Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/6c278590-b168-3097-9744-916cdc3a0492.roa
File:                     6c278590-b168-3097-9744-916cdc3a0492.roa (raw, json)
Hash identifier:          4NoLr0p/6sWUSPHFO5grjszg7ST+20CyR354NWf6DX8=
Subject key identifier:   AD:F7:06:1C:D4:D3:5A:E3:08:07:75:21:7A:FC:E6:B6:20:09:10:5A
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F432858494B640EB982D1235AB99B4580
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/6c278590-b168-3097-9744-916cdc3a0492.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     4181
IP address blocks:        146.174.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:0e:b9:82:d1:23:5a:b9:9b:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=839d345c-9373-46fa-9bef-17fbb67f684e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:35:fe:de:c1:78:87:ce:e6:0a:ed:e1:88:
                    25:d7:3e:4f:15:a7:3e:ba:3f:99:81:cb:9d:dd:be:
                    d7:3a:6c:90:4b:95:ce:80:e7:da:73:4f:30:06:bc:
                    30:3d:07:f1:7a:40:02:19:41:8b:4b:15:83:65:6c:
                    5b:f2:cf:38:7a:25:cc:50:66:6a:10:a2:3b:cc:b7:
                    75:28:1b:b0:be:fb:19:6d:06:4a:48:81:8c:b3:f1:
                    ef:14:db:61:ef:e7:c4:20:b8:27:ea:bd:9f:dd:b7:
                    51:78:36:95:99:8e:6d:b9:b1:b0:f9:0c:02:1f:0c:
                    9f:66:5e:a6:d9:53:ea:03:14:c1:85:43:f0:15:d5:
                    1c:4a:e6:d8:57:b7:12:47:f0:9e:65:92:b2:a4:0a:
                    f0:5b:b2:53:35:c1:95:19:a0:a2:dc:02:31:f0:cd:
                    7f:24:98:03:0d:c3:70:64:5a:a1:d0:70:14:ed:3b:
                    b4:1a:5f:a1:45:7e:e6:6b:75:51:42:a2:17:51:cc:
                    6f:01:68:9d:ab:44:35:98:6d:f3:07:64:c6:27:88:
                    81:8d:c7:f3:94:44:5d:88:39:bd:ac:4a:65:e4:86:
                    99:c4:e3:f3:43:ce:f3:ea:0f:cf:86:e3:79:51:0f:
                    ed:4b:9d:89:0d:d5:26:3b:b4:d7:e2:b2:c1:33:5d:
                    9f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F7:06:1C:D4:D3:5A:E3:08:07:75:21:7A:FC:E6:B6:20:09:10:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/6c278590-b168-3097-9744-916cdc3a0492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.174.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:18:1b:9a:3e:aa:03:ec:9b:38:e5:49:7e:f2:ff:3b:40:95:
         3c:17:5d:b6:0f:50:2d:f5:e0:5b:3b:44:9f:d3:0c:43:d0:38:
         85:00:31:cf:cd:e0:c1:27:07:95:75:90:5f:fe:8f:26:0e:ff:
         28:54:69:22:67:c7:b2:f3:bf:6e:a9:5b:de:0b:fd:10:49:80:
         04:cd:f6:59:49:6d:92:46:2e:e9:6e:84:3b:69:6d:e7:99:06:
         20:4f:77:a5:df:f9:fe:07:75:10:8c:18:83:b8:50:a4:94:22:
         da:79:48:eb:50:92:aa:af:ae:25:51:15:1c:0c:da:72:94:d9:
         88:ca:b8:0e:9e:8e:2f:9f:1e:df:67:c2:0b:01:cb:e6:52:c8:
         da:37:9b:47:50:90:97:c2:1d:bd:c4:c5:d2:6d:52:e6:da:9d:
         0a:dc:63:b2:25:66:42:b7:b3:f9:c8:17:2f:e9:78:94:52:79:
         2d:4f:f6:92:31:f7:eb:0e:61:54:ba:af:80:cf:37:65:53:d1:
         c7:7e:25:83:02:dc:58:72:16:5f:f3:c3:c3:ab:a7:75:ed:b9:
         9c:3d:03:d0:4d:19:ce:92:df:93:35:83:5e:bf:9d:89:4c:81:
         d8:0d:d9:02:23:30:6f:5a:7c:e0:cd:6e:60:89:42:a5:50:93:
         4a:68:b7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----