Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bbbcc06-2232-37d2-bdd4-b688153df820.roa
File:                     4bbbcc06-2232-37d2-bdd4-b688153df820.roa (raw, json)
Hash identifier:          hdNv6UKqH9DRuKLBldtbl8NPv8TNfhcBrTDaFvde9Bw=
Subject key identifier:   B2:F1:B8:01:4B:73:DC:A3:5A:D6:04:54:AD:2C:23:F9:4D:1A:5F:70
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C244FA7283735713B6A4760
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bbbcc06-2232-37d2-bdd4-b688153df820.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     701
IP address blocks:        207.68.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:4f:a7:28:37:35:71:3b:6a:47:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=c679a3a8-5e1d-4008-856c-8300b2393a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0b:d4:2d:d3:fb:73:f7:0a:75:71:7d:75:b8:
                    b7:ac:4e:93:2f:ce:47:e4:6c:21:7c:7f:74:8b:b2:
                    1b:a7:75:3e:15:e2:b4:63:b5:bf:c7:62:15:bf:37:
                    eb:07:07:1d:4e:a2:dd:ee:4f:f1:ce:0c:c1:f5:c5:
                    e5:21:91:ab:80:8a:db:d6:55:bf:cf:8b:0d:83:a1:
                    3d:c3:5e:65:0a:b4:d4:6e:ef:6a:bc:1d:ff:f6:6e:
                    31:0e:b4:e2:b5:ea:1c:a7:c9:4d:7c:05:53:4c:4e:
                    54:96:c9:69:60:2b:81:53:22:4d:31:6f:e5:bd:12:
                    69:c3:8a:3a:28:ff:9b:67:bb:7d:01:e2:cd:7a:03:
                    e8:9c:91:2c:85:95:0a:de:8b:48:4f:48:0b:28:c9:
                    ff:b6:bf:1a:24:1a:12:b8:23:3f:83:e5:9d:3d:9b:
                    74:7f:90:c9:6c:e8:30:73:8f:07:8a:d0:71:f1:ff:
                    99:e4:54:43:3b:cf:88:7a:88:b5:95:26:09:7b:f2:
                    e4:c7:85:b4:4f:1a:b1:68:35:8b:65:c8:30:5e:05:
                    09:cf:9e:dc:ab:67:0b:d6:3d:86:a1:f0:f2:5e:5e:
                    85:9a:9d:d5:d6:b7:b0:f6:b2:fc:9e:52:d2:0e:ef:
                    85:5d:38:16:36:66:7f:8c:c0:de:9a:d3:6e:0f:1e:
                    dd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F1:B8:01:4B:73:DC:A3:5A:D6:04:54:AD:2C:23:F9:4D:1A:5F:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bbbcc06-2232-37d2-bdd4-b688153df820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.68.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:75:39:48:51:a4:6e:82:ca:95:50:94:cf:61:db:f7:61:58:
         00:e6:56:4d:8f:87:b6:96:89:11:0b:fd:90:81:99:3e:ac:d8:
         e0:8c:e1:89:47:79:ca:b6:27:57:fc:3f:46:67:1b:44:60:a9:
         d1:70:e0:24:1b:35:73:1c:c3:8d:a7:bb:1f:21:77:ba:c4:9f:
         a7:f7:e5:27:bb:1f:97:5e:9a:3f:3f:7b:56:f6:81:b9:0f:aa:
         bb:8a:db:d6:1a:4d:1e:5c:26:38:e3:db:1a:2b:9c:a3:1f:64:
         1b:9b:d5:50:89:ef:21:03:b6:de:9d:af:9c:92:e8:1d:ff:ff:
         58:05:f2:94:1e:a0:0e:d9:ff:12:f5:d4:5d:e1:0c:99:36:de:
         e5:b4:37:a0:7b:cf:3c:ab:2e:60:28:89:f9:92:fa:68:d4:f9:
         18:9b:33:b1:e7:c6:14:c8:d2:6d:9f:34:56:9b:e8:71:bd:60:
         f1:b8:96:ae:36:86:33:2f:6a:7c:3b:5d:99:49:20:55:18:2e:
         49:5f:44:be:1f:9d:2b:ab:f6:6f:15:f9:bc:bf:d1:5e:16:a8:
         45:75:2d:b8:6f:e9:ac:da:3b:17:5f:3b:f8:16:b7:47:86:26:
         db:18:dd:b6:a2:65:2a:bc:2e:6f:1d:ae:32:fb:fe:0a:8e:66:
         66:7a:27:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----