Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/64cb142f-487e-37d7-bb62-5877baf26f2b.roa
File:                     64cb142f-487e-37d7-bb62-5877baf26f2b.roa (raw, json)
Hash identifier:          bh8jOX3XCU/6U6VBIa7ER16MDkyjH9qJhUd/26SBhXE=
Subject key identifier:   A4:38:10:A0:8F:95:8B:E4:57:72:90:84:9E:FE:71:B9:74:52:50:E4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C24794FF2322D4DCE0D7600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/64cb142f-487e-37d7-bb62-5877baf26f2b.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     701
IP address blocks:        141.151.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:79:4f:f2:32:2d:4d:ce:0d:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=04a6e111-e7fa-4d8e-bafb-2bb32a4d1627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b2:c7:1f:f9:54:9d:37:40:e1:dc:76:0b:09:
                    55:ca:07:81:60:f2:58:ab:78:4b:26:e5:47:af:47:
                    f3:5a:95:09:ab:de:80:ee:ae:e6:8f:9c:48:92:1b:
                    ca:df:ae:6c:64:35:c8:19:de:c8:14:94:0a:93:3a:
                    f9:f8:70:7b:73:8a:98:c0:13:57:f4:36:df:6d:d6:
                    f0:6b:b3:06:35:89:60:8f:09:57:49:eb:d5:26:48:
                    c8:c2:1e:0e:bc:d4:f8:5b:b4:f5:a8:f8:35:ae:50:
                    52:5e:3d:a5:a4:c6:e7:f1:6f:77:f7:00:45:58:fd:
                    69:a9:b7:98:ee:48:f6:46:49:42:1c:c8:37:39:95:
                    f8:93:c7:b0:2b:e2:2c:49:94:a4:74:3e:6a:ba:a9:
                    a5:5b:fa:ee:7d:93:51:ff:a6:88:0f:d8:3c:f8:43:
                    be:14:f3:9a:10:1a:4f:ba:91:21:7a:94:e1:2c:95:
                    32:4c:e0:45:c6:91:91:48:d0:78:69:90:97:bb:68:
                    7a:56:a0:b9:32:6a:b3:88:2a:8a:83:37:be:77:78:
                    ac:0d:97:36:92:1d:bc:a3:8f:e4:74:01:89:40:25:
                    be:1e:f3:9f:2f:77:e5:28:b2:bf:ab:57:f2:48:0f:
                    10:8a:16:e0:40:7b:e0:b8:d3:f9:ba:dd:4b:51:4d:
                    12:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:38:10:A0:8F:95:8B:E4:57:72:90:84:9E:FE:71:B9:74:52:50:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/64cb142f-487e-37d7-bb62-5877baf26f2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.151.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:ea:49:4a:23:96:a9:88:db:56:d5:fa:b0:31:f3:b9:93:53:
         49:d7:6c:f1:09:1a:be:d8:9c:87:35:9d:df:e2:ee:64:e8:4e:
         61:3c:c4:27:9a:28:22:34:d7:7e:15:11:2d:e7:d5:9d:d9:53:
         c0:7e:4c:38:d0:60:07:f0:c9:9e:04:58:97:b1:5a:3d:98:0b:
         a7:ff:c3:ef:c0:b3:26:1b:e7:10:ae:44:3c:31:38:e4:95:81:
         11:ce:a0:87:c3:43:10:e3:65:51:4b:a7:6e:1f:67:fc:b4:34:
         8d:5c:f4:54:a5:29:51:2e:e5:28:6d:f3:d0:7e:60:b5:b8:71:
         13:8e:0a:61:9b:71:e9:c8:bf:eb:83:66:c4:4d:57:b8:e9:4f:
         db:12:53:fd:f2:df:57:23:13:44:29:6d:20:77:13:b4:54:6e:
         39:cb:30:ee:29:4f:3a:f6:c9:8a:ed:7f:d1:4b:04:9e:95:91:
         f4:7f:1a:3f:91:98:7e:93:14:32:3e:90:0d:a1:95:8c:b4:80:
         82:36:95:2e:fd:ba:36:f9:65:b6:d5:c1:0c:a0:02:b3:98:67:
         56:d0:e4:3c:39:5d:b0:a6:ad:2f:a8:43:ea:8b:a4:15:33:e8:
         0b:c9:e8:52:27:96:8c:b0:fb:2a:05:6a:08:1f:3a:7b:1c:ba:
         1d:d7:95:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----