Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/565178fb-511a-3ca3-a684-f9494640e395.roa
File:                     565178fb-511a-3ca3-a684-f9494640e395.roa (raw, json)
Hash identifier:          etQSsyFc1ZSWzmumbQIPsrqzUuOG35lc1ua9cClq4qE=
Subject key identifier:   F4:C2:DD:2C:B6:98:DF:57:FF:0C:C1:B4:36:4D:48:C8:95:CC:F2:7F
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584930DE71A1B485FAA8453EC540
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/565178fb-511a-3ca3-a684-f9494640e395.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        158.115.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:71:a1:b4:85:fa:a8:45:3e:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=14cafc12-cd0f-4ba5-a31c-cd16a5d7815f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:57:92:60:69:8b:8d:6b:28:38:3d:a7:f8:f8:
                    84:6d:49:e9:ce:d9:51:e2:76:18:d7:06:d3:57:4b:
                    d7:30:18:a4:f1:97:1e:6e:ae:ed:a9:04:fb:4b:4e:
                    bd:33:4e:8e:b1:da:bd:39:f1:03:c8:9b:4d:19:8e:
                    eb:14:d7:70:79:a6:71:13:1c:62:c4:3f:37:e5:c7:
                    aa:b4:48:45:66:ea:5f:4d:9c:ea:7c:2b:f7:2b:22:
                    24:d7:8f:12:20:16:d9:8b:e6:30:b8:ea:d2:0e:b4:
                    78:3e:54:47:70:2d:c4:d3:ec:6b:c1:9a:04:91:cb:
                    91:9b:12:7c:16:1c:7b:8c:e8:df:a6:c7:4d:c7:ef:
                    21:ac:3f:6d:c9:26:7a:c3:e1:75:11:79:e1:ce:18:
                    fa:62:26:c1:a1:7b:22:90:6a:2c:6b:57:16:d6:78:
                    f6:a1:7b:2f:ae:4d:7a:3d:d8:8f:e5:90:3d:c5:5b:
                    f3:da:28:6f:8f:ec:2b:4c:b1:da:50:e3:5a:e4:87:
                    c8:ad:cf:47:1d:8c:c7:c4:43:21:81:6f:bd:79:97:
                    c7:b2:6b:09:ca:4c:3d:0c:64:fc:25:d7:31:3b:1b:
                    e1:57:c4:84:3a:b9:92:90:5a:1b:63:ce:32:5c:d8:
                    e2:4a:1e:ba:7f:ee:33:e6:b5:1e:4d:5d:f7:09:d8:
                    6a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C2:DD:2C:B6:98:DF:57:FF:0C:C1:B4:36:4D:48:C8:95:CC:F2:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/565178fb-511a-3ca3-a684-f9494640e395.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:48:ae:ce:fd:35:6b:fa:1f:2c:5e:01:88:90:6b:02:10:bb:
         fb:fa:97:1f:e4:04:9c:5e:c3:73:12:7c:5e:86:87:69:e4:85:
         67:7c:eb:36:22:c3:e2:7a:a4:cb:51:21:0a:42:c8:0d:80:f6:
         99:c0:ad:aa:f1:f9:16:4b:74:6b:7c:7d:3c:d7:c6:8a:b0:5d:
         ae:c5:8a:24:5e:10:b2:e0:7d:85:de:13:4d:36:3a:14:d6:52:
         c4:47:bd:c1:ac:bf:b6:6a:b8:14:11:89:94:65:8a:a4:eb:51:
         81:04:1f:0d:89:8c:65:99:17:a2:b6:03:8a:de:70:20:a8:d4:
         f6:86:61:0d:fa:96:67:76:c4:dc:72:c6:99:56:9d:1d:f7:9d:
         9d:f2:55:fb:a1:ed:36:ee:40:d9:04:91:a4:d5:69:07:73:18:
         0b:96:85:91:0b:cb:aa:51:ed:8a:a6:10:66:36:1b:43:28:81:
         25:aa:e3:70:87:ea:05:b2:ff:bd:14:83:fa:38:14:38:93:7b:
         4b:07:5b:05:ce:75:7f:ac:25:a4:ee:7d:ae:5e:f4:ea:0c:03:
         23:5e:cd:fd:e1:9d:9c:0a:0b:f8:32:a0:58:52:68:02:dd:02:
         6f:f0:17:25:d3:8e:a1:9a:a1:f3:01:b3:46:e6:2d:18:71:b6:
         ef:e7:cf:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----