Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/cfae26b9-a6db-3080-9b05-0ab861447973.roa
File:                     cfae26b9-a6db-3080-9b05-0ab861447973.roa (raw, json)
Hash identifier:          PJmfBgUoUpEA0kCNVuxMSbsZDySEYy/WwUhYIqGCkS8=
Subject key identifier:   9C:4A:56:F7:C1:30:75:F6:EE:74:69:81:F2:AB:32:F8:CF:98:17:FA
Certificate issuer:       /CN=e979f6fc-bc29-44d7-bb62-f74ccc584c17
Certificate serial:       010D0C9F4328584950F961F950632E6EA45E0948
Authority key identifier: 87:43:29:DF:52:16:E7:B9:FA:C2:B1:BF:40:4B:1A:6C:FC:E8:23:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/cfae26b9-a6db-3080-9b05-0ab861447973.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     27552
IP address blocks:        162.219.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:61:f9:50:63:2e:6e:a4:5e:09:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e979f6fc-bc29-44d7-bb62-f74ccc584c17
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=2e084014-0064-4898-838b-c9fc445751f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a0:2a:6a:13:31:74:9c:23:d9:c7:06:94:29:
                    09:5e:33:9b:7a:b4:74:f1:76:0e:b0:9e:78:c0:07:
                    85:28:aa:92:02:09:40:30:ca:56:21:06:75:f9:f0:
                    32:fc:e3:86:6e:3d:34:62:b9:d0:fa:35:21:b5:94:
                    4c:3b:de:c8:1e:c0:24:ef:32:11:f3:97:f0:a2:f9:
                    d5:9b:a7:a6:34:8e:6e:18:f6:30:f8:02:bd:ba:43:
                    c2:72:60:16:a4:bd:2a:8e:c7:94:99:1e:e8:7f:25:
                    10:bb:6f:d4:98:e5:50:19:0f:9a:fe:c1:c8:a1:73:
                    7f:8f:87:e4:67:22:7f:c3:24:00:92:ef:c6:10:0d:
                    3b:8a:b7:9c:ab:2b:06:d1:0f:63:6c:03:95:6d:28:
                    07:c2:39:cd:24:bb:0d:6f:65:68:39:8e:f3:f2:de:
                    3e:a4:72:d7:16:21:f2:ce:8d:bf:fb:6c:3e:77:f8:
                    0b:32:bb:0e:b9:5e:2a:7a:37:ed:aa:4d:bc:54:f2:
                    59:42:37:a7:2d:a6:ae:1e:b2:27:bb:40:4b:9a:8f:
                    3b:c1:f9:da:b2:ca:b2:2c:5b:83:7b:46:e2:ea:49:
                    57:c1:00:04:21:b9:3c:1b:c0:37:43:c2:c6:1c:d5:
                    a8:e8:27:fd:f1:11:d1:05:04:54:a5:02:d5:93:dd:
                    58:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4A:56:F7:C1:30:75:F6:EE:74:69:81:F2:AB:32:F8:CF:98:17:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/cfae26b9-a6db-3080-9b05-0ab861447973.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/e979f6fc-bc29-44d7-bb62-f74ccc584c17.crl

            X509v3 Authority Key Identifier:
                keyid:87:43:29:DF:52:16:E7:B9:FA:C2:B1:BF:40:4B:1A:6C:FC:E8:23:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:fa:ba:b9:56:b3:b4:31:41:85:4e:8f:ef:b7:6f:d7:52:ad:
         19:a2:16:5b:6d:ae:46:cc:19:ba:df:6d:e6:73:ef:0d:dc:a3:
         8c:94:0b:75:55:48:43:9f:ed:ce:14:17:0a:18:f8:08:b2:3a:
         0f:ad:d4:8c:6f:6d:12:30:aa:d7:bc:f4:ad:7a:44:b8:f4:8d:
         64:67:de:63:2f:57:8d:e7:02:e0:ab:20:c7:cf:5a:83:c9:a8:
         f8:a0:6e:08:eb:d6:24:de:7e:5e:f7:08:dc:be:7a:07:4c:59:
         a0:18:eb:2f:ff:28:13:3f:b0:94:ac:14:73:45:80:e4:af:06:
         d0:98:6d:4f:5b:2a:cd:6c:f9:a7:a5:47:df:0d:46:35:39:9f:
         ec:79:f1:78:b0:90:4e:8c:72:9b:8c:d1:d0:8c:e4:f2:b7:9c:
         47:3c:e8:68:58:29:0e:65:5e:57:9e:11:32:00:ff:c9:79:70:
         2f:73:c0:c3:42:3e:15:f8:b7:bb:b7:b0:54:b7:fa:66:63:dd:
         11:34:5a:24:b8:6b:16:2b:dc:25:5f:3e:5b:98:66:73:09:57:
         dc:29:76:f5:92:f4:26:8b:83:e9:98:2e:dd:bd:0a:ca:d3:ae:
         59:fa:6c:e2:01:69:e5:cf:04:73:5e:99:ee:9e:f8:c7:b7:c7:
         17:7b:ff:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----