Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/ca810c60-a080-3006-b2cf-3d960b6d9f4a.roa
File:                     ca810c60-a080-3006-b2cf-3d960b6d9f4a.roa (raw, json)
Hash identifier:          m6PWX+aYIKxDYL0rpXQAFZTASyRTOMthHuiHDJ9JoxU=
Subject key identifier:   52:9A:82:67:16:2E:41:DB:95:34:5A:BF:AD:5B:4D:03:6F:95:34:AE
Certificate issuer:       /CN=41025fc8-e6c8-4422-acea-8126840c20bb
Certificate serial:       010D0C9F43285848FD56AD54384011906E7EDB00
Authority key identifier: C0:34:EA:77:A6:A5:DF:C1:6A:A0:D9:2B:83:12:84:40:E0:38:E7:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/ca810c60-a080-3006-b2cf-3d960b6d9f4a.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     14574
IP address blocks:        216.176.96.0/19 maxlen: 24
                          2607:a700::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:ad:54:38:40:11:90:6e:7e:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41025fc8-e6c8-4422-acea-8126840c20bb
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=06b1749b-a11a-4df2-aca1-324f2f87a891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c2:40:fe:ce:92:f2:a4:84:a2:54:31:59:76:
                    66:ec:b8:df:4f:7d:ee:87:b4:f4:b1:5f:70:ec:af:
                    67:d2:d6:31:e4:1f:90:27:c4:82:ed:d2:1d:fb:8d:
                    60:08:e2:3f:1d:0d:29:9e:7e:de:1c:6c:4b:c1:a4:
                    f2:78:a5:1b:76:4c:87:25:1e:f7:fe:09:a1:02:0a:
                    00:0d:6c:c0:01:96:54:ee:92:a3:d6:41:f3:a1:9e:
                    2a:01:7e:a1:db:b6:dc:1a:11:e6:db:e7:bc:bd:ba:
                    5a:95:73:41:df:55:83:05:9d:81:13:e6:1a:e7:b6:
                    71:12:d4:94:28:7d:fa:86:2a:10:51:d7:92:84:a4:
                    e5:01:1a:43:fd:f1:0f:aa:8d:8f:f7:6f:22:fa:f7:
                    ca:b1:14:92:ca:92:f9:9e:d3:f2:50:1b:cf:01:31:
                    d7:9f:1a:85:40:6c:50:07:a7:45:c5:f3:1b:e9:d5:
                    02:cf:04:ed:18:e8:af:cb:cd:0b:0b:56:47:66:15:
                    91:54:f9:71:87:ea:fa:6c:64:23:a2:da:f9:85:3c:
                    1e:2a:f2:3c:d9:3b:73:a7:a0:8a:19:a0:13:a4:4b:
                    63:ca:bf:88:f6:21:fc:9a:63:26:a6:2a:30:27:1f:
                    03:c1:0d:98:74:01:e3:e4:03:b7:a1:bc:d8:43:5b:
                    49:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9A:82:67:16:2E:41:DB:95:34:5A:BF:AD:5B:4D:03:6F:95:34:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/ca810c60-a080-3006-b2cf-3d960b6d9f4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb/41025fc8-e6c8-4422-acea-8126840c20bb.crl

            X509v3 Authority Key Identifier:
                keyid:C0:34:EA:77:A6:A5:DF:C1:6A:A0:D9:2B:83:12:84:40:E0:38:E7:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41025fc8-e6c8-4422-acea-8126840c20bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.176.96.0/19
                IPv6:
                  2607:a700::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:78:f6:7c:49:7a:98:a4:7c:14:4c:d9:74:8e:c3:63:fe:fc:
         2c:0d:99:60:74:5b:ee:55:21:45:ae:24:0e:76:18:6c:3c:ec:
         b0:4f:39:ff:68:dc:a4:fd:62:1d:e9:31:29:be:fe:4a:34:86:
         3e:f6:0c:ea:59:4a:f5:84:d4:3c:a8:be:68:dc:27:13:e6:41:
         0c:6c:a3:5f:d8:f1:0b:bd:18:8b:64:ae:84:c3:e4:b3:04:db:
         b4:de:d3:62:8f:76:e5:b1:ea:03:54:b6:f1:f9:2a:d8:e6:63:
         ab:84:d6:e4:2f:3b:78:cf:27:e1:b2:ec:b9:80:42:0d:1d:da:
         fa:82:44:95:c6:82:c0:78:43:38:c3:8a:59:99:7f:1a:72:63:
         10:03:9a:c8:a4:01:8b:d3:c1:7c:88:07:71:45:f1:50:d0:79:
         a9:50:e8:bd:3f:0b:e0:f3:2c:08:3e:30:ed:83:d7:fd:67:e6:
         fc:c8:39:f5:f8:45:41:ec:c3:65:b3:78:95:05:71:8b:62:37:
         a4:8e:15:1e:42:98:c0:aa:e7:8f:49:63:4b:4e:b7:ff:92:33:
         5b:64:de:6c:4d:34:59:2d:f8:ce:f8:59:23:b2:0e:9a:b7:1c:
         89:b2:c6:49:12:b0:76:3d:54:93:2e:93:be:c1:74:b3:94:71:
         60:b7:69:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----