Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/0f423575-11f9-3728-ae9b-8c70332062e1.roa
File:                     0f423575-11f9-3728-ae9b-8c70332062e1.roa (raw, json)
Hash identifier:          36x9tOXrutFfws/zW/J1kXhhxED6VAg+btU5esFtsmA=
Subject key identifier:   44:14:81:5F:30:86:8D:6F:97:16:49:F2:2B:69:BA:B9:69:5D:B2:60
Certificate issuer:       /CN=dcf7f6fb-0bae-4c21-bcf2-2f998541db3f
Certificate serial:       010D0C9F432858493AA3DA66F920D8FBFFD3C1C0
Authority key identifier: CC:2F:9D:6D:CC:B6:1C:CE:1E:E3:50:39:63:91:EA:63:D1:8F:B8:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/0f423575-11f9-3728-ae9b-8c70332062e1.roa
Signing time:             Tue 18 Mar 2025 13:00:50 +0000
ROA not before:           Tue 18 Mar 2025 13:00:50 +0000
ROA not after:            Mon 16 Jun 2025 13:00:50 +0000
asID:                     400701
IP address blocks:        206.168.140.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3a:a3:da:66:f9:20:d8:fb:ff:d3:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf7f6fb-0bae-4c21-bcf2-2f998541db3f
        Validity
            Not Before: Mar 18 13:00:50 2025 GMT
            Not After : Jun 16 13:00:50 2025 GMT
        Subject: CN=214fd862-7a60-4eb0-8074-80680e0b6f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2a:19:e5:c7:73:1b:0a:1e:4a:40:d8:4e:71:
                    ed:7f:e5:d3:25:7a:f8:d7:c3:63:a8:c7:75:ba:95:
                    c0:f3:4f:6b:a4:c9:95:6c:e7:23:8d:fa:fa:71:1e:
                    77:c6:c0:30:a3:09:46:b3:ae:b8:39:3c:90:d9:4f:
                    17:a9:a4:49:c6:5f:cf:b7:28:fb:58:c6:bd:a5:cc:
                    16:46:d1:7b:96:db:16:ae:55:b1:a5:06:a8:88:b5:
                    e9:72:ac:04:59:5b:d2:33:8b:c9:dc:35:90:1c:18:
                    d8:d9:ca:9b:01:47:f3:d8:69:a4:78:e4:33:9e:39:
                    42:5e:68:9c:1c:fa:22:fb:79:bc:55:b0:9b:42:de:
                    0c:35:2b:16:21:bb:28:0b:3a:86:22:f8:5f:85:14:
                    ec:72:cf:d4:d5:d1:f8:e1:ff:7f:de:29:6a:02:97:
                    a8:92:d5:b8:78:2d:3c:2f:c6:b5:c3:a2:c3:fa:b6:
                    d8:eb:a0:69:96:5d:ff:82:7f:b3:2e:36:af:96:36:
                    9c:fe:7b:04:c3:9b:a4:00:52:9b:3b:cc:6b:81:fe:
                    ac:8d:4d:93:e9:f5:ca:ed:9b:f9:0f:5d:40:53:0b:
                    66:49:e7:96:3e:2f:f7:35:3c:df:43:7e:e7:33:2f:
                    94:f8:a5:1c:e0:27:0f:37:b9:cc:8e:e1:0d:d5:af:
                    dc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:14:81:5F:30:86:8D:6F:97:16:49:F2:2B:69:BA:B9:69:5D:B2:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/0f423575-11f9-3728-ae9b-8c70332062e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.crl

            X509v3 Authority Key Identifier:
                keyid:CC:2F:9D:6D:CC:B6:1C:CE:1E:E3:50:39:63:91:EA:63:D1:8F:B8:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:9a:be:34:7f:3e:af:b1:5b:74:07:30:6b:b2:7d:b1:f4:01:
         ac:f0:bc:16:10:cf:5d:a5:06:65:cc:2b:12:40:f7:0d:ec:be:
         f1:62:42:3c:aa:ee:44:ff:00:4e:90:f0:26:7d:ea:2f:23:a4:
         8d:bb:35:ac:1a:d6:01:cd:a7:a2:74:a7:2f:57:fd:fd:6c:da:
         fe:f1:4e:d7:db:b5:33:2f:04:9f:f5:c4:cd:e4:b1:92:d6:1f:
         43:b0:5b:33:b6:7d:65:57:ea:a2:14:36:1f:7f:ba:14:da:e9:
         c6:1b:75:54:8a:60:60:69:08:9f:d7:c6:8f:6c:4b:f0:9d:39:
         56:45:a4:d7:9b:ce:79:fa:4d:d8:e7:62:1b:77:dd:a4:b9:46:
         52:e3:a5:ee:58:68:71:ab:b8:b7:30:96:69:fa:93:b2:44:01:
         82:7c:bd:a2:75:ba:50:17:c6:85:f5:a1:cc:f2:49:ac:3a:37:
         7e:87:d1:07:ad:4c:79:db:de:cc:09:0c:86:47:30:e0:bc:00:
         69:a5:c1:0d:90:6a:28:c1:01:19:15:3a:b0:97:bc:b3:69:e3:
         e2:12:6b:10:bc:bb:58:0f:d7:b2:9d:b3:c1:cb:11:d6:c6:93:
         5e:eb:80:e5:d1:94:56:0b:e9:78:e6:01:e5:a1:ff:3d:86:9d:
         4b:81:e5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----