Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/44ea8337-415b-3b65-abc8-743506cba26f.roa
File:                     44ea8337-415b-3b65-abc8-743506cba26f.roa (raw, json)
Hash identifier:          IO8V7MlFAL0u+BxWDlJPyGq5ElE3dHr1/qQVMOJpoD0=
Subject key identifier:   EE:5C:D9:61:A0:DD:70:10:E3:68:62:C0:1B:5D:72:7D:46:5B:C4:BE
Certificate issuer:       /CN=6b2c5d67-bf55-4550-be59-c1aa5e63fd2f
Certificate serial:       010D0C9F43285848D6410DB009A7DD64FF51AD80
Authority key identifier: D1:25:E0:AA:7A:6B:B8:F3:EC:C6:09:8F:45:E5:3E:D0:BB:9A:B4:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/44ea8337-415b-3b65-abc8-743506cba26f.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     5065
IP address blocks:        74.80.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:0d:b0:09:a7:dd:64:ff:51:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c5d67-bf55-4550-be59-c1aa5e63fd2f
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=a40073db-5668-4850-9201-74d4745d59c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:36:4a:de:ac:e4:8a:ff:30:db:c1:d8:c6:b1:
                    88:95:35:3f:1a:a0:b1:3e:b2:8f:3d:d4:e8:fc:39:
                    0a:0b:69:fe:07:00:a2:0b:2c:12:0f:86:f6:63:da:
                    5a:17:87:b3:46:c9:16:b0:10:c3:80:21:39:1b:2e:
                    85:00:8b:cd:14:a2:dd:b9:39:ca:50:d1:8a:04:3f:
                    b2:a6:c4:2b:36:98:e1:dd:28:b4:52:6f:81:b2:40:
                    8f:d5:c0:87:55:2d:5e:9d:37:66:60:a0:6f:d4:e0:
                    03:42:f1:90:98:6b:7b:7e:86:31:52:96:93:cf:84:
                    58:77:ff:47:44:fd:ec:96:6e:69:7a:31:ba:9b:e4:
                    69:6c:ab:ed:6c:32:93:9c:4a:fc:3a:38:32:a7:41:
                    89:80:27:48:c8:8f:c9:36:3a:b9:9c:a9:9f:e3:44:
                    3f:b6:28:ce:d6:f4:98:95:15:c5:61:d7:df:f7:56:
                    18:bd:a3:66:b8:72:0f:ce:29:22:56:8c:63:ef:77:
                    40:be:7c:6a:0a:cd:f0:af:dc:91:9f:d3:be:7a:e3:
                    58:4a:ca:b7:aa:da:96:47:e0:bb:25:0c:ac:7e:e4:
                    28:b8:6d:2b:d7:ba:b0:a5:aa:e9:a4:01:40:d8:67:
                    46:e3:8f:37:e8:de:a4:ff:a2:ea:b4:df:6e:9c:08:
                    f5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5C:D9:61:A0:DD:70:10:E3:68:62:C0:1B:5D:72:7D:46:5B:C4:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/44ea8337-415b-3b65-abc8-743506cba26f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.crl

            X509v3 Authority Key Identifier:
                keyid:D1:25:E0:AA:7A:6B:B8:F3:EC:C6:09:8F:45:E5:3E:D0:BB:9A:B4:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:ba:45:d3:1d:9f:97:b6:03:53:09:27:e8:90:51:f6:f6:2d:
         1a:12:6e:ac:df:6f:3c:34:ca:5f:b3:b9:0e:ec:e9:4e:e6:5d:
         51:52:1e:e8:4c:c1:7f:5c:50:36:45:b9:f1:e1:82:fa:32:a6:
         23:fe:e5:f5:ad:63:e5:62:34:d0:09:dd:36:13:b6:a2:1b:4d:
         ce:7c:87:63:04:bb:cb:f1:b2:4c:94:49:ef:34:51:ad:7a:7d:
         de:01:d7:83:31:e6:6a:db:0c:09:57:bc:f9:d2:8c:9a:e0:98:
         bc:5d:96:1a:b1:0b:2c:be:4d:d0:b6:b9:cb:8b:5f:51:e6:4e:
         30:46:24:71:cb:6e:5d:c0:12:77:da:d2:17:96:b1:99:a1:01:
         3c:34:ae:e4:6c:75:0a:46:e6:4d:e4:1c:3c:6b:34:a1:1a:3a:
         f3:19:29:df:a0:95:30:7e:cb:95:9d:06:8c:31:0b:ab:fc:91:
         b7:3f:a7:e4:dc:a8:b1:3f:9b:85:ed:5b:d3:74:86:11:6a:da:
         3b:db:cb:d6:da:4b:a1:ff:4d:42:81:6e:cf:98:99:2e:21:ca:
         71:71:4a:56:fd:ad:54:4c:28:cc:66:06:00:e6:1f:4f:61:62:
         1d:8c:03:1e:83:ed:70:7d:3f:92:ab:71:bc:01:a4:89:c2:a5:
         c2:4a:8b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----