Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/69e7bb45-303a-3a64-b6aa-813f620b77b9.roa
File:                     69e7bb45-303a-3a64-b6aa-813f620b77b9.roa (raw, json)
Hash identifier:          6RBaCTPCt3OZKPtv0fGhe6A3d2Tg0K07Zk4dGsXM20w=
Subject key identifier:   AA:A3:6C:E4:AD:41:94:03:6D:F6:DB:E5:21:CB:A9:E5:17:23:58:06
Certificate issuer:       /CN=bca48ad0-f613-4c66-b07a-6473d8a5aa26
Certificate serial:       010D0C9F4328584902EBFE108C9DA01337DC9180
Authority key identifier: 95:5B:53:3D:4E:AA:A3:E9:E0:E7:45:FD:FC:E6:48:59:27:4B:2D:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/69e7bb45-303a-3a64-b6aa-813f620b77b9.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     11260
IP address blocks:        67.58.192.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:eb:fe:10:8c:9d:a0:13:37:dc:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca48ad0-f613-4c66-b07a-6473d8a5aa26
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=50c0bb47-b232-46c4-be94-ba645dc813b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:dc:76:b3:0d:f1:d9:3f:71:f8:e8:4b:7e:88:
                    6c:03:24:65:00:3d:1a:12:48:a3:97:78:9a:93:0c:
                    86:d2:77:c4:70:0d:21:66:df:ea:76:8f:ba:99:dd:
                    f0:09:9f:a7:f2:d0:88:67:a0:16:da:35:66:b7:de:
                    b8:46:83:32:99:8d:82:38:94:ba:71:62:8a:c5:5f:
                    05:0e:a9:66:a0:e8:f1:14:06:60:15:69:45:24:62:
                    55:e6:18:08:6a:6a:66:65:06:6a:0e:d7:fb:ce:47:
                    0c:b0:81:16:2e:ad:92:bb:bf:9f:c7:04:5c:f3:51:
                    c2:58:0e:fd:75:8e:1c:26:9c:6f:78:50:d5:6c:64:
                    10:ba:79:b4:da:1f:d4:71:90:8f:a2:a3:e6:8a:20:
                    2a:cf:28:52:d2:38:17:db:37:63:5c:44:3f:c4:68:
                    3d:4c:fd:96:16:90:ed:9a:cd:09:1e:c2:7e:5a:31:
                    9f:39:9c:0c:19:e2:c4:52:97:8c:8e:73:72:64:bf:
                    17:25:df:10:16:38:da:34:6c:43:e4:08:32:2a:58:
                    77:92:d3:30:ed:56:a7:4b:ef:9d:cb:b8:41:30:4c:
                    c6:1d:05:47:62:b5:c9:54:0b:ee:82:68:61:1b:c6:
                    3f:30:75:44:8b:88:9a:86:11:ea:b8:3d:a3:3f:e5:
                    9c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A3:6C:E4:AD:41:94:03:6D:F6:DB:E5:21:CB:A9:E5:17:23:58:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/69e7bb45-303a-3a64-b6aa-813f620b77b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.crl

            X509v3 Authority Key Identifier:
                keyid:95:5B:53:3D:4E:AA:A3:E9:E0:E7:45:FD:FC:E6:48:59:27:4B:2D:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.58.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:49:99:96:89:0c:8d:b5:4f:ab:71:68:31:a7:76:c3:0f:bd:
         55:cb:1a:0b:a7:ed:36:39:cc:a1:8d:b4:22:6f:66:4b:dc:7f:
         99:59:dd:e2:1b:71:32:84:92:59:ce:d5:24:8e:39:1b:f5:b0:
         78:21:de:92:8d:74:7e:c2:97:d9:1a:fc:a0:13:f1:db:15:3c:
         bb:55:a3:8a:87:f0:3b:bb:ed:1b:e9:4a:60:14:74:b1:61:f2:
         64:e7:f9:8a:06:45:9f:ec:53:35:87:a5:d4:58:99:6e:76:36:
         a6:eb:12:49:9b:06:0a:73:dd:de:d4:f3:3c:30:8f:93:35:2f:
         2d:46:ee:2d:95:7e:eb:1d:8c:a1:59:94:c4:1b:d6:c1:70:b9:
         5f:72:aa:89:ad:52:c4:e9:06:d1:55:a6:52:b7:79:68:a8:4b:
         da:d3:76:c1:35:37:70:91:78:53:6c:70:99:f0:cf:25:c5:c4:
         a4:b4:21:b8:07:08:09:d4:34:e4:e1:9c:fa:ce:e5:8e:18:23:
         8d:43:9d:9c:35:92:64:00:03:8c:b1:9f:be:27:28:79:0e:02:
         84:f0:ed:e3:c4:05:a5:20:d5:6d:1f:0e:32:4f:ce:2b:42:7f:
         62:3a:92:cf:75:93:b9:13:e5:53:9c:23:04:d0:c2:ea:7f:70:
         3d:40:c3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----