Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e3756c6c-90b8-350a-9ba8-bad47e2aa206.roa
File:                     e3756c6c-90b8-350a-9ba8-bad47e2aa206.roa (raw, json)
Hash identifier:          LgYD2B3+SE4BDsLbLzjjMfIGz1GOUuT8UEtitOnjLzI=
Subject key identifier:   F0:BE:2C:BA:BB:A6:AF:D6:41:E5:43:76:38:39:9E:C6:BF:83:2A:A2
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F432858494E2EA61477F6FD7E60C4A180
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e3756c6c-90b8-350a-9ba8-bad47e2aa206.roa
Signing time:             Tue 25 Mar 2025 13:00:51 +0000
ROA not before:           Tue 25 Mar 2025 13:00:51 +0000
ROA not after:            Mon 23 Jun 2025 13:00:51 +0000
asID:                     394437
IP address blocks:        206.198.213.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4e:2e:a6:14:77:f6:fd:7e:60:c4:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Mar 25 13:00:51 2025 GMT
            Not After : Jun 23 13:00:51 2025 GMT
        Subject: CN=71e06e61-bf71-46f6-9ac0-6047f4f64fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3c:3d:82:cd:d7:32:18:88:73:99:0d:af:de:
                    00:3f:3d:c8:d1:26:28:41:c5:7f:5a:73:d9:05:4c:
                    b8:e3:6f:00:bc:99:0c:05:d1:93:ed:fb:f4:0c:c2:
                    06:21:61:6a:d5:11:ba:15:b6:a2:9f:f1:57:7e:42:
                    40:5c:c2:65:00:9b:bc:a8:5d:c9:f9:75:98:46:d8:
                    6b:ba:3f:43:aa:ef:1b:5a:f1:43:c4:77:96:25:2c:
                    9f:d2:53:33:c3:3c:62:a0:ff:79:dc:93:ae:01:0c:
                    31:b2:47:77:5a:60:8c:0b:eb:2e:92:47:82:89:4e:
                    35:cd:dc:d0:58:af:e0:e0:1d:45:3d:78:ac:86:2e:
                    93:d8:ef:45:9f:59:4d:ce:f6:c1:6f:4d:44:87:a3:
                    65:50:17:d0:7b:0c:45:eb:0e:ee:ca:f4:11:98:c4:
                    31:54:82:ac:b8:37:d9:51:15:bb:29:b4:41:5d:a0:
                    0b:3b:e1:57:0c:ac:95:c8:65:9c:c3:83:e5:02:99:
                    7b:02:30:ed:fc:2b:d6:5d:80:26:d0:ee:52:ae:f3:
                    b2:2e:d5:30:6b:ba:f1:34:77:d0:8a:ba:8c:d9:a9:
                    6a:53:87:11:a0:06:3c:84:42:5b:e1:f3:b1:15:4a:
                    38:fc:f3:26:f1:50:d7:2d:7c:0f:cf:b2:65:32:3f:
                    94:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BE:2C:BA:BB:A6:AF:D6:41:E5:43:76:38:39:9E:C6:BF:83:2A:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/e3756c6c-90b8-350a-9ba8-bad47e2aa206.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.198.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:24:1c:c4:a7:c7:5d:16:64:3f:e4:5a:8a:c2:e7:0e:d2:4e:
         f7:6e:ed:f7:70:16:56:09:37:80:dd:18:57:83:b5:74:ec:0e:
         43:dd:06:c7:5a:62:d6:e7:2f:0c:f9:3c:80:00:75:03:d1:9c:
         2e:77:6d:39:9c:1f:d8:2a:94:49:20:e3:85:2a:31:2a:cb:76:
         32:7a:4e:1b:e2:6a:d0:97:eb:13:7c:67:ab:28:34:85:ef:ef:
         fe:32:fa:d1:9d:68:96:05:01:0e:ba:5e:6e:7d:b7:df:7d:8c:
         c8:da:c0:63:8a:5a:b8:b8:fa:c9:c8:4d:cb:d3:7c:94:3c:93:
         3e:7d:57:f1:32:e3:b2:9c:12:a0:3d:10:18:08:42:7e:7d:51:
         b1:21:07:10:4c:c0:90:9f:cf:75:bc:52:34:ec:6e:c4:cf:ba:
         72:33:4f:e5:78:66:18:5c:98:37:2f:d5:eb:3f:30:c7:25:db:
         b5:8d:c3:09:4f:f0:1c:ea:2a:ad:08:57:15:bc:29:27:f7:3d:
         0c:40:87:fa:db:c7:fc:31:d0:70:20:c9:3d:ec:49:cd:1e:e6:
         4f:94:b8:0d:61:7c:57:ad:29:0b:d8:60:6c:94:1e:b1:ec:e4:
         70:c1:96:9f:e5:f0:17:88:f9:9f:43:79:6e:ca:63:7a:04:eb:
         54:12:0a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----