Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8607bc85-1be6-37a0-a416-be42e04ef958.roa
File:                     8607bc85-1be6-37a0-a416-be42e04ef958.roa (raw, json)
Hash identifier:          vhj967mZeDwO6kC+I+zac2+Ou1fJzMZlsZrVWyeci1k=
Subject key identifier:   0C:72:A8:4D:DB:90:70:98:64:72:D6:26:D0:1A:AB:15:60:C7:E8:5E
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584902EC136FF88C40AC6DB59060
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8607bc85-1be6-37a0-a416-be42e04ef958.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     6461
IP address blocks:        216.200.192.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:13:6f:f8:8c:40:ac:6d:b5:90:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=6d88ad04-38d0-4be3-8d0e-31c76f206b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:94:30:bb:3e:8f:5b:e4:77:4c:34:5a:03:d3:
                    75:46:9f:1d:0e:21:fd:fc:29:99:e2:e1:d8:b1:63:
                    b4:e2:f3:9d:4b:53:39:8b:32:84:66:a1:8d:b1:e9:
                    4e:7d:a9:14:61:a3:a5:a3:0f:69:86:47:fd:ec:3e:
                    fd:c4:07:83:5d:ea:1c:e4:55:0b:3f:85:05:28:54:
                    30:e4:ab:c7:03:a2:67:57:0b:ad:07:39:18:cc:58:
                    04:3e:a3:e3:a7:2c:6a:7b:a3:6e:98:cc:10:17:7c:
                    8e:a0:2c:4f:07:d4:02:a3:f3:d3:94:48:bf:bd:f3:
                    b3:d9:77:dd:8d:c2:54:54:db:2e:f9:23:b7:74:36:
                    12:6b:52:11:2b:60:69:1e:01:35:a1:40:bb:04:a9:
                    31:2a:d7:4e:a3:30:ca:10:a7:6b:dc:f8:01:31:16:
                    52:9e:4e:d4:f1:5f:1b:bf:87:25:fe:8c:3f:db:f1:
                    7b:05:fe:19:5d:f4:05:e3:88:ce:9b:4e:f7:10:aa:
                    05:e2:d2:f5:74:8b:00:54:09:d5:d0:66:17:85:df:
                    ff:72:82:c2:f3:bb:cb:11:af:4c:dc:60:cd:7f:00:
                    1f:45:b3:6c:f6:e2:05:ae:8a:ba:de:78:a0:e8:f9:
                    fa:bc:6e:d8:82:2a:44:71:32:19:f8:74:fc:0f:03:
                    91:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:72:A8:4D:DB:90:70:98:64:72:D6:26:D0:1A:AB:15:60:C7:E8:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8607bc85-1be6-37a0-a416-be42e04ef958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.200.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:58:a2:55:e4:a7:50:56:0e:77:10:c0:f1:2c:2a:43:8c:5a:
         a9:6c:64:0a:c4:83:b6:eb:e1:c7:d3:73:d6:7f:88:73:59:91:
         5a:3f:84:87:39:bb:49:69:31:79:19:24:fe:54:32:7d:91:40:
         98:2c:25:63:9c:e1:62:63:13:f6:3e:b5:43:ed:1a:20:e5:bc:
         24:24:b8:84:00:42:37:fd:f2:aa:9d:1f:71:2d:a1:4f:78:1d:
         79:b3:19:ae:0f:b3:21:4d:c2:aa:8e:31:8b:2b:9b:24:ba:58:
         b8:f0:28:a2:1f:71:36:6f:98:87:d2:c4:28:c1:d4:c1:35:f5:
         fc:db:e4:01:6f:2a:1a:7d:44:c9:e6:90:5d:75:f3:ef:59:45:
         9f:13:73:5a:47:f1:97:8e:75:9c:ab:8b:db:ac:dc:fa:d4:db:
         34:64:68:d8:b8:12:45:5d:c5:23:45:a4:60:98:55:c8:af:5f:
         25:44:8f:a7:28:0e:48:65:67:4f:59:78:c9:da:2a:c1:23:47:
         36:75:6c:b4:88:44:8f:d1:47:d5:f3:d4:d9:6e:a2:23:91:f3:
         6a:cf:08:aa:e9:a2:16:5a:29:7b:83:0e:36:87:ba:0a:98:aa:
         8d:28:89:36:7a:61:ee:b9:c1:d4:ca:10:6c:d3:29:a1:ff:d9:
         03:92:33:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----