Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/92c58ad9-9f3c-36c9-8865-94378aaf1508.roa
File:                     92c58ad9-9f3c-36c9-8865-94378aaf1508.roa (raw, json)
Hash identifier:          Zd6Av/luOjE1k5hGe+tNfvL0uioVhCArV5ui60mmQLg=
Subject key identifier:   38:2A:39:D2:D2:F2:D1:53:2F:F8:85:69:D9:30:29:0A:77:1C:AD:99
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849218438B6A31415CA97129F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/92c58ad9-9f3c-36c9-8865-94378aaf1508.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     22394
IP address blocks:        2001:4888:a601::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:38:b6:a3:14:15:ca:97:12:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=a380eac4-4274-470a-9f89-1db4fcc2f216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:de:84:f7:0d:34:9c:be:ee:d5:f4:63:6b:94:
                    ff:b1:47:e0:a5:2d:1d:35:5c:00:77:e2:c5:ba:cd:
                    d5:18:58:70:4d:58:dd:5c:b8:83:c0:8e:c3:a6:14:
                    68:7c:f2:84:55:60:33:e9:68:93:07:b2:86:0b:13:
                    f3:d3:1c:cf:e4:bd:62:6d:3a:66:30:47:68:81:1e:
                    d6:16:df:77:af:c2:ea:c6:f0:9a:ab:94:bb:f6:e0:
                    19:21:88:24:e4:13:bc:1e:e3:35:60:f7:94:cb:ce:
                    21:17:9d:c1:e7:21:78:0b:8f:fc:c4:cb:8b:24:b5:
                    9d:5e:2e:e5:36:90:cd:3e:9c:22:bc:c8:06:78:af:
                    69:e7:d1:d8:4a:b3:ec:7f:52:d8:e7:41:12:23:c0:
                    d1:4a:e3:07:38:71:ab:83:20:96:9e:8e:e1:80:0b:
                    cc:4e:24:29:ae:1c:f3:a7:3f:93:bc:89:ed:33:37:
                    a5:af:53:4a:25:6c:7e:79:52:50:31:28:66:05:bf:
                    d8:aa:e5:fd:e3:01:fe:de:fe:fa:6d:63:9e:58:70:
                    0f:09:5c:fd:68:70:83:1d:5f:db:08:65:6b:a9:61:
                    16:ee:90:cd:b5:76:f9:16:88:15:68:75:f7:78:0e:
                    e4:53:7e:10:f5:f6:26:ff:c4:7b:26:b8:7e:87:65:
                    c0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2A:39:D2:D2:F2:D1:53:2F:F8:85:69:D9:30:29:0A:77:1C:AD:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/92c58ad9-9f3c-36c9-8865-94378aaf1508.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:a601::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:a6:fe:9a:a2:28:4d:a1:4a:44:60:3c:ad:f3:2a:09:3a:90:
         22:72:80:27:77:52:41:08:bc:0e:17:89:e1:58:07:1b:73:26:
         4a:37:65:42:37:f7:bb:36:bc:43:ff:4c:8e:12:17:10:08:f9:
         9b:fd:02:1c:60:c9:05:22:f7:02:f8:06:5c:14:cd:f9:0c:ac:
         d4:2f:9b:1f:c9:1c:39:ad:ad:e5:ba:82:55:d0:27:42:74:fb:
         19:08:24:a4:4b:82:61:a7:05:ca:60:86:d4:c4:14:a2:6f:bd:
         7c:c1:9f:cf:e1:ae:79:3b:29:e2:ea:66:4f:7d:83:0a:41:f5:
         80:ae:b8:8d:aa:79:e8:1a:cb:c1:0e:70:77:65:f9:a6:a3:3f:
         c1:40:75:3b:fc:32:3d:e2:5e:18:72:2f:6c:8e:34:ee:ea:39:
         8b:fe:72:d1:26:9d:d0:a9:e8:9b:55:ec:3c:4d:cd:67:b7:9d:
         b0:33:d7:35:fe:4a:ea:d6:92:65:32:69:29:98:d8:20:d2:ee:
         e5:b9:ce:72:ba:0b:00:8d:77:33:56:6f:ce:4a:b8:a2:d8:85:
         5f:17:2f:8e:67:65:fb:26:ac:98:ff:f7:42:ca:d3:0c:84:be:
         62:e2:33:db:26:f9:9d:18:cc:21:b6:0f:24:7d:6e:31:e9:05:
         9f:cc:cb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----