Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7ac32ada-1ff5-3c70-8375-2fd90f6f2402.roa
File:                     7ac32ada-1ff5-3c70-8375-2fd90f6f2402.roa (raw, json)
Hash identifier:          owZwCyA4vOAZOO50we3I1krNcPkKH8S4ahKTsEixtQ0=
Subject key identifier:   D9:CB:12:5F:9D:AB:1C:26:BC:F2:00:6B:D9:9B:97:37:6D:F9:27:41
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285849780F13AEB48A47A288BBD260
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7ac32ada-1ff5-3c70-8375-2fd90f6f2402.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     174
IP address blocks:        2001:49f0:d009::/48 maxlen: 48
                          2001:49f0:d014::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:13:ae:b4:8a:47:a2:88:bb:d2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=87dfce68-ba9b-4fa7-b890-b7fa0ee38edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3c:fc:fd:29:22:1a:e6:aa:04:c5:a6:0f:23:
                    bc:0a:40:e8:88:ee:54:89:45:fe:19:e4:fc:96:3a:
                    bb:e5:27:f2:6d:be:29:aa:59:02:97:40:d5:f8:f3:
                    63:ef:28:e2:ba:c0:57:cf:9b:a6:8c:39:0b:14:8f:
                    e6:83:dd:e3:9e:28:0d:78:76:51:40:67:0f:0a:cc:
                    49:fe:34:ee:58:b8:87:2f:bc:31:80:a3:70:0c:aa:
                    8c:3c:6d:94:cf:5a:6d:c3:7b:b8:e9:9c:f2:fa:14:
                    8f:d3:d3:01:3d:08:b6:7f:ef:40:f0:cd:ba:d0:24:
                    2c:6b:b9:42:ee:c8:1e:43:0c:de:6f:9d:07:41:0f:
                    8c:57:43:58:3d:b3:0d:1b:83:46:9e:05:77:17:a1:
                    e4:08:c9:cb:0d:2d:1b:d2:4d:70:4b:f9:05:72:ad:
                    aa:2b:69:d2:4c:c1:39:f5:c5:61:61:ad:0f:ee:65:
                    59:34:a8:f6:17:46:66:f2:b7:f3:5a:57:3f:d7:0e:
                    b0:61:ef:14:1c:1a:ff:c7:0d:cb:fc:c3:a4:5b:a2:
                    05:ca:fd:be:1d:0d:fc:38:1e:a8:51:e1:d4:17:77:
                    3d:a3:7e:92:45:d3:2e:4f:72:8d:7d:2a:4d:72:8d:
                    69:b3:f7:ae:25:32:87:d5:9c:30:b1:d2:50:d6:81:
                    99:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CB:12:5F:9D:AB:1C:26:BC:F2:00:6B:D9:9B:97:37:6D:F9:27:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7ac32ada-1ff5-3c70-8375-2fd90f6f2402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f0:d009::/48
                  2001:49f0:d014::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:5f:36:5b:5c:28:9a:78:7a:f0:a7:8f:b6:09:fd:7d:e4:33:
         03:8e:fa:b5:ba:4b:3e:7e:0b:ed:e2:11:6b:60:c7:3e:dc:d1:
         79:a4:df:3d:ee:a9:ce:7d:d2:6a:6b:4d:a6:ef:37:51:11:1e:
         69:1b:c0:2c:21:c6:5f:2e:4e:4e:c2:b8:20:c1:94:99:0a:b8:
         4c:1f:71:84:75:d1:e8:f7:81:ea:0b:c6:0a:40:42:a1:e2:a4:
         ee:f5:a6:74:0f:c0:c6:ae:b3:11:df:36:69:9d:80:90:26:8f:
         43:42:17:ba:5f:f3:32:1a:e1:41:57:78:9f:da:fc:46:ef:93:
         4b:c3:63:aa:68:ee:72:bf:26:b9:35:a9:70:57:87:bf:e6:2b:
         c2:40:c6:30:e6:5b:d9:75:10:8e:f6:fa:6b:fa:83:8e:05:45:
         f3:eb:9b:3b:16:8e:42:a1:ec:f3:d0:de:ba:97:44:23:aa:e3:
         cc:92:b7:93:83:1d:2d:85:84:52:23:fc:af:60:d5:4e:51:d5:
         33:17:93:ad:52:5c:16:90:b0:69:35:cb:2b:40:46:07:27:df:
         eb:52:6b:e4:05:25:eb:3b:33:0f:01:e2:95:ff:8b:86:55:04:
         6d:51:1c:86:41:7f:53:48:e5:4a:bd:a7:bd:e8:22:44:1c:d1:
         08:b1:0f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----