Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a3f0f4fc-36dc-3901-9d04-bdddf006fc88.roa
File:                     a3f0f4fc-36dc-3901-9d04-bdddf006fc88.roa (raw, json)
Hash identifier:          2lJwmQAgpEjX3t8XYgctqtOYzMBIHV5olbRaugbaXfw=
Subject key identifier:   26:4C:AE:D3:1E:26:46:03:38:21:B8:86:F2:0B:71:F0:6C:E7:AD:77
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584981D45DDF80B000AE51BB1E00
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a3f0f4fc-36dc-3901-9d04-bdddf006fc88.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     398823
IP address blocks:        107.148.80.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:5d:df:80:b0:00:ae:51:bb:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=79f6dc40-dea7-4f01-9b5e-3d3fc21b6976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:72:6c:d1:29:17:96:1c:47:63:1a:9a:31:3a:
                    48:b6:6d:c7:74:29:39:69:85:49:35:6b:1b:3a:ff:
                    ca:fc:75:c2:0a:cc:43:2d:b1:d1:14:17:c7:d3:51:
                    20:4c:bf:c9:7f:9b:5d:26:23:4e:96:39:22:79:93:
                    a8:45:6c:ac:fc:23:ff:c5:24:d2:23:eb:d2:07:19:
                    41:a2:4f:6a:29:f1:0c:e7:dd:2f:c8:cc:0b:ad:95:
                    d3:d0:e5:cd:02:a5:2c:b3:07:be:7f:04:db:3b:e1:
                    ef:67:b8:07:5a:1b:07:ba:27:3f:14:c8:b1:e1:20:
                    66:1d:1e:be:77:38:e7:69:60:ab:47:a1:b4:17:0f:
                    70:f4:41:f9:f5:40:5d:e8:05:bd:b9:5d:12:2e:17:
                    3f:a9:7b:10:2d:b6:bc:c5:90:53:49:75:38:57:c6:
                    23:0d:97:c6:6d:a1:2e:de:82:f0:36:96:ed:a4:61:
                    67:01:13:2a:94:5e:b8:92:21:3e:ae:c2:6c:4b:dc:
                    cd:c9:5e:f1:14:4b:2b:92:29:8c:6c:e4:92:8b:68:
                    19:63:c1:b9:d5:ef:b8:d2:c4:e2:72:a2:03:f8:ee:
                    52:30:85:fe:24:c9:02:b5:b5:ed:73:7b:fe:6b:3e:
                    67:8b:9e:10:42:23:52:83:98:fc:f3:5f:9e:23:13:
                    de:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4C:AE:D3:1E:26:46:03:38:21:B8:86:F2:0B:71:F0:6C:E7:AD:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a3f0f4fc-36dc-3901-9d04-bdddf006fc88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:54:d9:3b:7e:40:b7:74:00:3c:9d:e0:c6:ff:c2:eb:11:2f:
         3b:96:64:be:af:93:53:c3:08:79:cf:78:ae:4d:e0:ce:d0:9e:
         9c:7b:8d:14:81:e3:66:31:76:bb:d6:82:cd:64:bf:8e:48:2d:
         59:b0:e2:97:3f:77:19:ee:df:28:e4:a7:f4:91:51:f4:d0:12:
         77:bf:62:07:c2:57:03:f9:55:cc:5d:0d:d6:7f:34:85:79:99:
         ca:d0:f5:0e:d3:56:f6:f2:37:6e:53:fd:aa:70:e1:82:3c:7a:
         fd:10:89:f1:08:e5:9e:4c:6a:21:24:ca:20:4d:ca:39:8c:51:
         46:6a:59:c3:c4:f5:4c:db:6e:66:95:24:09:76:8b:0c:9c:8d:
         54:e7:71:74:fa:19:fc:78:39:21:59:22:07:38:cb:6b:89:77:
         05:41:42:6b:d4:5e:41:10:3e:2f:b5:33:25:32:d1:6e:7c:b7:
         17:a9:7d:02:fe:d7:b5:26:ce:10:d0:bf:1e:89:81:ad:2b:02:
         ef:33:29:2a:06:63:51:e2:d1:02:ff:f2:07:99:cb:b6:71:be:
         bb:a2:cc:2e:dd:01:fe:b4:ec:35:4f:7f:20:3f:40:51:7f:c7:
         5f:78:19:46:e1:37:0c:a7:00:c4:57:c5:09:2d:a1:2f:a9:71:
         f1:c7:ca:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----