Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af/78644dd4-2392-31eb-800f-158c88e9ce1b.roa
File:                     78644dd4-2392-31eb-800f-158c88e9ce1b.roa (raw, json)
Hash identifier:          hn1ltgV3h79UX5CgxWnH2KysiIH/MVqtn7QBRlpCrcY=
Subject key identifier:   C2:52:37:BA:85:94:4A:26:F6:27:81:BF:FF:35:EE:43:AF:87:13:16
Certificate issuer:       /CN=8d48d798-bdf8-4082-8394-a16fca0f83af
Certificate serial:       010D0C9F432858496CE4526C853F0C8E9B7035C0
Authority key identifier: 7A:C8:84:6B:36:4D:A8:05:71:69:43:FD:45:25:3B:D4:5B:F0:3C:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af/78644dd4-2392-31eb-800f-158c88e9ce1b.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     16409
IP address blocks:        204.9.92.0/22 maxlen: 24
                          2604:5e40::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:52:6c:85:3f:0c:8e:9b:70:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d48d798-bdf8-4082-8394-a16fca0f83af
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=2e15e266-030b-4bda-b877-87071ff6d54c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6f:d2:92:29:33:ba:49:ba:09:6e:42:57:37:
                    d8:1c:2f:e9:00:8c:03:05:ce:a3:d9:18:ae:95:e5:
                    ef:3f:9c:47:1a:98:d5:1d:80:ba:86:b1:a5:b3:7d:
                    cc:fc:e8:15:d2:6a:3c:a9:37:02:2e:6f:33:d7:a8:
                    ba:84:d6:35:eb:d6:d7:a1:64:7f:7b:56:cf:68:9e:
                    27:b0:cf:1b:02:7b:9e:fb:25:e1:1f:6e:33:18:29:
                    e4:89:ef:dc:37:50:3d:02:6f:b8:f6:68:7a:13:f0:
                    d2:8a:7d:d5:7a:41:83:50:1c:b2:67:ce:28:74:55:
                    ff:6d:f4:6a:1b:94:89:20:9f:4d:b5:a9:75:81:a9:
                    87:4d:6b:51:ce:1c:94:03:00:5d:2c:3e:15:87:e7:
                    11:c5:c3:cd:46:35:73:b3:51:96:1b:da:29:64:ff:
                    69:23:47:1f:27:d2:93:e2:6c:00:90:9c:02:12:e2:
                    0a:9e:53:c4:d8:16:a4:cf:d7:36:81:8b:89:ba:1c:
                    5f:d5:a2:6c:81:4d:e4:df:4f:99:f2:d9:f2:bd:56:
                    31:f4:98:c2:51:79:7d:79:07:84:77:ce:41:0f:db:
                    62:f2:85:3b:d3:87:9f:69:f0:07:5b:c8:28:cc:e1:
                    e8:a3:78:e1:d9:5b:54:a5:4e:03:ad:bf:8a:59:f3:
                    4b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:52:37:BA:85:94:4A:26:F6:27:81:BF:FF:35:EE:43:AF:87:13:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af/78644dd4-2392-31eb-800f-158c88e9ce1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af/8d48d798-bdf8-4082-8394-a16fca0f83af.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C8:84:6B:36:4D:A8:05:71:69:43:FD:45:25:3B:D4:5B:F0:3C:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.9.92.0/22
                IPv6:
                  2604:5e40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:1c:fd:c5:80:b6:55:13:a5:55:8f:01:e0:eb:8a:ec:4d:c0:
         da:64:80:f8:9d:77:c6:8c:0d:24:63:76:7a:a1:9a:8e:35:ab:
         ce:b4:77:fd:14:91:29:0f:27:08:59:a3:53:08:24:92:4f:1a:
         c9:67:5f:e2:fa:49:96:89:e0:ad:11:88:e0:5e:4e:5b:7c:b7:
         7f:0e:b8:df:02:a7:4e:38:92:33:4b:d6:59:05:83:73:4f:1f:
         39:e0:f4:e9:bf:a1:7b:ee:ed:37:5d:26:87:98:c2:6a:d5:00:
         8e:ff:cf:11:cb:03:08:a2:99:cf:d8:10:95:c3:cd:e7:60:b7:
         8f:91:f6:8b:4e:4d:60:fc:94:87:b3:7f:a8:39:c6:89:db:2a:
         3d:c5:5c:b9:f9:15:9b:1d:11:4d:f8:7f:2f:ce:ef:ec:d9:e8:
         8c:9a:fd:59:ed:e9:e7:6e:56:d5:f3:f7:bc:28:2a:ba:be:1f:
         51:10:b1:89:02:2c:cc:d8:45:d3:d0:78:07:95:b3:db:d9:a9:
         d9:68:64:c1:c7:6f:b3:50:70:b2:1a:5f:4b:7f:92:3f:10:39:
         31:7e:4b:6c:db:7f:f9:22:7c:fc:b5:17:23:69:b0:0a:46:2c:
         cd:0a:94:6d:05:99:48:e2:29:d7:f2:59:49:82:0a:01:6b:f5:
         9e:09:a1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----