Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6/e94b5d8d-63a8-3f1e-9861-b3be8855c399.roa
File:                     e94b5d8d-63a8-3f1e-9861-b3be8855c399.roa (raw, json)
Hash identifier:          xaE5mblCGZLYFLYDWbq47mS6Vxe3PhwIFO14wnGTwm4=
Subject key identifier:   22:86:A2:E3:49:53:B7:55:3B:B5:FA:48:C8:95:6C:DD:AB:60:5F:DD
Certificate issuer:       /CN=15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6
Certificate serial:       010D0C9F43285848E16BEECB638CA889FB35D1BE
Authority key identifier: 36:E1:48:13:85:9B:AE:52:6C:C1:04:B2:93:68:46:CC:61:5C:11:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6/e94b5d8d-63a8-3f1e-9861-b3be8855c399.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     16519
IP address blocks:        132.194.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:ee:cb:63:8c:a8:89:fb:35:d1:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=790ac824-a0cf-4460-898c-3d36533a1940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2b:b0:ac:a7:d4:ae:a8:7a:fc:5a:31:ac:fb:
                    1c:f9:13:93:de:36:66:1b:a7:e4:72:64:57:86:49:
                    12:fd:df:10:f3:f0:d1:fa:a1:e4:2c:ca:35:04:c8:
                    b8:c7:e9:b5:24:59:63:15:fd:fa:71:9a:69:b2:63:
                    4d:be:6f:8c:31:5e:8e:06:9c:71:bd:66:fe:cc:eb:
                    22:05:76:8a:83:d9:8e:1c:f5:96:4a:45:fe:5b:42:
                    62:fd:ee:96:95:5b:85:a1:44:be:f5:be:f2:53:8a:
                    fb:91:d0:af:54:29:f8:3d:ef:41:36:fb:36:e1:f4:
                    94:9d:e3:2e:cd:05:dc:02:b4:23:3a:16:cf:97:c3:
                    ad:f3:09:ac:0b:1c:ae:5e:6c:a5:8a:ba:88:b8:c3:
                    0c:56:e3:1f:28:97:65:27:da:0c:58:22:68:af:83:
                    73:28:e7:8b:17:be:ea:39:45:57:ca:ba:94:9f:c0:
                    6b:82:29:48:02:ab:ce:e4:f1:7e:07:c9:3f:fb:11:
                    4a:86:10:e2:c9:f9:ff:07:c6:b5:dd:b8:5c:6f:e1:
                    12:09:f2:f6:ae:9e:cf:e3:f9:98:03:83:c4:77:b5:
                    93:74:bc:9d:99:81:e4:27:0a:6a:d3:7e:30:57:b7:
                    c8:a8:f4:5e:18:d6:24:dd:e0:0c:82:82:8b:c2:7f:
                    c4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:86:A2:E3:49:53:B7:55:3B:B5:FA:48:C8:95:6C:DD:AB:60:5F:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6/e94b5d8d-63a8-3f1e-9861-b3be8855c399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6.crl

            X509v3 Authority Key Identifier:
                keyid:36:E1:48:13:85:9B:AE:52:6C:C1:04:B2:93:68:46:CC:61:5C:11:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.194.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:24:d8:dd:43:16:09:ca:c2:6f:1a:a3:9e:43:17:df:83:20:
         5e:d6:c4:5c:8f:7a:b4:10:ff:4d:e0:72:cb:5d:de:ba:f1:e2:
         23:19:5a:d1:a2:ea:2a:94:45:56:8c:6b:5a:2e:e1:36:54:ab:
         ef:bb:9b:9e:ef:06:01:ab:4c:c9:d7:48:43:67:05:84:a2:e3:
         c8:06:03:8b:3e:e3:a7:61:f5:b9:6f:c5:71:e9:9a:cc:f8:b1:
         b7:ab:bc:37:ba:c8:5a:2a:e4:44:d9:e0:5d:bd:1a:0d:84:79:
         f0:cd:12:66:8c:2e:4d:4e:e3:7d:3f:79:52:b7:4d:5d:54:ab:
         b8:06:1f:66:9c:cc:01:26:14:c2:cd:ff:18:ef:b4:71:34:59:
         ae:0f:f5:83:a2:7b:62:a9:ab:c9:bd:0f:7c:19:fe:b2:6e:e9:
         59:53:62:01:e2:2f:eb:05:db:0b:6c:4b:93:ca:9f:c2:ce:c0:
         5e:5b:13:9a:3d:99:ab:86:2b:65:c5:b2:28:04:d4:5a:50:19:
         a9:98:0f:ba:d2:c5:63:03:fb:72:57:92:f5:f6:03:3b:05:94:
         ee:70:48:a6:b1:07:77:68:98:f7:eb:18:da:2c:1e:00:67:ab:
         89:3b:c2:0b:4e:37:78:6d:fa:be:ed:29:8e:6c:f3:f7:c5:10:
         3d:04:db:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----