Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3b06082d-4609-38e4-a7d6-b3733dc76a0f.roa
File:                     3b06082d-4609-38e4-a7d6-b3733dc76a0f.roa (raw, json)
Hash identifier:          0U94cVDPn1ag0WoDMvmiQK8VdhYBjE3Z2iotx5SBrMI=
Subject key identifier:   09:D7:B8:7C:E6:EA:45:E4:4A:79:93:E2:4D:E1:E4:DB:42:7D:C7:A3
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F432858494B6413011CAF8AE732E4C200
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3b06082d-4609-38e4-a7d6-b3733dc76a0f.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     13414
IP address blocks:        209.237.205.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:13:01:1c:af:8a:e7:32:e4:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=e8fa3d94-b676-4be6-82d2-ff4bc2a6ffa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:83:ba:a2:c6:60:ec:ea:2d:3a:0c:b3:b7:bc:
                    46:fe:78:71:ca:ee:7d:24:26:97:95:d7:ff:83:87:
                    62:1b:2a:a3:46:69:dc:52:c8:40:a8:67:f6:bf:23:
                    ca:10:56:ab:49:98:b4:4a:05:93:9e:c3:39:f4:44:
                    5c:bc:42:7e:1f:d8:09:d0:a8:b0:4d:a4:07:a5:5b:
                    96:32:40:5f:f9:92:38:10:9f:90:a4:38:83:9c:b8:
                    c9:6a:f4:30:b2:a8:47:96:2e:5d:0e:14:43:5f:fd:
                    d9:69:f3:2b:ec:1f:07:50:43:01:0e:d9:cb:e1:47:
                    50:ea:68:ff:66:cb:35:a5:eb:52:7a:3a:40:29:aa:
                    27:32:f4:d8:b7:d1:83:75:4c:01:3f:51:8b:e5:ef:
                    e7:16:94:a2:4c:1e:14:52:ce:c1:83:49:38:77:f3:
                    ba:89:e0:79:d8:d6:02:0e:59:c6:28:eb:d6:72:32:
                    d2:df:8e:48:6f:b3:d4:63:68:9d:ff:b8:69:c8:55:
                    da:70:d8:d6:f1:34:ea:23:8e:48:99:ed:ff:ef:b9:
                    62:e3:5d:0a:24:05:2d:14:53:ff:a7:83:68:49:d8:
                    c8:c1:b5:03:02:d2:88:e2:3e:5f:b6:ae:dd:05:bc:
                    3b:ef:c3:a6:e3:ab:01:49:33:98:1c:08:b0:e9:ff:
                    b0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D7:B8:7C:E6:EA:45:E4:4A:79:93:E2:4D:E1:E4:DB:42:7D:C7:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/3b06082d-4609-38e4-a7d6-b3733dc76a0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:5d:89:02:87:64:23:3f:3a:fb:0b:31:0a:cf:24:b4:a7:7b:
         c6:fb:df:fa:8d:24:36:85:bd:28:60:cc:e0:e8:ca:46:03:8a:
         13:c2:9e:2c:cd:6b:97:bf:1d:9a:17:2f:cb:5b:5d:e3:29:e9:
         ce:0a:8a:fa:6f:e3:4c:75:49:5f:35:81:89:fe:62:02:c0:f2:
         e3:07:c3:a3:97:df:76:4f:49:e5:6d:7a:60:32:c7:12:a3:ad:
         c5:22:c3:01:f9:1f:3b:1b:4c:b7:7d:5d:d2:72:27:e8:0d:e8:
         c8:18:e0:7d:38:b8:bc:cd:e5:3f:2c:c6:f4:52:88:ab:c9:c8:
         73:a2:23:c8:ef:0f:8a:8f:bd:ca:a9:cb:93:42:6c:87:6d:09:
         c4:a8:0b:a0:17:6d:f9:8e:ad:01:38:3a:dc:9d:c8:83:17:c1:
         1d:79:41:1a:67:cd:97:ad:ce:47:01:c4:47:ef:14:b5:e0:f5:
         e1:9a:b2:75:4e:d3:5e:13:98:68:83:78:b8:0d:f5:75:5f:b5:
         40:26:3f:9b:0d:6d:14:4e:8b:da:d9:c8:50:74:95:d8:f0:7d:
         9a:14:e3:b9:26:01:53:44:d3:de:20:2c:3d:00:01:a0:44:02:
         b6:86:f0:54:3e:25:1e:24:9b:11:bc:29:76:b9:0d:e8:05:61:
         11:7c:b3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----