Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/cacbbade-97c0-3e8c-9183-6a94e609a8cc.roa
File:                     cacbbade-97c0-3e8c-9183-6a94e609a8cc.roa (raw, json)
Hash identifier:          X83u9dD/oVeyKY0R7LphwLU3KJnUk5aUEs0l6dg8Smg=
Subject key identifier:   FF:96:BF:85:CE:43:01:55:E0:A3:D4:00:1A:CF:14:39:92:50:91:93
Certificate issuer:       /CN=a521f5ee-89d2-4088-abb9-f69291655e39
Certificate serial:       010D0C9F432858495EEEDE7B964EB4CF5896C9A0
Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/cacbbade-97c0-3e8c-9183-6a94e609a8cc.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     6233
IP address blocks:        23.106.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:de:7b:96:4e:b4:cf:58:96:c9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=cd4aaffc-d7c6-4ce4-a566-e0bdcf927592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:46:4a:aa:f9:f6:62:75:db:53:9b:b0:60:6d:
                    4d:77:5c:3c:9d:86:3a:6f:0f:e7:78:1d:9c:7f:ae:
                    48:eb:30:71:56:6d:a3:f5:50:3d:10:a1:d9:38:0b:
                    4a:7f:eb:f7:19:8e:71:ab:7a:d2:32:ea:2d:e3:c9:
                    16:23:10:81:07:27:f2:14:ca:06:34:66:ea:b3:b3:
                    ac:be:05:5c:f0:3b:a2:75:fd:94:48:d2:00:90:14:
                    e1:b5:32:fd:29:9d:0a:e2:27:a7:23:59:ac:f3:d0:
                    50:3e:ff:f7:1d:0a:b6:35:2c:1f:d9:a9:71:ce:da:
                    64:18:2c:0e:b9:78:28:05:93:57:2c:82:67:b1:c6:
                    16:d7:2c:ce:39:7a:f9:b3:ec:c3:52:95:4a:61:6d:
                    c0:47:45:df:3a:4a:1c:c4:5a:ff:16:fd:47:8b:cd:
                    1b:a7:bc:ce:09:fb:b9:8c:27:5e:17:92:6c:ec:79:
                    ce:41:91:c9:7c:3c:5a:6b:30:23:6b:48:9f:09:26:
                    9b:bf:bc:36:c1:a2:79:07:9d:dc:c1:0f:53:1c:ad:
                    8e:b8:dc:d7:71:47:3f:66:10:f5:b9:fa:b7:1d:6e:
                    cf:3c:7a:7d:a1:82:53:5c:4e:40:0f:b3:3c:c7:85:
                    26:14:37:a6:74:47:02:59:62:d1:72:44:bd:56:8a:
                    5f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:96:BF:85:CE:43:01:55:E0:A3:D4:00:1A:CF:14:39:92:50:91:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/cacbbade-97c0-3e8c-9183-6a94e609a8cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl

            X509v3 Authority Key Identifier:
                keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.106.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:f3:9c:3d:53:a1:94:56:53:03:c0:9e:7d:27:aa:79:14:31:
         ca:f3:eb:32:84:28:40:72:29:63:92:34:3d:87:bc:2d:dc:e2:
         57:c9:0e:6c:d7:d4:88:d9:4e:d1:dc:f1:dc:2e:50:54:8d:23:
         58:c5:7b:fb:2b:d8:9f:b7:36:d5:aa:3a:6f:d8:ee:8c:13:81:
         e4:c9:b4:0f:f9:d3:2b:9f:41:81:d8:da:bd:a8:7b:d3:94:ed:
         4f:cb:31:b6:05:0f:70:b9:49:ac:71:d3:e4:2d:d8:e5:52:8d:
         65:35:c9:96:2a:24:c9:2f:ea:a6:55:8f:b1:eb:37:c2:fc:23:
         f6:b8:46:21:92:d8:49:9b:fe:f9:f9:a7:c4:d4:96:31:e8:25:
         55:ef:5e:aa:27:df:bf:88:96:82:13:30:6d:cb:dd:4e:4e:bd:
         b2:ac:ac:a3:8d:d9:af:60:97:7a:22:e9:24:2e:23:3d:c0:04:
         48:b7:14:64:f3:89:7b:90:1d:0a:f6:b8:39:20:e7:e1:43:8b:
         ab:05:8d:d9:dd:3a:1a:61:6c:58:20:c6:68:02:bd:a3:79:9c:
         7f:73:0c:8f:9c:fa:39:af:1f:10:5d:0a:69:00:55:78:e8:53:
         b3:6e:48:19:03:32:92:17:f0:b7:8a:ab:1b:16:ab:eb:14:d2:
         e5:94:58:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----