Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa
File:                     1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa (raw, json)
Hash identifier:          TEu6Ifo1f3TW3918BI2dbJtsNNKSDplG+IKTYGmXSnk=
Subject key identifier:   0F:DD:E3:39:B0:69:18:D9:F2:37:87:F9:37:37:35:F0:37:4E:4B:81
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F43285848F22C6861862ECF8761CF73C0
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     11650
IP address blocks:        155.94.96.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:68:61:86:2e:cf:87:61:cf:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=2e3a268b-47ee-4ba8-967a-81fa4209f3f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2a:26:9a:21:0b:d6:15:a8:1a:b6:e8:e3:1d:
                    31:4a:b3:d5:45:a0:b4:2b:e0:f1:e7:69:3f:a9:1c:
                    99:5b:74:0e:c9:2d:09:6d:87:2b:45:68:b8:3b:f6:
                    12:fc:04:ae:14:fd:c1:57:5d:f8:67:4e:e7:13:86:
                    aa:63:3b:27:e6:7c:ce:e2:76:5d:f9:9d:84:da:81:
                    75:50:e7:73:1e:85:b1:1c:a6:1d:27:34:5c:d8:c1:
                    4a:11:19:79:aa:fa:3b:9b:e5:6f:83:17:82:2b:2f:
                    d8:fd:69:2f:cb:da:21:ea:24:dd:f6:22:b2:06:2b:
                    bb:1a:b8:84:61:77:52:3f:df:87:03:98:97:c4:28:
                    0a:bd:77:0a:2e:ba:48:eb:2c:22:8a:f2:a8:a4:7a:
                    4f:7c:cb:03:28:89:d3:2e:5b:52:49:3e:e0:e6:b3:
                    7b:90:90:62:53:9b:5f:4d:97:72:c2:79:d0:b3:01:
                    4e:22:3d:87:ac:90:b4:24:6a:7a:b8:e3:0e:3d:c0:
                    03:72:c9:cd:c9:81:eb:c0:3d:26:7e:18:e2:55:81:
                    e4:11:0e:7a:0e:98:b4:f4:64:cf:f6:f5:8f:38:cf:
                    ea:c0:b1:56:4c:4c:95:f2:28:c4:f4:a5:b3:e8:d5:
                    7f:95:da:a0:4b:29:e8:fa:e8:42:ba:a6:cf:0d:fc:
                    65:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DD:E3:39:B0:69:18:D9:F2:37:87:F9:37:37:35:F0:37:4E:4B:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.94.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:45:56:80:05:3a:b1:85:b7:ff:59:f3:22:e2:ef:73:42:40:
         c6:17:57:70:50:3c:de:f2:5a:41:ff:8b:b7:5c:4f:ae:45:9d:
         0f:aa:5e:7b:fd:2f:d2:f7:5f:25:e5:0f:52:ad:11:3f:18:e8:
         d9:8f:37:96:87:a2:96:43:32:fe:dc:95:c1:7f:c5:2a:40:3c:
         6b:2e:c0:a3:fd:4a:1b:3f:49:1a:17:6a:d7:4e:60:d7:7c:83:
         06:d1:3c:99:90:38:d2:8d:f6:d4:75:fc:83:9b:21:f9:2b:33:
         95:15:75:9d:c2:a0:62:1a:f4:37:dd:f9:ac:60:b0:cb:0d:05:
         62:ec:61:dd:02:0c:52:12:23:ac:68:95:dd:f3:ff:78:c0:cd:
         a4:ce:29:ab:32:80:c1:6e:14:42:5a:4a:50:07:85:2a:dd:be:
         f0:1d:23:64:a5:6a:d6:8e:44:9a:77:6b:aa:67:1a:36:b8:b3:
         ba:15:cb:11:d6:90:7f:34:17:3c:d7:2f:d4:eb:9b:92:62:bf:
         f6:16:62:f2:6f:7f:9e:f1:3c:30:37:7d:3d:95:e9:87:b9:f8:
         07:78:d4:f0:8e:23:05:6f:b2:42:74:27:9c:65:ef:c1:a2:89:
         cf:bc:c9:f9:92:86:22:ee:7d:22:b7:74:d7:8f:7d:94:c4:77:
         e0:44:5e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----