Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6c42378c-2b90-319e-9292-aebd96d35ec3.roa
File:                     6c42378c-2b90-319e-9292-aebd96d35ec3.roa (raw, json)
Hash identifier:          WvvQf10z2CkvNu4/tL2hTZk40IGMDw4wUtxzJ3+TFYo=
Subject key identifier:   FC:88:A6:0D:53:99:BB:D3:33:84:0E:47:9D:56:23:F0:CF:EB:89:85
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848B62611B13A6BAE8487422BC0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6c42378c-2b90-319e-9292-aebd96d35ec3.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     852
IP address blocks:        208.181.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:11:b1:3a:6b:ae:84:87:42:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=3bfafc88-9658-47c1-93ca-08c7eebdb7e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:14:bf:62:ad:ef:eb:eb:83:1c:58:f1:ff:4a:
                    49:f4:b9:e3:f1:01:ba:9f:d9:25:6d:f1:8e:bd:47:
                    a8:11:89:ef:b6:3b:04:23:c3:8c:e1:28:36:79:1f:
                    04:24:4a:f4:4e:49:27:b9:d8:34:75:09:98:8b:07:
                    01:5e:82:2f:be:f6:54:34:e0:de:a1:46:4e:27:ed:
                    23:60:1a:35:ba:93:84:fd:93:0b:01:8a:5d:a3:44:
                    46:02:b2:46:f5:82:e9:c5:b4:e5:d3:ac:b0:04:3a:
                    f6:21:07:b8:63:17:f7:95:3b:4f:7a:55:bc:a7:c4:
                    85:de:23:69:49:1e:83:6f:39:18:cb:12:39:e9:5e:
                    b7:6e:d9:15:4c:f9:f7:0a:93:ed:a7:5a:42:e3:41:
                    84:95:7d:55:3a:be:87:fe:4a:35:41:83:e3:3f:87:
                    0f:19:a8:3e:d1:47:fb:ef:99:b8:bf:d9:7d:8b:0d:
                    da:f2:ad:53:aa:ba:6c:f9:36:e1:55:44:f6:89:ce:
                    83:ca:dd:49:72:8a:a2:8e:69:63:a5:11:ed:36:0b:
                    ca:e5:e7:8e:d6:d1:0b:a1:c5:36:db:de:ee:3f:e5:
                    f7:45:98:d7:68:82:00:f9:31:27:a0:6d:21:40:72:
                    0b:b6:7b:03:d4:1f:3b:c0:89:16:00:a7:6e:57:80:
                    5b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:88:A6:0D:53:99:BB:D3:33:84:0E:47:9D:56:23:F0:CF:EB:89:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6c42378c-2b90-319e-9292-aebd96d35ec3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.181.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e2:db:51:2b:42:77:a2:89:d5:00:04:3c:f8:af:70:5a:86:2c:
         f3:af:89:ef:86:d8:c2:2b:cf:44:ed:98:45:35:62:51:86:e7:
         5c:39:f6:bd:53:a8:07:ff:71:74:b1:1d:78:c5:45:e1:2b:47:
         03:36:b7:25:7a:ef:29:87:d6:b8:01:d3:9b:c7:3a:2a:c7:e8:
         5b:df:c0:8a:41:47:98:61:63:a0:ca:81:b2:28:9d:ee:f1:bc:
         52:6d:31:21:ad:c2:a9:c3:7f:29:38:dc:3b:28:3e:cb:c3:02:
         28:59:c3:5e:2b:42:21:7b:11:bc:87:c7:aa:8e:0d:6b:f8:88:
         c8:03:5d:53:d6:a6:b3:86:f5:ec:17:ed:70:1a:3b:e5:46:73:
         d3:2d:ad:74:45:6b:fa:ad:07:9c:60:53:36:7d:2d:c8:d8:56:
         c7:b0:3a:20:4a:4c:f8:15:2c:d3:9e:4c:2b:f5:42:89:bf:0c:
         d4:ad:d7:3e:12:2c:ea:1d:4f:b0:86:ff:e9:aa:85:aa:91:30:
         17:a9:dc:5e:e7:0f:d3:d4:09:41:54:ed:29:fc:6d:d2:e0:41:
         42:24:20:64:e9:00:81:dc:10:58:46:9e:00:ec:2c:7f:ba:43:
         3e:a8:8f:8d:20:b0:65:1e:e7:20:e4:27:69:cb:7c:c4:a5:c4:
         2a:20:14:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----