Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e02c53ca-011b-3920-8c42-11cd63c0df14.roa
File:                     e02c53ca-011b-3920-8c42-11cd63c0df14.roa (raw, json)
Hash identifier:          fS1jR0qzpksKFPO/c2zwUOY3Lsfhv0kR7as2ZcpMqAk=
Subject key identifier:   1F:AC:7B:9F:3E:B6:74:18:73:5E:0B:11:F2:A3:51:0A:62:2B:F1:95
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848ADC60B2B6C8F081301106B80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e02c53ca-011b-3920-8c42-11cd63c0df14.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     15247
IP address blocks:        209.89.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:0b:2b:6c:8f:08:13:01:10:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=c0ad6e69-7ba4-483a-84f0-1b55524302f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e5:39:c6:3b:d8:5d:8c:08:63:cf:ac:b9:9d:
                    37:c8:31:c1:1c:c8:b9:31:07:18:20:05:5b:63:21:
                    5a:51:b3:da:70:cd:c5:da:49:d3:cb:72:f5:4c:61:
                    c6:e6:13:e8:c8:16:69:bd:78:bf:5b:7a:b7:fe:2f:
                    3d:10:af:41:a5:39:a6:49:00:c5:bb:a4:87:d6:3f:
                    f0:77:07:0b:7f:e7:24:d3:36:d6:a7:1f:e0:ed:af:
                    7d:11:2c:dc:63:4e:52:ce:74:00:b9:c5:14:16:ec:
                    05:86:4c:3d:1e:4e:e7:f8:1d:0d:4c:7e:1b:dc:c6:
                    05:23:a8:6e:c1:52:7c:a3:eb:01:f4:ab:85:3f:f8:
                    73:43:17:42:1e:91:f0:43:36:c6:88:18:72:ae:05:
                    97:f2:d3:bc:35:56:87:d2:19:45:7d:b3:6e:ba:f8:
                    68:99:66:14:20:e9:6b:4a:c4:9f:00:f2:33:b4:95:
                    cf:22:e2:df:12:cf:39:73:2c:f5:1d:bc:11:63:f9:
                    24:23:e4:a4:b8:98:05:10:38:98:21:89:cf:6c:ca:
                    ac:15:46:91:9e:45:ab:aa:4b:af:79:2a:10:b2:bc:
                    d9:13:0a:69:7c:30:b6:f3:b5:fd:4a:1c:55:76:e2:
                    aa:db:b1:96:09:46:ea:a7:be:f1:3a:d3:a0:33:3f:
                    a3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AC:7B:9F:3E:B6:74:18:73:5E:0B:11:F2:A3:51:0A:62:2B:F1:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e02c53ca-011b-3920-8c42-11cd63c0df14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.89.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:25:c9:dc:21:88:dd:9b:cf:04:2c:a5:05:d7:5d:bc:1f:a1:
         5e:fa:f3:cf:4e:6d:96:e6:ed:33:2b:81:da:e6:f4:5e:f4:60:
         3f:4c:66:71:e9:ea:bd:98:a3:93:8f:3c:80:b7:43:2b:22:0d:
         94:9b:20:5c:20:0a:54:0c:db:0f:46:f2:b4:3c:55:e1:b7:c9:
         8c:6d:3c:b5:90:c3:cc:0d:a6:f3:42:53:94:14:5b:31:09:fe:
         9c:fe:b7:65:b0:ca:26:8d:7e:1b:2e:77:b8:31:3c:27:4d:e5:
         6e:63:36:6a:4b:3c:77:02:c7:89:50:b0:1b:40:df:bf:86:09:
         01:45:79:8a:48:ad:73:f7:19:8b:2e:c6:0f:6d:31:0d:b5:2c:
         7b:29:a5:25:f7:98:81:6b:32:53:56:8d:3b:2f:29:93:68:e2:
         20:01:da:86:0c:71:86:29:4d:0b:22:74:e5:7a:d7:6d:ec:49:
         ba:54:32:2d:a4:be:9d:8f:c4:a0:8b:90:dc:34:f9:de:56:97:
         11:f8:3f:0a:37:42:d9:b8:c3:6e:f7:cf:d4:8e:ee:5b:be:f9:
         c5:d8:ff:3d:ab:89:78:6c:b6:f6:05:f7:89:5c:21:db:31:d0:
         81:42:59:c1:cf:26:55:44:03:79:5c:4c:05:06:e7:8e:73:16:
         42:5a:66:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----