Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/60a02ca3-def9-373c-9cab-e414a3744c3a.roa
File:                     60a02ca3-def9-373c-9cab-e414a3744c3a.roa (raw, json)
Hash identifier:          NWoE7j+dRz1rcWKXzoGRBeFnt7xVUgoq5+zV1qd/oJA=
Subject key identifier:   BF:93:8F:B1:F3:4D:DD:59:F9:DE:81:2B:10:08:EE:2E:DA:78:5C:A1
Certificate issuer:       /CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
Certificate serial:       010D0C9F432858493A8A2609CFC52DBBFD128600
Authority key identifier: 62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/60a02ca3-def9-373c-9cab-e414a3744c3a.roa
Signing time:             Tue 18 Mar 2025 12:09:04 +0000
ROA not before:           Tue 18 Mar 2025 12:09:04 +0000
ROA not after:            Mon 16 Jun 2025 12:09:04 +0000
asID:                     29789
IP address blocks:        64.210.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3a:8a:26:09:cf:c5:2d:bb:fd:12:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
        Validity
            Not Before: Mar 18 12:09:04 2025 GMT
            Not After : Jun 16 12:09:04 2025 GMT
        Subject: CN=768e868f-6965-451d-b156-2e7d09253104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e9:22:a4:72:89:a2:f5:a5:14:ef:6f:94:aa:
                    95:3d:e9:b0:15:bd:7f:58:d7:70:69:18:2e:d0:b0:
                    a4:d8:77:ab:6d:a5:61:86:1b:81:d6:44:78:3c:8d:
                    cf:1e:21:da:e6:0a:c9:f8:f1:0e:84:ab:4e:ed:f0:
                    ab:55:5d:a0:d1:68:73:51:aa:66:59:76:ef:ac:fe:
                    43:a9:84:04:d1:b8:28:05:9b:c5:af:9e:c1:c1:dd:
                    6a:ba:d8:8d:e7:e7:17:7f:15:ce:74:06:c9:03:d2:
                    ba:a1:cc:de:47:a0:32:d4:af:1d:00:b4:5c:3e:42:
                    1b:9d:52:20:43:57:eb:28:ee:3a:4b:2a:03:cf:e2:
                    66:22:d0:66:a5:15:39:0c:16:a1:cd:cc:8b:40:7a:
                    fe:af:65:e3:ca:d2:c3:d4:84:a1:f4:17:4b:cf:3a:
                    c1:26:05:76:1b:53:03:f3:bd:e3:aa:1d:06:df:e1:
                    15:d8:23:fa:f5:1b:d2:0d:4e:dc:9d:0c:cf:25:57:
                    35:46:32:54:cc:e9:7f:4d:0d:88:ae:b7:92:23:e9:
                    fa:c5:3d:81:67:8b:28:3e:c8:f9:ec:63:02:84:22:
                    12:b9:62:18:47:3c:d3:27:15:71:7a:85:54:8f:6b:
                    b1:e0:a6:c5:77:f4:29:76:9c:ab:d0:bc:2b:5b:94:
                    06:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:93:8F:B1:F3:4D:DD:59:F9:DE:81:2B:10:08:EE:2E:DA:78:5C:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/60a02ca3-def9-373c-9cab-e414a3744c3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl

            X509v3 Authority Key Identifier:
                keyid:62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.210.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:03:4f:6d:50:7b:8b:d0:4b:b1:3a:45:f9:0d:fc:34:9b:84:
         98:e4:2d:a1:e5:45:dd:43:a5:8c:5f:5f:fd:14:b8:2f:8b:1e:
         b6:33:96:48:c0:b5:d3:fe:92:91:c2:2c:74:0f:0b:e1:29:1d:
         a2:39:e0:c3:92:3f:d5:62:f2:da:7a:7e:2d:33:d7:25:15:e5:
         0a:9e:b4:ac:87:3f:63:77:e5:94:70:cf:9e:ac:b0:b6:ae:e2:
         ba:7c:5b:99:3a:37:bb:f2:61:67:0c:a5:f9:0a:5b:2b:54:44:
         be:ab:2f:11:e0:62:f9:e5:7e:66:b2:f8:fa:bb:75:fe:74:58:
         28:5e:b4:00:e5:cd:a1:e1:f7:29:71:ea:e4:39:b0:6d:17:20:
         8f:8e:a5:4b:f1:6a:88:d3:4f:e4:c6:c3:ab:16:f9:3f:6c:56:
         d6:30:38:4f:f4:ea:68:50:81:78:f2:4a:55:48:49:7a:a6:35:
         3c:86:6d:74:21:2b:8e:81:96:04:d4:c8:fa:49:d8:28:c6:ad:
         28:c2:72:f0:6c:06:7c:67:77:9c:a6:7b:f8:c6:7f:d8:0e:b1:
         f4:1f:74:9a:d8:39:a7:34:a9:1e:98:ad:53:5a:cb:b1:fc:53:
         67:ca:a6:fe:36:82:1c:cb:30:d4:14:2b:33:39:d4:9f:c9:66:
         68:b8:e6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----