Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/2f308d69-5465-3883-9d00-359dc3eb41de.roa
File:                     2f308d69-5465-3883-9d00-359dc3eb41de.roa (raw, json)
Hash identifier:          hPxX/lMtwjLq0QapiwK2LFLfAzxyH8oiI+3F6n9pFh4=
Subject key identifier:   B0:E3:C2:FB:73:BD:C9:E0:2A:92:9C:DC:C1:10:D1:DE:1A:DB:00:A4
Certificate issuer:       /CN=464cd0d4-6da8-497c-b270-cb658d45f4e8
Certificate serial:       010D0C9F432858495ABEDDF9F28D5D12867EC230
Authority key identifier: 4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/2f308d69-5465-3883-9d00-359dc3eb41de.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     40788
IP address blocks:        24.140.240.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:dd:f9:f2:8d:5d:12:86:7e:c2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464cd0d4-6da8-497c-b270-cb658d45f4e8
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=26aa1313-0060-42c7-8d03-4d4a7ea78a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ac:6e:0c:61:76:c8:98:25:50:9f:69:81:9e:
                    c9:e8:1a:34:fd:44:c6:57:02:83:21:b3:18:bc:ae:
                    ed:3b:3c:4f:04:12:83:cb:dd:75:56:30:c5:ad:57:
                    5a:2f:34:16:b6:87:06:74:38:cc:e7:29:79:48:ec:
                    57:c6:f0:aa:e8:ea:b3:d4:c6:70:54:f0:f4:3c:52:
                    4d:6f:4b:24:02:52:81:58:9d:7d:25:a6:50:22:7b:
                    de:ca:0d:dd:ce:1a:6e:13:c0:2c:48:8c:8d:6f:43:
                    44:4a:73:f6:43:88:63:2a:9b:71:e2:d7:d9:08:b8:
                    e5:1d:d2:8e:87:8d:00:2c:f6:d6:8c:fe:52:eb:0b:
                    71:12:27:bf:be:6a:2c:06:9c:fe:08:ed:aa:3b:ea:
                    21:d9:2c:1f:1d:cf:44:96:6c:cb:e2:46:5e:b5:a9:
                    df:34:13:39:bb:be:d2:91:56:6e:cd:91:9c:55:cd:
                    76:25:9e:36:9d:8c:0b:86:bb:62:ed:a0:24:0a:62:
                    06:d2:60:f5:96:75:24:af:99:a9:20:27:b0:85:b9:
                    d7:48:f7:a5:16:4d:25:37:c9:fb:e8:a1:cf:95:75:
                    7e:ed:0c:4a:5a:71:18:68:b4:14:7c:55:bb:67:ea:
                    63:22:4e:c2:5e:10:f8:26:9c:ba:c8:61:8b:bf:65:
                    bd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E3:C2:FB:73:BD:C9:E0:2A:92:9C:DC:C1:10:D1:DE:1A:DB:00:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/2f308d69-5465-3883-9d00-359dc3eb41de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.crl

            X509v3 Authority Key Identifier:
                keyid:4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.140.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:e6:10:a5:af:8a:d2:02:08:43:8d:13:a2:b8:8a:02:39:92:
         eb:e2:02:b8:a9:5b:23:40:c1:b0:75:b9:ca:a4:c6:e7:06:20:
         2b:6a:45:0b:a3:a9:6c:bc:16:16:b8:06:f8:6f:a4:bc:58:8f:
         2b:a5:39:e8:9d:2f:80:eb:bb:36:74:f1:29:74:35:d9:94:e3:
         f5:bc:14:91:4e:32:15:5a:6d:1a:68:03:33:56:f4:db:03:43:
         54:c2:70:e2:37:b7:29:69:c0:c3:3c:0d:05:d3:a6:64:c3:d3:
         5c:11:60:13:ae:eb:65:4e:a4:27:6d:7d:b9:81:34:1f:83:38:
         a2:96:56:fd:41:36:21:cb:94:1d:b1:e2:9c:26:ea:9c:ae:e2:
         75:fa:78:97:ec:3e:68:60:03:86:a8:2d:6d:68:2d:9f:f6:05:
         6b:e9:f1:64:57:05:d3:34:ac:e6:af:1d:90:12:0f:4f:f7:90:
         10:ae:95:d8:e1:8c:85:2a:46:9b:c6:53:0b:2f:fb:ff:0f:72:
         7d:ba:be:7f:10:5d:8a:e8:fa:86:fe:f2:67:71:eb:80:cd:21:
         47:79:ff:ff:49:da:16:16:96:bd:59:ee:e3:1d:ff:76:ea:2c:
         ff:7d:5d:c8:ec:c1:f6:2e:be:9e:2b:9a:ef:ac:8b:02:49:da:
         cd:a7:3b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----