Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea/14ccc2fd-be2b-3f8a-b1b8-b15d164db185.roa
File:                     14ccc2fd-be2b-3f8a-b1b8-b15d164db185.roa (raw, json)
Hash identifier:          mU3Vtzi5wSfqbkoBoiVtHOQijkMgjPM/67bUtwvMue0=
Subject key identifier:   8B:87:E6:C7:AB:EF:7F:B8:14:51:71:9D:DD:3F:5E:A9:FE:86:F1:05
Certificate issuer:       /CN=3e7bf1ea-9808-4ea0-9e27-aa60b6545bea
Certificate serial:       010D0C9F432858492183FF6A7A1BB9279C899300
Authority key identifier: B7:53:D8:EA:D2:4D:2F:27:FD:E8:77:9F:29:E3:5D:F9:3C:3A:AC:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea/14ccc2fd-be2b-3f8a-b1b8-b15d164db185.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     400274
IP address blocks:        192.101.46.0/24 maxlen: 24
                          2602:80d:2000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:ff:6a:7a:1b:b9:27:9c:89:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e7bf1ea-9808-4ea0-9e27-aa60b6545bea
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=2c5d98f1-e166-4fae-a75b-7d6eef98199f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3e:e8:7a:cb:ab:7c:91:c7:8e:2f:00:31:6d:
                    0e:82:03:dc:78:ac:1b:06:0a:d7:b9:0f:08:c6:dd:
                    16:70:14:1b:fb:0a:3c:49:87:6d:cc:12:ba:1f:e0:
                    7e:81:18:19:26:2a:79:7d:da:5e:a2:19:9c:e0:39:
                    6e:e3:7a:5a:5c:e6:8a:52:a3:09:e3:57:f7:a0:be:
                    9d:08:4f:23:ac:49:be:bd:33:62:40:19:a3:9e:cf:
                    67:16:44:0b:e8:39:86:f2:54:82:26:d3:4d:58:ec:
                    93:f3:93:9d:28:c8:2d:d8:dd:48:61:00:42:2f:68:
                    97:e1:e3:69:e8:4a:5c:7f:7c:39:17:42:14:ac:8a:
                    98:15:73:17:b0:90:47:8e:32:70:0f:09:25:b2:d8:
                    e7:05:72:74:4d:be:20:55:72:c8:95:17:68:39:04:
                    e8:89:27:39:01:56:a5:cf:a7:96:6c:5a:57:dc:c2:
                    07:0e:c8:57:c2:1a:af:be:ab:d4:de:fd:f4:55:1d:
                    60:b0:2a:84:9a:0a:8f:2c:ce:04:e5:a8:eb:36:7e:
                    f9:a8:86:9a:4e:72:87:fe:d5:b3:e1:a9:50:53:ff:
                    51:54:8a:84:1f:cb:7f:ee:b5:d7:56:ec:07:6f:5e:
                    67:bc:71:82:cb:44:94:fb:45:55:56:a3:3b:50:43:
                    93:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:87:E6:C7:AB:EF:7F:B8:14:51:71:9D:DD:3F:5E:A9:FE:86:F1:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea/14ccc2fd-be2b-3f8a-b1b8-b15d164db185.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea.crl

            X509v3 Authority Key Identifier:
                keyid:B7:53:D8:EA:D2:4D:2F:27:FD:E8:77:9F:29:E3:5D:F9:3C:3A:AC:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.46.0/24
                IPv6:
                  2602:80d:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:61:f7:53:0a:79:46:fe:ed:30:70:e9:05:66:6b:40:20:37:
         cd:1d:2e:cc:88:7f:70:d9:b7:32:4e:e8:6a:7e:99:1a:0c:e7:
         b7:76:3f:81:76:8a:cb:4d:08:d5:1c:cd:e9:03:51:13:79:2c:
         81:2b:6b:24:69:6e:33:7a:f3:9a:86:77:aa:18:f4:bc:b3:fe:
         f3:1a:e9:29:cc:3e:ad:4e:1e:c1:af:d9:53:62:2f:75:5d:6f:
         48:5c:68:3d:19:0a:1d:94:46:bf:a1:6c:c3:dc:ae:f8:11:a4:
         23:33:f2:d3:4f:ff:df:f4:2d:68:c1:d1:ac:fd:c4:d5:cc:30:
         ab:0c:13:01:53:08:c9:b0:d8:32:7e:86:e1:67:b0:f2:53:1f:
         ec:3d:d0:24:72:dd:a6:f2:7f:0e:5e:f8:96:b0:d7:5e:65:4e:
         d9:25:bd:2e:c5:c6:9a:22:3f:97:31:d4:40:b6:71:bb:69:16:
         d3:de:1a:13:12:89:d8:d0:ab:a2:33:2a:9c:45:ed:a6:e8:26:
         cd:5e:3d:da:df:90:ae:7f:b0:8e:51:db:3c:08:19:61:86:6b:
         c3:d5:ac:b4:e9:20:79:4e:5a:ed:e9:86:2a:7b:24:c5:75:ba:
         20:02:2e:2d:1b:54:54:6e:c4:7e:85:7f:d1:71:93:79:e0:29:
         bd:18:b5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----