Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/33320b85-fee6-3cda-b3a7-83371c523d99.roa
File:                     33320b85-fee6-3cda-b3a7-83371c523d99.roa (raw, json)
Hash identifier:          0o8VNCCgfbyD1/Gq7sOkLcM02QjQlotzpXr1iXqjzZo=
Subject key identifier:   19:81:33:DE:98:16:28:55:D6:9C:29:C7:9A:98:45:1B:A8:55:BB:83
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858492E13C805D8EC3943F7BAA500
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/33320b85-fee6-3cda-b3a7-83371c523d99.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     376
IP address blocks:        207.162.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:c8:05:d8:ec:39:43:f7:ba:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=22e94bdb-b352-499d-8ef0-90485d0e8a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ed:b6:3e:96:33:ec:e5:b2:03:52:35:dc:77:
                    db:6d:66:73:e6:91:7e:50:b6:d3:08:41:df:9c:5e:
                    9f:0b:46:f1:d1:bd:7f:d3:66:99:b1:ea:0d:d1:54:
                    f1:eb:bc:fc:2e:26:67:e9:e6:86:20:76:c0:d7:b2:
                    67:40:38:7a:46:90:61:12:2b:af:c3:2c:93:52:b2:
                    77:ff:0c:0e:f4:b7:50:45:84:a9:4d:24:1d:2b:ba:
                    2b:6a:b4:e6:2f:3b:1c:ff:ef:ae:49:0d:4b:08:f1:
                    b4:6e:c2:38:bd:e0:26:fe:f1:ca:df:99:f1:fe:7c:
                    6f:a4:a7:b8:4c:ee:93:ef:0a:1e:35:03:8a:84:d4:
                    f3:af:d7:2d:e3:bf:83:9d:78:30:20:fe:71:d4:62:
                    f0:05:ec:d1:83:0d:fd:69:3e:7b:65:da:d9:75:4f:
                    86:d9:08:08:5f:ab:00:2d:48:d1:e8:84:7f:17:7c:
                    90:62:a2:3f:12:2b:27:94:17:49:3e:fa:91:47:f3:
                    6e:0e:fb:26:a1:2a:4e:3f:d8:d6:e6:d6:63:00:2c:
                    73:ab:35:d4:39:09:c3:6b:c0:37:5c:7e:f6:bf:67:
                    86:81:25:26:69:3b:e6:71:0f:24:76:ed:7c:69:b8:
                    ad:c8:87:93:33:d4:79:62:a2:8a:ff:63:24:26:77:
                    d8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:81:33:DE:98:16:28:55:D6:9C:29:C7:9A:98:45:1B:A8:55:BB:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/33320b85-fee6-3cda-b3a7-83371c523d99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ef:13:59:af:5c:96:30:22:a1:33:f4:9d:c5:c1:b9:2b:1b:
         0d:e0:bb:5c:46:df:6c:74:74:af:c3:8f:a0:ee:40:48:e0:93:
         a5:b9:a4:25:69:f6:b5:79:be:8d:92:ed:3c:cf:bc:e3:b3:b9:
         45:fe:cb:bd:ed:6c:5c:7f:6c:c3:af:73:ba:84:fb:39:76:e0:
         16:0d:fb:57:1c:86:22:73:f1:5a:b7:17:b6:41:73:f8:fa:0e:
         bc:3c:4d:82:b4:bc:e8:34:57:99:db:9d:03:8e:9d:e4:5f:6e:
         1c:b2:5b:3e:dc:57:f1:3c:0e:bb:ab:47:37:a6:70:ea:59:6d:
         86:f1:49:f5:96:c1:30:80:2a:dd:bc:12:a3:87:33:8f:6e:1e:
         61:80:00:f5:29:d7:9f:d3:54:75:bb:2d:c5:7c:eb:cb:0f:f8:
         e9:83:d9:b1:38:f4:6f:aa:b7:f2:75:21:f2:96:ed:45:e6:95:
         c9:f6:ce:63:6b:ec:4b:5b:b6:8f:01:7c:36:16:b7:43:5e:01:
         ec:c1:5a:6d:ea:1e:81:0a:8c:19:e2:e4:33:0a:aa:7a:4a:e6:
         47:41:fd:6e:c9:a2:1a:c4:20:6c:89:d0:85:97:fa:c6:88:81:
         f0:95:9f:a4:13:af:61:a1:03:64:5e:03:6e:00:78:2a:69:fe:
         4d:1f:41:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----