Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/791737a9-6ef5-349f-8551-4e4fe0275515.roa
File:                     791737a9-6ef5-349f-8551-4e4fe0275515.roa (raw, json)
Hash identifier:          fZaCE+YypMZRUoIAavR75GxfIq8ep7EV2zJG5Cg+2N4=
Subject key identifier:   3C:B1:4B:6B:58:03:2C:EA:AF:59:F4:54:48:78:CC:9A:3C:B7:4E:35
Certificate issuer:       /CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412
Certificate serial:       010D0C9F432858498339F531A80DDE43A6A09480
Authority key identifier: AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/791737a9-6ef5-349f-8551-4e4fe0275515.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     14048
IP address blocks:        141.225.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:f5:31:a8:0d:de:43:a6:a0:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=655b1b75-b4a5-4c31-9297-7bb46c5c5322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:09:fb:d9:f5:4d:6a:53:a0:c8:4a:33:96:11:
                    6e:79:cd:df:00:ca:13:d1:9a:e3:c7:f1:cf:2f:63:
                    a0:76:15:64:be:58:7a:98:f8:ed:37:7d:25:02:da:
                    1c:04:09:04:83:05:86:57:4c:61:31:26:9f:60:c9:
                    1d:6e:de:1f:7b:98:9e:0e:b8:71:7a:9a:e0:f2:b0:
                    5d:68:94:0a:a5:e2:3f:ee:74:cc:0f:ea:b7:ed:76:
                    2e:2e:cc:95:a5:60:64:0b:84:76:74:b7:8f:e5:f1:
                    9d:57:a0:11:0c:d2:0d:6e:56:20:c6:1c:cc:0b:b2:
                    37:72:df:e8:37:1f:3e:bf:86:33:2f:0b:eb:4a:22:
                    76:6e:41:81:c9:b1:90:ef:9d:70:a3:c1:1c:33:a3:
                    3b:e5:8c:ce:08:f9:fa:6e:d6:03:4c:6c:3f:4b:3c:
                    37:fe:50:81:7c:79:44:f1:a3:f9:b5:b9:71:1d:da:
                    3c:bf:5c:41:23:1a:42:00:f1:5e:19:49:33:5f:b9:
                    da:40:a5:3e:9e:61:a1:0d:df:cc:e4:21:23:1b:dd:
                    bc:29:e4:4b:15:58:25:e8:36:dc:6a:0d:7c:5e:52:
                    7b:0a:c3:66:cd:c9:fa:7e:2e:c5:50:4d:9e:4c:11:
                    55:f8:f0:05:54:7a:e2:ab:29:3a:f9:08:f9:03:1a:
                    ef:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B1:4B:6B:58:03:2C:EA:AF:59:F4:54:48:78:CC:9A:3C:B7:4E:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/791737a9-6ef5-349f-8551-4e4fe0275515.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.crl

            X509v3 Authority Key Identifier:
                keyid:AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.225.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:bd:6a:50:78:db:4c:a1:21:05:b2:c3:56:9b:cc:dc:2e:1e:
         8f:a9:09:ee:ae:15:2e:3d:d9:2e:19:31:3d:16:39:cd:70:6d:
         4a:7a:64:2b:3c:e1:42:30:bc:d7:8e:47:c1:f9:44:14:bf:8b:
         0d:b7:b6:51:93:e8:ab:c9:83:8a:c7:34:df:a4:ba:35:4d:45:
         13:87:58:48:99:9a:ea:7e:12:55:83:47:a4:3d:d6:c0:74:86:
         b1:85:c3:5a:4b:5f:35:30:cc:9a:aa:4c:22:52:2d:ab:9e:27:
         3d:ef:12:ce:38:4e:87:62:de:e3:70:6a:d2:9c:35:0d:d6:0e:
         65:4b:01:a5:b9:f1:9a:f0:ae:65:21:90:eb:94:72:01:2b:52:
         45:75:6c:33:7a:3e:b4:54:3f:f0:fd:dc:84:0b:ef:ee:bc:05:
         f9:c2:08:3d:6a:03:82:2f:41:1c:f5:92:03:bf:e4:06:aa:33:
         64:4f:73:df:68:66:54:1a:27:b3:89:de:3a:58:91:0e:45:92:
         1b:9c:72:c0:3e:73:0d:b8:dc:29:88:af:86:0a:4b:ec:15:c5:
         6d:d9:24:22:6a:b1:00:41:9a:4d:87:ea:c2:44:90:b8:74:77:
         97:dd:e5:5c:4b:1d:a8:4c:fc:37:f2:61:e0:38:c9:50:22:97:
         72:21:d0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----