Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/caf18db1-e4ab-3ee8-854d-4510a15e565a.roa
File:                     caf18db1-e4ab-3ee8-854d-4510a15e565a.roa (raw, json)
Hash identifier:          X1oiKtwbUbnVyRC2B0VoUvyj/BtoLzGdtetoNxgnlQ8=
Subject key identifier:   18:1B:81:84:3D:4D:98:24:4C:A8:4A:14:35:6B:19:FB:B1:9D:4C:22
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584693F0134A5B008F461AB31500
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/caf18db1-e4ab-3ee8-854d-4510a15e565a.roa
Signing time:             Wed 17 Jul 2024 12:00:00 +0000
ROA not before:           Wed 17 Jul 2024 12:00:00 +0000
ROA not after:            Fri 21 Aug 2026 04:00:00 +0000
asID:                     36692
IP address blocks:        67.215.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:93:f0:13:4a:5b:00:8f:46:1a:b3:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Jul 17 12:00:00 2024 GMT
            Not After : Aug 21 04:00:00 2026 GMT
        Subject: CN=edc5664b-1e58-4c07-a95a-65271f8e7e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:88:b9:34:a6:c1:8d:6f:ec:93:a8:fb:3e:b9:
                    6d:2c:ed:85:57:ec:59:04:c4:b6:6a:6d:f4:68:e0:
                    f9:a3:bc:15:fe:10:43:8b:0d:48:41:18:a8:b2:b2:
                    38:78:ee:84:db:3e:e2:f2:c5:7c:e7:b6:f2:c9:e9:
                    4b:74:48:f4:36:72:d6:7f:3e:62:71:93:53:d5:69:
                    f7:54:5e:0c:c1:54:39:9a:63:aa:79:06:bd:3b:cb:
                    d9:1e:10:52:89:b8:6c:2a:34:ce:dd:8c:35:ea:26:
                    93:24:70:ac:dc:18:2d:d1:b1:cd:35:a0:f6:c4:f8:
                    c9:67:b4:48:84:e1:c4:58:9d:db:f5:93:37:9a:f3:
                    d5:6a:52:f3:e1:6e:86:f1:84:bb:25:bc:c5:04:2b:
                    8d:d9:d6:a0:f2:cb:84:30:49:30:8d:f3:7b:ff:a0:
                    c3:2e:b7:fa:db:32:ff:03:88:39:8e:14:fb:db:4b:
                    6d:75:a1:b9:48:bf:fc:85:45:5f:8d:75:10:51:42:
                    da:b7:74:1d:3c:a8:4b:8d:fd:fa:6e:5d:4c:4b:46:
                    27:e4:a4:2b:12:67:c8:9e:2d:28:b1:41:ca:17:1e:
                    a9:a3:f6:9b:87:55:0b:ad:8e:ec:5a:3e:fb:f8:00:
                    f7:52:aa:66:ba:ca:80:1c:53:52:f2:8e:cf:1e:43:
                    73:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1B:81:84:3D:4D:98:24:4C:A8:4A:14:35:6B:19:FB:B1:9D:4C:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/caf18db1-e4ab-3ee8-854d-4510a15e565a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:55:b2:41:b2:15:95:ff:56:90:2d:f7:aa:e4:f5:31:e2:cb:
         55:d4:3b:e4:d0:c3:b3:52:05:7e:dc:0b:53:2f:ef:dd:06:b1:
         96:1f:ca:bb:26:9c:e9:a5:19:cc:e7:e1:22:6b:5a:ed:f6:4a:
         ba:72:b2:4d:ef:f9:1a:23:97:d8:57:e3:77:b4:20:bf:ec:93:
         2a:c5:7d:57:c9:95:8e:f7:6a:18:da:6a:55:bd:32:3a:dc:a3:
         94:14:45:fa:1a:00:ae:c4:2e:59:04:02:e1:a4:10:ac:b8:88:
         ff:4c:fd:75:bb:a5:45:04:c0:f2:34:fd:f0:95:63:5b:f4:32:
         59:94:ff:47:f1:cf:20:0d:3f:d0:53:ef:4f:e1:d2:9a:e5:39:
         b5:80:67:66:97:af:70:36:4f:45:a0:65:5d:46:95:b0:a9:6b:
         68:96:86:a1:16:6d:e1:d9:a1:8c:6d:bc:1b:d1:fa:7b:79:9e:
         16:51:4d:ff:99:7d:02:f5:0e:fe:15:06:09:f3:9b:59:2d:a0:
         4a:9d:df:65:b0:d1:10:a3:ac:30:5a:fb:44:eb:8f:48:11:e3:
         b8:b5:f8:38:4e:04:56:7b:b0:2d:95:aa:33:42:c0:7e:f5:a3:
         46:02:3f:a1:97:35:05:de:16:5a:41:3e:ef:de:bd:da:3a:c3:
         e4:98:a6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----