Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/1cecd198-c1e8-34a8-af12-aeb52c5d99e5.roa
File:                     1cecd198-c1e8-34a8-af12-aeb52c5d99e5.roa (raw, json)
Hash identifier:          Xv5Ne9xw/ha+HqYuq4CHNDJZGVHJpgapTkOya8ow5lA=
Subject key identifier:   2B:40:F3:A1:CA:F1:BC:74:22:77:3F:5F:1C:43:65:00:54:69:5B:B2
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F43285848F926A8A474ED87975FB8C3C0
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/1cecd198-c1e8-34a8-af12-aeb52c5d99e5.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     834
IP address blocks:        199.255.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:a8:a4:74:ed:87:97:5f:b8:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=7d3d2122-afc7-45dc-a341-13e3745a1d61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:46:ce:11:fe:15:91:5a:1f:55:49:6b:99:48:
                    2e:56:53:a0:ea:6f:22:08:72:0c:b9:c8:bf:fe:91:
                    fd:ba:8b:15:4e:59:41:6f:55:3b:7e:c5:fb:ad:4b:
                    ce:8c:96:b5:47:bf:0c:58:49:e8:3f:29:f0:e2:77:
                    27:8a:fe:79:de:46:44:5f:d3:3c:73:11:b6:5e:b8:
                    36:6b:43:a8:6e:7c:c5:24:4d:b4:40:a5:74:67:3c:
                    0b:20:70:2d:0a:fd:00:c5:77:cd:e7:ac:79:bb:bd:
                    b6:ae:11:f2:4a:9a:8b:75:5f:fb:55:16:8c:19:ca:
                    8c:ab:e5:ea:f0:45:aa:8d:1e:14:7b:2d:87:f8:dc:
                    57:8f:0b:e1:d6:04:c2:36:1a:6a:b2:0e:1e:cd:3a:
                    66:14:e0:75:1e:7f:c5:af:ac:e1:cc:d4:d0:fc:37:
                    97:04:d2:1b:d0:9d:9f:bb:fb:69:d5:96:bf:12:90:
                    ea:1e:42:60:eb:7e:38:a4:c3:d4:91:d0:69:13:98:
                    2b:73:ff:f1:c1:85:63:48:c1:d1:64:3a:fd:ba:60:
                    3a:33:ff:2f:31:ee:85:bd:d0:a7:d6:9c:84:3a:d1:
                    6d:fb:45:7d:ab:3b:ab:ed:56:94:8e:bb:d3:0a:18:
                    ac:76:ad:8f:3f:2c:d0:39:96:4b:3a:45:28:66:8f:
                    38:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:40:F3:A1:CA:F1:BC:74:22:77:3F:5F:1C:43:65:00:54:69:5B:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/1cecd198-c1e8-34a8-af12-aeb52c5d99e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:0a:c2:fd:5a:13:ce:1a:df:0a:85:02:6c:aa:4c:6f:91:59:
         60:36:d3:91:e0:cf:17:63:5a:fd:65:5f:52:7e:72:39:07:11:
         e8:86:8f:79:fa:aa:fe:ef:6f:17:40:05:8c:0d:67:d2:6a:1e:
         05:5f:68:03:e7:22:d9:c6:51:35:b4:3e:1e:f6:1f:ca:85:4f:
         64:0e:55:91:25:a3:f8:7e:e0:38:bc:8c:e3:35:2b:fa:bd:f6:
         31:4d:6e:18:e4:b8:77:a2:75:69:c1:ed:51:1e:c5:cd:d7:58:
         3d:9a:2f:30:2a:4d:9d:a2:2e:f2:10:61:b1:e1:11:ed:f2:11:
         e5:0f:84:11:3c:71:bf:cd:b8:c3:e7:4a:eb:1d:ff:f6:b2:aa:
         4d:b0:f2:a6:e5:62:de:bc:4b:9a:12:64:7f:43:9a:64:83:e5:
         26:51:95:08:cb:b7:7b:f3:28:52:9e:d1:16:c3:2f:a3:14:83:
         27:b6:d2:13:0c:6e:8f:89:39:12:68:62:5c:1f:47:05:a5:45:
         87:cd:37:57:32:38:13:96:56:4d:76:65:fb:b9:6d:54:17:80:
         73:c1:f1:e9:44:0e:74:33:a8:b7:ac:90:d2:0b:97:38:a9:ee:
         48:bf:8d:1b:1f:2d:2e:26:bd:f1:bf:0f:4a:e0:cc:92:cf:d2:
         33:ef:44:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----