Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/fe6267f5-d019-3d0a-b09e-02680a125915.roa
File:                     fe6267f5-d019-3d0a-b09e-02680a125915.roa (raw, json)
Hash identifier:          ILtZPGk3VmGXdWG30Ohf/9LbXGWoqU3cDQ4SPYbvp3M=
Subject key identifier:   B8:E2:98:19:2F:31:8D:39:76:F6:36:02:39:63:EB:69:30:CE:72:9A
Certificate issuer:       /CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21
Certificate serial:       010D0C9F432858495C243E8EC471669EA47C24E0
Authority key identifier: E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/fe6267f5-d019-3d0a-b09e-02680a125915.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        216.250.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:3e:8e:c4:71:66:9e:a4:7c:24:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=1e722a6d-091a-47d2-9061-d4a6d90eac43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:97:4a:0c:a4:cf:9b:8c:d6:cc:c4:05:3a:d1:
                    a3:86:98:98:4c:2d:d9:27:2d:e1:8f:8e:ad:89:12:
                    79:03:a7:da:77:ef:20:07:cd:b4:f6:37:a6:b7:71:
                    eb:52:27:19:80:5f:7c:db:61:91:61:1c:ea:d1:82:
                    68:f5:0a:c6:ff:32:d0:61:a4:22:e7:06:f1:18:9b:
                    76:12:7a:65:4e:e0:a3:91:d3:88:b7:0d:3d:bb:1d:
                    fc:b4:22:49:e9:9f:0f:cf:a8:97:84:2a:7e:63:3c:
                    be:4d:7a:c9:59:dd:1a:d9:38:3b:14:6a:b8:d7:2d:
                    05:74:1d:c1:c1:13:95:c0:f6:53:c9:4a:a7:2f:f8:
                    65:f2:06:0a:4b:4c:09:de:73:c4:c5:0f:c5:fe:42:
                    f3:35:9d:59:f5:dc:a3:08:1a:78:63:17:72:2d:f8:
                    24:dc:53:ca:e8:7f:33:d8:1b:ab:e6:89:81:4b:47:
                    9e:b2:20:5a:57:c5:32:54:46:2d:ca:0f:9b:dd:4c:
                    9c:a5:bd:aa:90:2d:37:69:12:87:09:66:e2:42:d7:
                    b8:c3:31:67:94:62:86:c6:38:6d:22:b1:9d:4b:f5:
                    bb:8a:ca:bd:5d:31:e2:69:1a:24:42:64:e9:e0:16:
                    ec:bc:4d:d7:33:ed:cb:b9:ac:b5:d4:28:0e:1e:1f:
                    2b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E2:98:19:2F:31:8D:39:76:F6:36:02:39:63:EB:69:30:CE:72:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/fe6267f5-d019-3d0a-b09e-02680a125915.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.crl

            X509v3 Authority Key Identifier:
                keyid:E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.250.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:97:58:6c:74:72:47:14:8a:9e:b2:e5:5d:46:da:5a:24:9b:
         4f:c8:aa:0b:ea:30:b6:18:3b:a2:ff:73:e1:c7:09:ab:ed:a1:
         fa:36:17:e5:a3:0f:32:11:c2:3e:6a:55:12:b2:9b:df:40:92:
         86:78:ef:d2:23:29:85:33:a0:3d:82:6a:ac:61:e6:58:a7:19:
         5a:61:65:24:15:86:3d:69:b8:3d:44:11:48:b4:ce:6f:ae:8b:
         7a:7f:dd:96:6c:58:b8:7a:26:a8:ae:27:17:ac:1c:2a:e4:d5:
         9d:c8:05:98:c1:92:ea:3f:c5:48:d6:d4:a7:f9:51:4f:82:ff:
         8b:e7:32:4f:8f:a2:55:f5:35:b5:5b:33:ab:75:c5:ed:ed:ca:
         38:6c:7f:34:6b:fc:8c:de:94:8e:98:56:60:1c:af:f5:3c:43:
         bf:82:72:33:75:d3:e1:ff:23:0a:68:68:6c:8d:9e:bc:0a:a5:
         4c:88:5e:6b:85:87:4b:8f:a4:6c:15:9e:1f:e6:7b:25:a6:cf:
         ca:2a:33:87:dc:59:b1:91:c4:d9:bb:ff:2a:c1:4f:c2:ad:93:
         c6:df:59:a3:e5:65:80:db:74:a0:ff:09:b9:6d:63:30:07:33:
         41:e8:33:e6:12:9b:30:69:6e:52:a9:40:b6:f3:6b:a8:97:b3:
         54:5d:8a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----