Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/99c07aae-832f-32e0-8580-8a3e6c4911c9.roa
File:                     99c07aae-832f-32e0-8580-8a3e6c4911c9.roa (raw, json)
Hash identifier:          1Lr6SGNbd+5guiqK9exj7bBkXWI8RMtWIT3+NzDEwUM=
Subject key identifier:   08:32:E8:B1:C8:71:09:04:C7:C5:98:EA:C9:A0:A7:BA:7F:DE:BC:F0
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0068D53FE7166381C7605C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/99c07aae-832f-32e0-8580-8a3e6c4911c9.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        72.31.144.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:8d:53:fe:71:66:38:1c:76:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=32b2fd3e-822b-4426-a946-e3914071d26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:50:28:59:4d:34:61:4f:7d:4a:f7:9e:e9:04:
                    2f:0f:a2:72:b7:a7:45:3a:8e:0f:f4:71:d5:81:6f:
                    10:34:8c:40:83:33:53:f3:c2:5a:11:9e:d0:d6:69:
                    05:e1:87:53:62:3a:f4:2f:e9:49:e6:e4:60:0f:6e:
                    c8:cf:30:08:f7:3c:26:03:a4:64:20:1e:dc:23:bc:
                    42:63:54:fa:b5:14:1a:95:c0:61:44:25:0c:f2:3d:
                    5a:5c:ba:33:bf:a9:b8:44:fd:09:e9:91:84:d2:f9:
                    dc:93:d7:5a:46:45:c9:e2:80:6f:3d:1d:20:74:2c:
                    42:eb:c5:b3:c6:de:82:5b:30:c5:71:95:9b:de:de:
                    b5:c6:c2:0f:39:ef:d0:a8:1a:ac:89:d6:71:f8:32:
                    70:a2:1f:52:a5:39:41:ae:89:b8:97:00:f0:e3:19:
                    70:c4:c9:4a:e8:69:85:fc:02:ad:9c:b9:a5:3b:a7:
                    e2:a4:82:de:1c:a5:b8:bf:c0:3a:e5:d4:c6:8a:ab:
                    f3:e5:58:10:2f:6e:e4:15:16:fa:75:fa:63:d6:8a:
                    5d:63:e0:83:47:f7:0e:58:74:ad:91:09:95:36:6f:
                    43:ed:e3:b0:9b:79:ab:f7:7a:84:15:0d:8c:95:ff:
                    4f:b7:80:21:d6:85:f6:4d:2d:90:4c:94:87:2f:c4:
                    ff:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:32:E8:B1:C8:71:09:04:C7:C5:98:EA:C9:A0:A7:BA:7F:DE:BC:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/99c07aae-832f-32e0-8580-8a3e6c4911c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:09:93:80:54:d1:ef:c7:f6:c9:cc:c2:08:93:7a:97:55:2a:
         54:2c:a1:cd:e5:63:8e:4d:27:64:85:ad:aa:a1:fd:d8:8c:ce:
         8b:32:73:4e:01:98:27:71:5a:8c:b9:ea:e1:fc:c2:ff:25:62:
         e8:8e:e8:8f:78:41:56:c9:73:60:66:ac:d8:bb:d1:4f:a1:70:
         28:c9:71:65:03:de:75:b6:33:28:a9:4c:ee:d8:47:e2:14:8e:
         a9:76:fe:77:60:a0:44:9e:d6:10:c3:e7:bb:14:c2:12:b0:39:
         b2:a9:d7:d0:27:a6:cb:f7:e3:7b:23:a3:42:78:fd:da:3a:b4:
         fc:ea:ba:60:ae:ed:0c:da:13:68:c9:f4:61:01:35:3c:31:4f:
         44:53:fd:e8:cf:3a:6c:d9:4d:55:38:2f:02:b6:23:e5:b0:45:
         fb:6c:e0:f1:79:89:df:cb:4f:7e:b8:60:e0:34:4d:7a:fa:f2:
         53:97:39:db:a9:43:20:56:13:17:d9:57:cf:b0:dd:27:02:5f:
         4d:0f:9b:54:f9:cf:c7:53:e8:a4:4f:d3:7b:12:5c:08:79:c8:
         29:01:fa:a3:1c:c2:24:21:f2:31:9e:8a:00:08:66:f6:67:40:
         1d:61:d7:99:0e:b7:57:4d:25:7a:98:ae:b4:0c:62:b5:7b:e0:
         a9:65:c8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----