Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6e12da3c-8617-325d-883d-9d7d1856d369.roa
File:                     6e12da3c-8617-325d-883d-9d7d1856d369.roa (raw, json)
Hash identifier:          nM3A4JmYhtvZJZ0ncR+JuKazHYIPY/5akSz3rBtCjV8=
Subject key identifier:   54:3F:FE:1F:C0:03:07:40:1E:92:B2:8E:BC:FE:CF:59:3A:B1:E1:7C
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584981D45EE670E4F0FCE2A3E280
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6e12da3c-8617-325d-883d-9d7d1856d369.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     36137
IP address blocks:        107.149.200.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:5e:e6:70:e4:f0:fc:e2:a3:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=a1f564b1-9ac9-44e8-9835-386911e0c875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:38:09:3e:88:bd:bd:f0:66:bf:65:76:14:b0:
                    1f:c5:ba:83:fe:a3:e5:a9:be:d7:ea:73:b9:8b:5c:
                    0e:a9:38:a9:0a:47:b5:e0:82:53:56:b8:ba:6d:46:
                    9b:00:58:15:d3:44:bf:a1:e4:4a:bf:e0:b8:35:e9:
                    e7:e8:c5:75:23:84:a9:92:88:89:43:6b:27:18:b1:
                    e9:39:22:c7:e1:da:f2:46:a0:93:c0:a5:4e:8a:9b:
                    79:ba:8e:ac:00:31:21:9e:91:d3:ec:fb:7f:c4:28:
                    4f:73:99:00:54:4f:1d:69:cb:24:69:cf:52:a7:6b:
                    a7:6e:bc:aa:ed:74:92:5e:2c:8f:b1:5b:86:58:74:
                    94:36:76:20:6d:7e:d6:aa:dc:6b:09:8f:96:2e:4b:
                    3b:70:38:89:8c:81:d6:95:47:1c:a0:26:42:08:bd:
                    fd:9f:de:ed:4e:b7:9b:6b:86:0a:cc:68:dc:3b:bc:
                    e3:2b:b1:6f:e3:ce:dd:69:9f:a1:c3:bf:82:5f:36:
                    6f:03:91:b1:cb:de:31:ab:39:d0:61:c7:ea:2e:b3:
                    c1:32:3a:5d:3d:ea:c7:26:03:90:a3:96:76:2b:4f:
                    03:f8:99:fb:bb:2b:ff:f2:44:3e:fe:c9:08:b0:42:
                    7d:6d:dd:16:8b:65:df:f8:af:4d:41:3e:dc:8c:bd:
                    5e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3F:FE:1F:C0:03:07:40:1E:92:B2:8E:BC:FE:CF:59:3A:B1:E1:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6e12da3c-8617-325d-883d-9d7d1856d369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:29:b3:05:77:86:5b:44:10:6d:29:9b:83:64:c9:01:d7:1f:
         72:4b:49:f1:1b:df:34:21:e1:0a:e8:f9:e2:20:94:2a:67:a4:
         36:34:a6:48:c4:66:f1:55:c5:11:90:22:be:5c:a8:80:37:b3:
         42:59:c7:11:e1:63:4f:b0:07:7e:fd:da:c4:18:45:c9:c3:c5:
         3a:ff:63:63:ff:4b:70:e3:50:a4:b1:7a:7c:40:88:ce:5f:f5:
         8a:30:0e:fd:b3:cd:1f:ab:45:c8:5c:76:47:c0:c8:ec:f3:71:
         55:1e:a7:a3:c8:9d:0f:82:a1:1f:ec:2f:9c:06:7a:67:11:f2:
         a7:c5:96:33:2b:ae:99:e5:29:ea:5e:b9:f5:a6:44:1c:b7:ee:
         2d:7b:57:0a:2d:82:74:d1:f7:63:ea:4f:67:20:ef:5b:8e:54:
         01:8b:90:0e:5f:a7:f5:e5:59:ac:a5:f2:1d:2d:a6:a0:03:24:
         a2:bb:31:bb:97:ab:d8:b7:51:c4:0e:f9:3d:81:fd:ab:3d:14:
         6c:2c:76:0a:32:4c:2a:4b:a0:de:50:51:4b:73:17:05:7b:53:
         9b:1a:67:86:b6:ef:ae:3f:33:bc:51:8b:56:f2:77:37:c5:21:
         ec:e6:d6:ad:42:cc:19:1b:94:de:60:9d:ab:b8:b7:23:1f:96:
         29:40:17:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----