Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b96afb12-dd03-3517-89a7-d840fef34d12.roa
File:                     b96afb12-dd03-3517-89a7-d840fef34d12.roa (raw, json)
Hash identifier:          RS4Iw682I8CdhiAH5yn5TNb2T/2XmvFQZDrwHKcVAYs=
Subject key identifier:   84:75:55:FC:91:6E:F5:2B:73:79:61:EE:EE:16:E1:93:16:C7:2D:42
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848E86668E068A22800338FEF00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b96afb12-dd03-3517-89a7-d840fef34d12.roa
Signing time:             Mon 17 Feb 2025 02:00:38 +0000
ROA not before:           Mon 17 Feb 2025 02:00:38 +0000
ROA not after:            Sun 18 May 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        174.251.0.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:66:68:e0:68:a2:28:00:33:8f:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 17 02:00:38 2025 GMT
            Not After : May 18 01:00:38 2025 GMT
        Subject: CN=5e84f2b4-f061-4f2c-83b1-dbe373ba5547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a3:b4:c1:7d:b3:85:12:44:42:92:65:0f:a2:
                    87:03:04:a0:88:eb:69:13:ae:3c:64:f8:90:0e:67:
                    69:cf:1e:78:2e:c4:a9:1e:86:6b:93:4a:17:74:7d:
                    90:17:95:2a:f9:83:c1:a2:ca:48:83:a1:0d:69:1a:
                    e4:ba:e1:82:f0:2f:5e:38:96:6c:5b:41:00:de:72:
                    80:11:e0:6f:eb:a7:db:c1:d8:05:73:69:6d:4a:d8:
                    77:0f:cf:92:a7:b3:90:c4:e4:cc:3f:a3:c0:38:e9:
                    3b:22:c4:c4:a9:e5:b4:42:3a:d5:1d:37:62:20:fb:
                    16:80:78:f4:e3:d4:1e:1e:ec:e2:29:63:72:20:5b:
                    cf:a3:0a:07:f4:28:4a:86:f8:25:46:20:7f:d1:2f:
                    bb:92:aa:1e:fd:34:5b:88:c0:33:79:1d:f1:71:29:
                    da:21:f9:f1:1c:06:38:be:cd:51:35:55:f6:fa:cd:
                    12:32:3f:7c:d7:a7:95:99:c6:52:7f:10:0b:2f:20:
                    e2:ce:95:c8:94:3b:5c:d3:66:a0:54:1d:d3:a6:3b:
                    44:67:e0:64:57:f7:91:63:58:4e:e0:4c:5e:aa:41:
                    30:ed:79:d9:3a:0e:4d:4c:5a:09:98:a5:d3:c7:1f:
                    ea:79:fb:74:d6:45:ce:56:43:c0:61:12:f1:50:8e:
                    61:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:75:55:FC:91:6E:F5:2B:73:79:61:EE:EE:16:E1:93:16:C7:2D:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b96afb12-dd03-3517-89a7-d840fef34d12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.251.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:f8:d2:38:15:bf:eb:41:ad:d1:2d:26:35:ef:87:7f:cc:16:
         5e:35:07:2c:3b:eb:d9:1c:c3:a7:14:3b:ef:55:42:ab:03:55:
         84:70:83:9e:40:0b:17:81:a9:d1:22:7a:e4:0e:32:87:ef:05:
         67:82:84:03:3f:82:cb:df:d1:8c:72:58:5b:18:26:09:d2:16:
         3a:9e:be:aa:92:f7:1e:36:57:19:b1:a9:bf:4f:94:d4:e7:13:
         0a:02:e8:23:e7:0c:48:70:76:bb:77:5f:96:1d:8b:d2:ea:be:
         b9:6f:ca:cd:d5:26:f1:56:1f:25:8f:36:5f:f0:ab:ea:05:97:
         f5:60:38:81:45:0d:28:51:52:74:2f:28:32:f2:a6:e0:f2:82:
         81:63:db:76:0a:2d:74:24:77:b3:56:27:ae:68:b7:aa:ee:10:
         6a:e2:ee:5e:9e:36:93:3c:47:d8:35:8d:18:91:26:55:db:8b:
         7b:7d:bb:05:ca:2c:a1:84:3d:3d:18:16:81:06:26:67:c2:7e:
         97:10:d1:75:80:05:c7:a3:1d:4f:f1:24:56:9a:b8:fe:14:fa:
         8e:11:27:c7:ae:a7:41:7f:e5:86:d8:d0:1e:78:ff:52:9b:d2:
         be:fb:cc:5c:f1:ce:bf:5e:98:d6:79:83:bb:ac:2e:3b:4b:4d:
         62:18:9d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----