Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1e9a1734-b5da-39df-a786-befd67f76d5c.roa
File:                     1e9a1734-b5da-39df-a786-befd67f76d5c.roa (raw, json)
Hash identifier:          VG8xNCiRxjs+2Xohrw92EBKYcgbAjpeRzTl6FWAhl18=
Subject key identifier:   44:31:AF:9F:45:ED:FE:CD:4C:FD:DD:79:14:BC:F9:23:44:74:51:D2
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285849806F1534A580F54BFEFEE100
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1e9a1734-b5da-39df-a786-befd67f76d5c.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     174
IP address blocks:        67.159.31.0/24 maxlen: 24
                          67.159.63.0/24 maxlen: 24
                          2001:49f0:d119::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:15:34:a5:80:f5:4b:fe:fe:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=e670d87b-e74c-4948-bfe0-18ce76561298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ba:c3:d8:0a:fb:b1:ed:bc:31:43:17:64:62:
                    e0:cc:05:a0:64:e6:6d:40:64:e0:59:d3:d4:8a:04:
                    08:a2:a0:80:e7:30:64:03:31:19:df:65:92:96:23:
                    2f:80:60:43:3f:23:7c:ef:a6:58:88:63:7a:63:d9:
                    05:84:b1:20:21:89:ff:aa:0a:8b:87:0c:bd:5b:f1:
                    68:73:e0:50:3b:ec:f7:2d:c8:8b:64:4d:c9:03:33:
                    f7:24:12:e3:6f:43:31:38:f5:48:2e:d6:97:96:bc:
                    42:fd:cd:6d:2c:48:52:da:8d:4b:c2:34:f0:5c:9b:
                    60:63:7c:f8:9b:b2:f7:c3:be:99:12:a3:f1:9a:af:
                    ee:27:51:d8:a5:37:27:ad:50:64:cf:b6:fb:cb:8c:
                    01:98:df:51:c5:c7:b1:a6:60:92:50:5f:ad:c2:0d:
                    3a:c0:7a:11:a3:da:8d:3b:de:48:67:e7:94:a8:55:
                    d3:36:d6:8b:bc:55:1d:f9:b6:8a:ee:83:e3:a1:a2:
                    e4:e4:b1:45:23:aa:6f:ba:5d:d2:5a:56:c3:9f:dd:
                    d7:24:e1:c2:5e:9b:7e:eb:5a:f1:b8:e4:bc:e8:64:
                    52:87:09:89:06:bd:c6:3d:db:87:4f:01:ee:61:ce:
                    68:e4:b6:bd:82:2b:12:30:06:e9:46:d3:dc:fa:ec:
                    b8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:31:AF:9F:45:ED:FE:CD:4C:FD:DD:79:14:BC:F9:23:44:74:51:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1e9a1734-b5da-39df-a786-befd67f76d5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.31.0/24
                  67.159.63.0/24
                IPv6:
                  2001:49f0:d119::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:c9:57:3c:5e:94:ca:ca:ca:7b:7c:c1:e2:12:a8:19:d8:2a:
         99:cf:ff:0c:d0:d9:9b:e8:1c:89:9e:58:67:b0:f7:cf:37:d4:
         3d:bd:a5:a0:1b:81:75:98:84:97:47:7f:f2:c3:1c:80:76:ae:
         04:52:18:c5:f3:a4:36:a5:8d:ac:7c:bf:7c:5c:84:d6:33:af:
         2b:7b:4a:b5:ec:15:98:ee:dc:9d:a6:0d:a4:48:a1:10:07:c4:
         99:97:0f:2d:4b:ff:b7:95:1c:0c:5e:07:3a:0d:74:c1:63:ff:
         53:a0:65:22:58:0c:e2:e4:e6:fa:9e:2e:b6:2d:62:6c:8c:5f:
         90:75:0f:92:9f:01:b4:44:62:92:b8:3a:b6:7d:68:7b:f2:10:
         21:bb:cd:be:66:02:72:34:74:ac:fe:64:7a:60:1d:0d:c1:73:
         dd:d8:6d:04:16:84:5d:d9:91:f1:ab:45:25:d2:c8:a0:b5:d8:
         08:b8:02:24:3c:c5:5e:d6:2b:b4:37:8d:c5:99:55:53:29:48:
         fb:2b:2e:f7:bb:e8:4e:fc:33:43:7e:e5:4f:9e:36:16:8b:9a:
         bd:76:3d:ff:92:51:02:66:d5:aa:b5:83:71:6b:52:c5:0f:fb:
         93:d6:0d:89:91:89:9f:d8:11:f2:aa:dc:9a:9d:1c:f8:52:b3:
         0b:f7:4b:9b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----