:
                    68:ba:d5:53:e5:17:7a:dd:06:83:2b:ab:df:b0:72:
                    2f:50:68:42:a3:db:a1:49:74:b1:ab:43:61:85:09:
                    2a:98:ff:62:5a:c4:62:0c:82:af:d6:f0:53:e8:96:
                    39:09:3f:8a:53:d4:0f:1d:7c:5c:5d:26:8d:eb:af:
                    a7:4c:39:52:16:67:4a:92:3e:89:aa:87:6a:e8:73:
                    21:f4:4e:ed:c6:ac:7e:c9:03:26:a1:21:73:07:b3:
                    d5:a1:c5:a5:ea:5a:78:15:e5:4c:b7:42:15:a5:0c:
                    df:1a:c1:bb:b0:27:d2:50:27:28:bf:c6:b0:d2:4b:
                    d9:35:54:72:67:e2:a5:ac:5b:da:8e:63:d2:38:a6:
                    90:4d:f5:dc:02:25:d4:cb:eb:37:91:44:61:8e:3b:
                    83:52:f1:f5:d1:9e:4f:37:67:e1:c2:59:23:97:3e:
                    7f:80:71:96:39:0c:e6:74:88:5e:de:d6:97:64:6d:
                    bf:3f:75:11:f6:b8:30:c9:8a:0f:32:26:69:0d:e5:
                    3f:ad:30:0b:45:48:d6:59:d6:62:8d:b9:43:5d:cb:
                    e2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FA:51:B4:09:D8:76:5B:22:16:E7:5B:3D:2A:9A:DC:ED:72:18:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/367fc8ff-0cdd-305d-a798-0ff7a5205555.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl

            X509v3 Authority Key Identifier:
                keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.156.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:59:32:f7:c8:fe:99:39:c2:c1:9e:03:4d:a4:fd:08:61:f9:
         98:58:28:56:ac:6b:51:1d:85:41:87:3c:7a:e1:e9:79:58:ca:
         c5:ad:13:26:30:3c:be:cb:fb:41:ac:02:d8:02:69:ec:1f:e6:
         8b:b9:d4:46:b1:f8:f5:d0:e1:c4:1d:6f:b1:f8:f4:d8:c8:55:
         8d:85:8b:90:3e:82:d8:0c:c4:31:dc:c7:09:b0:6f:be:71:94:
         65:78:fb:e0:26:05:e0:50:f6:74:cd:9c:a3:47:19:05:dd:e6:
         3f:aa:f8:e5:fd:22:6f:c2:65:8d:6a:bc:a4:fd:07:70:d9:21:
         54:40:6d:32:4a:c8:d0:da:dc:06:b2:10:40:7d:92:3a:5c:2c:
         2a:f2:88:0d:23:67:3e:4b:52:19:ea:8b:01:6b:e7:e3:de:5a:
         8b:95:2a:98:0e:19:bd:f2:ae:3d:81:6f:4e:04:15:c6:f1:f2:
         64:bd:f2:8e:34:ad:0b:77:1f:de:d6:ce:84:19:d9:e9:ec:5f:
         97:9b:09:5d:88:11:e2:fc:7c:90:ff:a6:e7:e4:e6:cd:f1:00:
         0a:bd:b2:66:20:1d:ef:b5:12:48:4e:8c:be:7b:2d:34:77:16:
         dd:a5:d4:e0:3e:2b:18:5a:05:9f:e0:a6:12:46:1e:00:de:7a:
         ef:dc:4c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----