Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/41943411-d0c2-343f-bcb7-40e8b50f6df9.roa
File:                     41943411-d0c2-343f-bcb7-40e8b50f6df9.roa (raw, json)
Hash identifier:          DK17x2FxpFkSk90NFcwN3D1LEh0GAUT2fZATQlJ7UvY=
Subject key identifier:   39:FD:65:33:4E:BA:38:57:6A:7E:F5:BF:EE:71:46:A9:7D:C2:18:35
Certificate issuer:       /CN=a6ca7c47-4500-4084-9bad-522bf30a9df5
Certificate serial:       010D0C9F432858495C2433FCA43829736DC7D100
Authority key identifier: 40:66:03:E4:E0:91:57:92:0A:65:19:9C:20:A6:78:28:F6:F5:DC:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/41943411-d0c2-343f-bcb7-40e8b50f6df9.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     13329
IP address blocks:        199.180.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:33:fc:a4:38:29:73:6d:c7:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ca7c47-4500-4084-9bad-522bf30a9df5
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=7817b550-c383-4bd6-994d-267777af28ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9f:27:92:ce:94:d4:dd:04:2a:ea:57:f3:ad:
                    aa:31:7a:9e:49:28:9d:a0:34:93:9a:e8:48:c2:23:
                    49:ea:4d:c1:9d:2c:09:80:b4:0d:4d:18:4e:83:20:
                    0c:c7:9f:5d:8b:46:cb:49:43:e9:c6:fa:b3:9f:28:
                    f3:61:31:cb:53:de:3f:f6:e2:e1:db:10:81:2f:c9:
                    af:71:48:fa:84:43:8f:92:6b:10:27:b1:8f:8e:9f:
                    c6:a7:0a:c6:9a:0c:8f:f1:01:e7:64:fe:97:ee:6e:
                    cd:68:f5:8f:1b:2e:b9:ab:69:27:b6:56:da:a6:65:
                    a9:d0:a4:ff:71:ed:1b:0e:86:ef:5d:d3:a1:07:b0:
                    91:51:d8:cc:3a:6e:a3:c3:b7:2f:7f:61:fe:0a:48:
                    c9:f8:22:43:cf:1c:3d:ee:32:cc:ee:d0:6a:c7:73:
                    6f:81:db:bb:ae:d5:cf:43:6d:4f:f5:87:c5:96:43:
                    5f:03:0b:07:ca:57:be:56:8e:c4:b8:06:6d:39:4a:
                    6f:70:80:0d:8c:5f:c2:97:f7:02:5f:06:31:2a:3e:
                    b5:b3:b3:60:71:ab:ef:94:e3:3a:05:f1:12:1f:15:
                    5c:5e:e3:3e:cb:81:7c:35:0e:c7:fb:e2:79:b6:3c:
                    4b:9f:7a:13:ca:c8:20:71:cd:bc:d5:ae:19:7c:b6:
                    52:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FD:65:33:4E:BA:38:57:6A:7E:F5:BF:EE:71:46:A9:7D:C2:18:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/41943411-d0c2-343f-bcb7-40e8b50f6df9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.crl

            X509v3 Authority Key Identifier:
                keyid:40:66:03:E4:E0:91:57:92:0A:65:19:9C:20:A6:78:28:F6:F5:DC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:96:fb:2d:ff:30:1e:49:40:59:28:13:74:9e:24:84:bd:4a:
         9a:f8:0f:e2:cd:21:8a:fe:93:80:e4:77:e7:68:39:60:c6:ae:
         d3:da:40:d3:64:74:0f:2f:a4:81:39:06:de:63:d1:84:58:f4:
         3f:f0:db:cd:c1:67:0a:53:c7:14:23:07:59:58:4b:d2:25:2a:
         f7:81:30:10:bb:27:f1:c8:9a:6f:ac:b0:6d:9f:15:39:4c:c3:
         54:3a:46:e0:43:64:14:b6:37:5b:9f:09:9d:84:5c:74:a7:24:
         ff:74:94:e3:83:41:1f:36:fe:91:dc:04:e6:c8:50:6d:76:25:
         11:53:d3:23:66:77:8c:1d:4a:6a:a4:e8:82:23:27:7a:a3:e8:
         4e:97:c6:10:fa:c6:0a:a1:6d:e9:b9:42:f5:6d:ad:07:2d:e8:
         ce:4e:b0:60:c6:47:0c:b4:6a:ac:dc:4d:b4:57:60:31:21:8f:
         8a:bf:b6:06:8a:56:12:92:d0:41:96:7b:4f:f0:4e:62:2f:62:
         35:83:6b:cf:6c:b8:91:de:4c:de:2b:72:41:b6:ee:94:2f:f6:
         6a:b9:a4:9c:96:e5:b3:5a:2b:63:10:3c:a6:64:bb:21:a8:44:
         ed:bd:e4:94:8a:dc:0b:41:5c:13:72:ba:95:6b:f7:e7:ef:2c:
         41:3f:56:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----