Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/2b4b8ac1-a157-3e21-9fb9-18652e74ee58.roa
File:                     2b4b8ac1-a157-3e21-9fb9-18652e74ee58.roa (raw, json)
Hash identifier:          zA6ddnBTcizT2HYJQNOs1oxnpHExr2h4N4KdP2pCfrE=
Subject key identifier:   65:2F:E7:87:49:EB:54:19:11:40:5F:83:C6:89:82:81:27:09:49:2E
Certificate issuer:       /CN=411f75d5-7410-4ca6-b23e-146e3726e630
Certificate serial:       010D0C9F43285848EF6153F4762490CC6D4259C0
Authority key identifier: C9:43:90:18:2C:34:67:5A:E2:72:BB:62:46:E2:66:16:1E:4D:64:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/2b4b8ac1-a157-3e21-9fb9-18652e74ee58.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     0
IP address blocks:        206.80.238.0/24 maxlen: 24
                          2001:504:91::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:53:f4:76:24:90:cc:6d:42:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411f75d5-7410-4ca6-b23e-146e3726e630
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=106a5fae-d58b-4917-a493-f4c2daba8a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e4:81:1b:a7:1a:fd:8b:5d:c1:1b:d6:a8:4b:
                    97:61:e1:34:38:ff:2c:dc:1c:de:dc:82:67:f3:bc:
                    ca:b5:7f:c4:9c:b8:6a:9b:56:af:18:f5:44:ce:eb:
                    65:4b:2f:0d:5f:38:9d:c8:9f:97:35:1f:d2:0c:cd:
                    44:db:12:f9:ec:44:ce:4e:bc:34:6d:50:80:a3:21:
                    a0:38:d0:79:88:df:eb:3d:bf:c7:2d:81:1e:14:91:
                    73:52:94:a4:1d:70:73:d6:3b:92:e0:0a:f1:9b:be:
                    6f:d0:5a:2a:06:31:40:53:4c:36:66:82:5b:50:83:
                    76:8b:93:4c:e7:f0:d8:91:40:36:21:64:65:fc:55:
                    e3:ff:81:f3:d0:54:df:7c:81:08:c1:d9:b0:c5:65:
                    a3:28:f5:7f:8d:00:f3:2f:40:7e:6e:7d:dd:85:10:
                    82:6b:5f:21:31:8e:11:f7:76:ff:d4:d8:a5:24:01:
                    74:4e:47:7b:1c:a8:b2:7c:59:81:a6:97:a6:e0:f4:
                    1a:54:2e:da:09:1d:47:d7:ae:26:8d:f4:8f:9d:88:
                    12:c6:72:30:9c:6d:0f:a2:30:9a:2a:03:fe:6f:48:
                    96:b8:c0:29:e4:7e:8a:a6:80:30:96:86:e9:f8:33:
                    7a:6b:91:d1:0e:93:10:98:7c:f2:20:3b:0a:67:a8:
                    c6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2F:E7:87:49:EB:54:19:11:40:5F:83:C6:89:82:81:27:09:49:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/2b4b8ac1-a157-3e21-9fb9-18652e74ee58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/411f75d5-7410-4ca6-b23e-146e3726e630.crl

            X509v3 Authority Key Identifier:
                keyid:C9:43:90:18:2C:34:67:5A:E2:72:BB:62:46:E2:66:16:1E:4D:64:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.80.238.0/24
                IPv6:
                  2001:504:91::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:dc:fb:0d:3e:4f:50:cf:a6:30:d4:d0:4d:ae:bd:b5:d2:db:
         77:5d:b2:d5:a3:7a:93:65:8c:c5:f3:b2:e6:57:7d:aa:c6:3b:
         85:30:7e:ed:74:99:22:99:a5:2c:d5:70:de:4b:53:04:c4:1f:
         b2:b4:46:23:fa:f7:3d:19:16:ea:90:01:5e:af:8c:76:b1:bf:
         75:c9:31:40:fd:e8:14:a3:b6:52:ce:99:dc:42:48:16:ae:cf:
         69:da:93:12:b2:b3:49:d2:c2:04:bb:63:8a:4d:71:6b:d9:24:
         a4:f5:a0:c2:76:ac:da:31:14:d6:41:04:74:1b:2f:6c:84:2a:
         ae:80:99:d3:df:2d:aa:7f:56:ae:65:8f:a0:7e:75:4d:64:47:
         fd:02:92:7b:e8:b2:23:ef:64:70:a7:d0:df:17:d2:bf:c2:16:
         07:df:0c:cd:6b:6e:d2:8c:bd:18:af:b4:d6:fd:f9:ac:71:26:
         9e:03:d1:b9:c9:07:c7:cc:41:d5:e3:1a:4c:35:2c:61:02:4a:
         b6:c2:6b:f3:e4:1b:b2:6a:a9:28:6d:a8:ed:65:d0:f8:84:48:
         e7:07:90:7f:bb:13:8f:fa:a0:f5:d1:33:3a:06:dd:ff:b8:04:
         7a:64:64:29:45:af:06:f6:f1:7b:1e:1d:3a:42:4f:18:61:77:
         96:b1:42:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----