Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0b33ef16-bde7-36e8-a403-9bfe4a282c72.roa
File:                     0b33ef16-bde7-36e8-a403-9bfe4a282c72.roa (raw, json)
Hash identifier:          RWgZOL6ujaaDJFDgnCTQNhCFmvmKslKNmbyQBI2XLU8=
Subject key identifier:   3D:ED:18:66:3A:CD:D0:45:BB:75:47:F1:18:F8:D9:90:44:94:A9:7F
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848ADC60A9B32EB30A8709CD740
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0b33ef16-bde7-36e8-a403-9bfe4a282c72.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     15247
IP address blocks:        207.34.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:0a:9b:32:eb:30:a8:70:9c:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=a394294e-7883-402b-aa76-373f9c5ae930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:40:cd:a5:7b:e0:32:fd:47:8e:43:78:08:51:
                    41:8d:20:2c:60:e3:8f:a1:42:65:4b:9a:e0:1e:6b:
                    3d:a5:c0:78:82:94:35:51:c8:b0:31:54:ef:90:44:
                    7e:5f:46:1f:0d:ec:c6:0c:32:78:b1:34:6b:1c:b9:
                    58:7f:b6:af:46:fa:d7:af:ce:d9:b3:61:77:1e:b4:
                    d7:12:2f:14:19:72:8f:e8:3c:e7:78:f7:f7:ea:f5:
                    70:a9:c4:86:6e:17:42:61:41:4d:d8:3a:af:ea:53:
                    17:1c:c3:6c:79:e6:94:a8:2f:ce:ed:4c:21:c0:50:
                    73:aa:34:2e:f0:b5:1d:8c:88:93:e6:2b:4b:67:ab:
                    19:91:07:ec:d1:e8:e6:0c:f8:46:a9:9c:96:89:ba:
                    4b:79:ed:3c:ba:2f:fe:11:5b:9a:69:8a:ba:77:0d:
                    86:e5:c5:ae:76:69:9f:36:9e:97:2a:68:dd:f9:8b:
                    25:c4:98:18:fc:29:a3:e5:d0:b7:1f:16:1f:f5:a2:
                    f5:bf:ff:ba:c0:8f:ec:0e:60:6b:18:f3:cf:e9:d2:
                    1b:4e:7d:cc:20:19:ac:89:86:0a:f3:1c:c9:1e:38:
                    92:75:e2:3b:d0:a0:cf:3b:eb:16:d9:e0:d7:3e:37:
                    ff:e0:be:b1:6b:80:ce:67:4b:5e:1f:cd:a9:6c:59:
                    47:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:ED:18:66:3A:CD:D0:45:BB:75:47:F1:18:F8:D9:90:44:94:A9:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0b33ef16-bde7-36e8-a403-9bfe4a282c72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:60:9b:30:02:2c:c6:9d:1f:84:31:47:b5:ec:ec:e4:3f:65:
         64:ab:ee:f7:ad:11:25:4a:12:d8:29:3c:e9:e3:0c:75:c1:fa:
         d7:64:d5:aa:7f:73:4c:89:ac:75:68:a7:d6:14:d6:0c:6d:13:
         78:b8:26:52:51:a7:8f:85:07:e7:47:c9:ce:dd:e1:d9:06:fd:
         1b:2e:b5:da:44:59:bb:a1:ce:1f:92:e8:10:05:47:73:98:61:
         a5:52:77:f4:be:38:35:64:25:ae:a5:1e:9d:96:64:24:b1:76:
         0a:f1:11:80:e7:34:14:06:68:a2:b2:52:72:25:29:d8:53:f9:
         2f:d3:13:50:b7:c5:3d:14:b9:00:b6:18:fa:e2:e6:20:76:e8:
         17:f6:c7:ea:0c:ea:e9:39:46:c6:b0:91:01:a8:74:ac:ac:9a:
         9e:33:ee:64:18:1c:0b:03:24:b4:f0:63:98:5a:4e:4e:9d:7f:
         18:48:71:8e:17:54:1e:72:29:4a:47:74:26:c2:c7:14:44:0f:
         e1:25:d8:39:c7:61:ec:97:d7:f6:0d:a7:c0:e1:7a:73:f7:63:
         3a:4d:2b:a6:f1:99:d9:37:e0:7d:a0:39:b5:58:fc:e8:ee:b1:
         a1:54:52:95:5b:e8:77:1a:dc:a2:aa:31:e1:e0:a1:08:2b:19:
         72:d4:58:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----