Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/270c20ad-cd59-3777-bddc-417ba653a064.roa
File:                     270c20ad-cd59-3777-bddc-417ba653a064.roa (raw, json)
Hash identifier:          /oW4VQ8tF3ZG9wq4Em84h62Uh2uXal23RSPBcdwQIH0=
Subject key identifier:   56:AB:76:D2:C4:DB:8B:74:F7:B8:76:82:2F:FB:79:ED:B4:37:6A:D8
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F43285848EF61569F8DAE2EBB44A60300
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/270c20ad-cd59-3777-bddc-417ba653a064.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     19197
IP address blocks:        69.41.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:56:9f:8d:ae:2e:bb:44:a6:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=ebcdf9ea-ffd8-4935-bcc0-ee6728c97da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:04:d5:18:94:ec:dd:bb:6d:c6:07:3e:0f:46:
                    4d:9e:a3:eb:8d:74:06:dc:54:e0:c5:82:d1:27:3c:
                    e3:38:46:ae:ed:23:da:94:e8:be:a8:60:81:09:b9:
                    40:b2:43:0a:dc:8d:62:bf:68:ea:7d:26:a1:5a:b0:
                    33:17:6b:13:ce:61:bc:cf:00:6b:be:ac:13:51:9e:
                    ae:4b:e6:7d:ef:41:d1:7d:19:97:03:80:36:2a:b7:
                    02:d6:36:ee:92:a9:68:33:c4:90:bf:0b:13:93:d2:
                    a0:50:76:dc:47:7a:ad:1b:c5:e4:40:8a:93:64:c0:
                    f0:92:7f:c7:47:60:11:c5:18:66:61:5f:67:f6:58:
                    a0:e5:90:af:43:0e:40:df:7f:f9:52:88:bf:d8:17:
                    40:49:be:4d:6b:17:8c:8f:ac:62:e7:32:e9:ed:4e:
                    98:5c:a0:d0:be:c0:c0:1d:74:59:00:d9:e9:e0:95:
                    2a:b9:a9:ef:d0:07:8a:15:aa:dc:fd:6e:fc:8b:40:
                    39:b1:92:94:52:a6:b7:21:ea:66:28:e5:ab:b8:94:
                    c0:03:4e:a5:4d:b9:29:7b:69:91:74:f1:71:9f:e0:
                    fd:96:e2:77:6e:c9:65:f6:5a:8d:68:fb:ad:6b:08:
                    10:69:89:9c:93:37:3c:91:58:ab:24:cd:6e:bc:77:
                    0e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AB:76:D2:C4:DB:8B:74:F7:B8:76:82:2F:FB:79:ED:B4:37:6A:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/270c20ad-cd59-3777-bddc-417ba653a064.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:64:2f:13:1b:ef:5c:11:e7:3b:74:84:33:a8:c7:6c:01:ce:
         f6:cf:e5:31:84:38:85:60:d3:aa:e6:ed:8b:ce:27:46:b9:b7:
         dd:05:1f:f0:74:fd:a1:c2:93:f8:c7:01:52:e4:a9:9a:92:a5:
         b9:d3:33:00:46:7c:23:43:aa:44:db:b3:cf:94:07:14:df:68:
         7c:87:bf:ac:25:7a:74:09:6b:cc:b7:6e:50:b0:9b:26:54:dc:
         b4:5c:2e:1f:95:e9:5b:00:13:c7:03:3e:29:86:21:53:4e:82:
         2e:12:59:1f:29:87:17:52:4e:fb:9c:a4:d0:21:76:a9:23:6d:
         79:5d:c1:86:95:4d:63:af:ab:ac:79:37:82:fe:5d:5a:88:0c:
         dc:fb:55:52:96:e6:38:d3:fa:7d:64:25:38:30:86:c3:90:2e:
         7b:f2:ec:8e:e6:de:b7:57:64:90:74:89:e7:a8:81:0c:35:0d:
         2d:02:b6:84:6a:da:1c:44:1e:f8:0a:7e:98:1a:85:20:2f:73:
         05:7e:b7:c2:b3:1f:52:0b:67:be:83:64:34:5e:6a:21:96:d1:
         29:38:b2:29:04:5f:c8:57:8e:c6:8f:9e:bf:a1:5e:39:ed:98:
         2f:93:98:db:5e:6f:d6:66:be:7a:2e:02:e0:ec:2a:3b:04:0a:
         44:74:c1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----