Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/fce02999-ce72-39f7-957b-223a3adf7b3b.roa
File:                     fce02999-ce72-39f7-957b-223a3adf7b3b.roa (raw, json)
Hash identifier:          kryKUf9EBEoZok0VhqgDCTtxISmwzaoMlYu61zvc3Mk=
Subject key identifier:   79:BF:F7:E8:75:52:37:B5:B0:BD:12:01:39:41:78:CA:BC:AD:25:0E
Certificate issuer:       /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial:       010D0C9F4328584953C44E7BCB70459EC84F1D80
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/fce02999-ce72-39f7-957b-223a3adf7b3b.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     48254
IP address blocks:        206.130.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:4e:7b:cb:70:45:9e:c8:4f:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=6c1c9ad0-bfb3-4ef7-b277-1928bf8f52f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f4:14:4b:68:bf:2f:6e:b9:15:65:1f:fe:a8:
                    89:7d:28:b5:a6:92:f2:c9:a1:40:a0:cf:06:de:ae:
                    70:8c:10:20:b8:35:fc:3b:b3:15:a2:fa:0b:84:e7:
                    0a:f2:74:74:b6:9f:30:74:ce:b7:37:0e:eb:56:8a:
                    0d:86:3d:a9:62:05:25:a6:1a:fc:a9:0c:6d:d6:36:
                    1d:89:b1:15:7c:69:d0:c4:cf:22:6c:76:13:c6:90:
                    eb:64:c0:bd:47:21:22:09:93:f4:a3:d9:90:48:35:
                    b8:27:f8:28:09:70:0f:61:70:d5:6c:ca:c6:bb:22:
                    8b:30:ba:fb:35:2b:df:7c:f6:ba:0e:55:1c:6a:f7:
                    55:23:a0:f2:6a:16:11:d0:10:47:27:e4:a1:db:58:
                    d3:27:b0:0d:b9:9d:1e:70:3f:21:32:2e:8d:6b:29:
                    81:9c:bb:a4:9a:39:76:6e:f1:de:b8:d1:43:40:95:
                    e0:ec:57:c7:93:e2:8e:d9:a3:cd:80:fd:ae:cd:58:
                    6a:81:c4:b1:f6:e9:cc:bd:43:11:73:65:ca:dd:d1:
                    a7:ed:ba:61:5f:eb:3d:46:da:83:30:fe:c6:52:69:
                    27:70:cb:34:62:da:d4:af:cd:b1:29:35:b0:0e:1d:
                    04:4c:0d:97:90:da:f7:6e:51:78:db:75:15:24:5c:
                    38:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BF:F7:E8:75:52:37:B5:B0:BD:12:01:39:41:78:CA:BC:AD:25:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/fce02999-ce72-39f7-957b-223a3adf7b3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl

            X509v3 Authority Key Identifier:
                keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.130.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:7f:95:d8:6b:e6:fd:8f:d1:dc:2a:5e:84:c8:db:4a:d5:8e:
         e4:10:fa:74:f8:6a:d3:fe:9b:30:a5:c0:32:78:2c:6e:07:20:
         7b:13:39:e5:80:77:f5:ad:32:ec:7b:92:62:37:1c:4a:0d:2c:
         c6:56:98:16:ab:95:eb:e6:59:74:5d:93:1f:97:de:a6:d0:c1:
         1b:1b:b0:a5:0b:c9:d9:5d:c0:e6:52:c2:03:f9:ec:e9:88:3d:
         25:a6:4e:9c:16:3d:cf:3c:64:1c:b8:a3:07:1a:bd:b1:92:52:
         b7:23:6a:55:8e:59:73:aa:f1:cb:23:d5:1f:53:44:48:76:98:
         3d:77:2e:9c:73:49:a1:70:64:75:74:e9:e3:f9:2e:69:43:06:
         8c:aa:88:24:29:12:66:83:4d:3b:c3:8b:a7:78:89:03:95:22:
         d3:2d:37:b7:22:f8:b9:dc:7a:98:8e:4e:67:42:d6:4b:a0:fa:
         ed:73:3c:b9:07:a4:14:e5:db:4e:c0:4c:8d:32:f8:c7:91:44:
         68:0e:7a:4e:02:a6:08:f1:05:af:51:47:57:b5:df:6c:6f:f8:
         66:d1:fd:cf:18:03:21:07:f6:8e:9e:29:7f:06:aa:38:05:a6:
         11:8d:7b:81:b5:3a:c2:e4:cd:c4:8d:3c:48:25:70:43:04:64:
         dc:a6:da:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----