Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c4aaba14-e935-386d-a66a-5f8a5674acb5.roa
File:                     c4aaba14-e935-386d-a66a-5f8a5674acb5.roa (raw, json)
Hash identifier:          y9o6Ux4Zum6zb80KZvvmB0aeziVuiMfmwlueKPtJvQ0=
Subject key identifier:   2A:91:62:D2:DF:B0:F9:D7:75:2C:DA:D3:6A:6E:0C:2D:A9:65:CC:71
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858492CB2073488532DFCE06356C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c4aaba14-e935-386d-a66a-5f8a5674acb5.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     6939
IP address blocks:        143.109.32.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:07:34:88:53:2d:fc:e0:63:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=9a2d2602-2fc8-4fba-9dac-217c7eef6b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:21:9c:38:12:37:74:24:d2:51:5a:98:a8:33:
                    e1:da:f7:59:57:b4:d1:dd:15:17:20:5f:ca:28:15:
                    e1:a8:24:ec:cb:95:02:3b:79:f4:dd:79:ec:a1:b7:
                    56:5b:b7:5f:18:f5:71:8e:d8:2a:c4:27:d7:dd:35:
                    e9:4d:a6:84:e6:28:a7:a4:33:24:37:6e:6c:b5:58:
                    63:f1:ed:62:e4:0c:d3:dd:5f:c6:64:22:a6:fb:3d:
                    1a:e0:bc:13:97:4e:17:7d:7c:5b:4d:b6:11:1c:e6:
                    14:66:9d:8c:cb:15:6c:0b:2d:68:d8:e6:41:0e:d6:
                    88:9d:18:a9:25:a9:d3:6b:7c:cc:f1:ca:27:62:e8:
                    d0:a5:40:e6:a0:9e:a6:f0:df:a8:3c:bb:73:0c:bd:
                    ae:19:c5:f4:1d:11:eb:13:59:de:6d:0e:e2:dc:57:
                    3f:d4:87:62:cc:a6:0d:4f:49:f7:80:a0:4d:a9:a5:
                    10:dc:3c:8f:9c:1c:4a:0b:3c:15:84:1d:f2:8a:74:
                    05:0c:44:b6:dc:0c:2a:1a:1d:52:bb:0a:4b:10:1c:
                    8f:dd:0a:dc:a0:37:c9:99:28:87:69:68:57:4b:7c:
                    94:c9:a5:5e:7f:a5:0c:7b:04:3b:fe:4b:b3:46:53:
                    ec:cc:ad:ce:74:40:29:b5:6e:76:f0:97:c4:37:fe:
                    a6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:91:62:D2:DF:B0:F9:D7:75:2C:DA:D3:6A:6E:0C:2D:A9:65:CC:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c4aaba14-e935-386d-a66a-5f8a5674acb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.109.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:64:1e:eb:85:74:35:e7:d7:67:89:66:1a:ae:8b:b8:6b:e8:
         53:c8:d0:09:2e:ca:6e:1e:01:f2:fd:15:0c:e6:00:7f:fe:c5:
         df:17:1c:01:a6:10:d0:62:b9:8a:f6:4a:8a:ab:33:9f:60:9d:
         aa:18:74:e5:41:b5:76:08:a1:4e:9e:4a:db:d7:7c:f0:a3:90:
         08:13:2c:a0:02:cc:4f:d5:06:53:3c:16:4f:b3:5b:f9:c3:cc:
         cd:3b:35:0b:0f:fa:9b:06:09:7e:5a:28:21:30:1f:94:d8:23:
         6e:3f:d1:b5:dd:6b:9e:48:3f:f0:e1:51:5d:49:35:64:ca:bb:
         3b:a0:78:0e:a6:0a:d8:b2:75:3b:3b:01:0a:92:39:00:0e:5c:
         63:d8:2b:40:96:1e:dc:cd:23:07:75:7a:42:d2:77:5f:fc:04:
         be:98:bd:88:fd:5c:c5:d7:c8:23:77:d6:71:8e:49:f0:b9:ab:
         bb:01:50:77:8c:e5:52:e4:b8:53:fc:70:8f:12:73:60:dc:76:
         95:d3:e9:ce:e4:84:7c:b8:2c:dc:46:80:5c:d4:4b:f5:04:5c:
         a1:54:00:e6:53:20:11:9f:7c:69:55:83:06:66:e1:32:a1:8b:
         29:1a:c2:39:93:3d:7a:25:31:d1:7c:06:3b:e5:06:d9:07:1e:
         05:1c:bc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----