Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d2e389e3-c6b6-3280-a83d-864f511ff6b9.roa
File:                     d2e389e3-c6b6-3280-a83d-864f511ff6b9.roa (raw, json)
Hash identifier:          nfQEd0U5caDXRzkfJM4uiJ/rXVOU06myRmhyI4r1UPo=
Subject key identifier:   48:26:F0:7C:62:E0:6E:DB:08:54:A8:06:77:66:9A:DA:C3:AA:EF:98
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F432858494469359B877D92ED0F6BB590
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d2e389e3-c6b6-3280-a83d-864f511ff6b9.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     2495
IP address blocks:        164.113.88.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:35:9b:87:7d:92:ed:0f:6b:b5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=9ebbc426-f3b2-48b8-bffa-089ffbdf9276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:08:82:55:55:d3:2f:07:40:72:90:48:4d:cb:
                    db:b9:d9:d2:72:de:4d:95:d7:2b:2f:ff:cd:9e:f0:
                    58:91:91:0c:c6:30:7d:e0:c2:90:49:ca:1e:12:67:
                    1c:39:7e:38:0a:91:21:29:75:b0:4a:6c:48:02:59:
                    25:7d:78:e5:a7:32:bd:d5:50:52:30:cf:6e:cc:28:
                    fd:81:f8:85:a7:4e:13:ad:33:d9:c7:b8:4e:f1:fb:
                    da:7e:3d:e4:1e:e6:4c:f1:c3:5d:2d:d3:04:fa:f4:
                    26:38:6e:58:82:38:54:4c:3c:f1:9e:6f:b6:01:bd:
                    32:b8:a7:86:20:96:11:43:9f:1b:92:95:d8:74:b0:
                    8b:94:e9:2d:6b:db:5d:c0:24:07:85:f2:b8:5a:7b:
                    5a:6d:8a:cb:f3:75:ce:b4:36:c8:a8:7c:9e:42:3c:
                    6f:38:85:52:d2:80:71:fc:2f:af:89:62:49:e6:65:
                    29:cb:85:c5:0a:5e:bb:a0:dd:7a:da:e2:7d:12:39:
                    d9:0e:ef:82:9e:21:35:ca:b3:e7:37:cf:5a:40:44:
                    12:9d:ba:e3:6d:b0:85:5a:45:82:c1:57:6c:bf:80:
                    33:6a:f2:76:06:c3:3e:87:87:21:a7:23:8e:74:2f:
                    a8:67:cd:fb:73:15:d1:19:3b:4d:93:7d:c5:e8:38:
                    5f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:26:F0:7C:62:E0:6E:DB:08:54:A8:06:77:66:9A:DA:C3:AA:EF:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d2e389e3-c6b6-3280-a83d-864f511ff6b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.113.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:8b:09:2b:c6:b3:11:98:23:2a:4f:3f:0d:bd:0a:51:69:c4:
         3c:ea:94:98:08:a4:e2:d0:71:24:f5:f8:e5:e8:d0:9c:9c:3a:
         ec:1a:a0:0d:9b:bc:03:c3:a8:79:e8:ee:09:be:9a:ce:0b:43:
         8e:95:e8:14:92:57:1f:f5:b4:cb:89:00:15:69:a2:98:62:81:
         10:77:6c:88:69:5f:fe:6c:f6:2b:53:6a:d2:9a:93:df:b2:34:
         4e:c1:cd:a6:a2:24:41:68:03:dc:6c:a4:ab:8f:35:da:5f:ab:
         27:ab:ab:3a:86:f2:7a:d6:98:a4:4d:0b:6d:71:44:ba:7d:ce:
         bf:d2:fa:63:56:97:39:ff:ff:ab:40:7d:7a:19:68:05:ec:1b:
         86:af:6f:20:1a:82:1e:1b:84:4a:2f:1a:b8:1a:7d:09:3f:2f:
         6d:73:db:af:46:6d:1d:e8:fe:12:d7:7a:d9:98:1b:f6:f6:b1:
         14:c0:76:5f:76:bd:73:01:0e:7d:a8:8a:c8:05:65:da:03:cd:
         b6:7a:c8:f6:c0:71:79:6f:85:ec:6c:21:96:e8:cd:55:fa:58:
         1e:df:6e:fc:b3:19:a1:50:40:b1:06:07:4c:f2:65:9c:6f:b3:
         25:24:a7:3e:6a:d5:4c:a3:a2:fa:a9:39:d0:67:6c:fa:09:95:
         b3:07:5d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----