Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/cab5aace-74ac-3d69-ba56-f9c38c5c9db4.roa
File:                     cab5aace-74ac-3d69-ba56-f9c38c5c9db4.roa (raw, json)
Hash identifier:          VZ+O98IjK2ptQUVRgtEO4R653pqqu6/qHCqXU/p+FCk=
Subject key identifier:   42:F1:C7:FA:FF:47:1B:4E:83:62:3C:D8:87:F2:65:F2:6C:79:22:E5
Certificate issuer:       /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial:       010D0C9F432858491AA6C4429C044240383DAC00
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/cab5aace-74ac-3d69-ba56-f9c38c5c9db4.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     6461
IP address blocks:        209.183.176.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:c4:42:9c:04:42:40:38:3d:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=28b4cc61-fd97-49cd-889e-23984b54f4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:5c:1a:fc:38:b2:62:da:19:4a:93:e7:9f:
                    69:dc:bd:b4:07:5f:e2:40:f7:19:67:0d:b9:fa:02:
                    ca:26:8c:b6:fe:f6:50:fa:26:5d:5d:44:67:35:c2:
                    1c:21:c8:61:34:88:d5:78:00:cf:03:42:5b:0a:a3:
                    0c:35:88:20:bf:8f:19:ef:3d:c6:b3:0c:69:d9:3f:
                    ad:39:65:ea:ee:cb:df:96:62:31:8d:38:2a:5b:fc:
                    7f:67:4a:05:f1:7d:da:1a:a0:d4:ff:8b:78:11:40:
                    49:b2:82:54:bc:51:9b:e7:9f:8d:a1:13:bd:a1:e3:
                    bb:92:fc:24:d8:70:cc:13:ba:1d:51:0a:5d:fe:81:
                    c8:73:4f:e1:c4:57:93:f6:6b:32:20:93:01:b2:9e:
                    c5:62:51:3a:5a:aa:bf:37:af:0a:f3:63:f2:67:35:
                    6a:5c:d9:1a:34:09:54:fe:7f:1e:e5:30:76:18:57:
                    f3:e8:ab:70:0b:6c:c0:b7:dd:35:6f:d0:ae:5c:31:
                    ee:32:89:a0:96:91:51:b0:af:de:c8:fb:4d:13:8c:
                    9d:7c:f5:ca:3b:a1:9c:5d:5c:dc:a5:a6:ed:58:c6:
                    8c:aa:6d:74:5f:f9:dc:97:3f:cd:7b:4b:27:52:0d:
                    d5:78:65:17:99:bb:d4:48:f9:98:a6:1c:20:b3:a9:
                    81:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F1:C7:FA:FF:47:1B:4E:83:62:3C:D8:87:F2:65:F2:6C:79:22:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/cab5aace-74ac-3d69-ba56-f9c38c5c9db4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.183.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:05:8c:d7:98:1a:6d:84:e0:1c:58:ed:48:b4:ee:60:2e:78:
         f6:87:6a:20:bb:e1:03:17:53:11:ab:d1:5e:6d:44:dd:5b:00:
         5f:61:b2:94:29:1c:64:86:7e:86:9d:33:92:50:e6:5f:49:ee:
         ff:e3:20:fa:a7:fd:b7:2b:98:dd:62:37:8a:08:dd:9c:32:de:
         82:61:a6:6d:d2:81:8d:78:ee:f3:96:5d:ea:f0:8a:aa:e1:cb:
         dc:f7:1e:38:a0:85:36:c6:41:1e:b8:2e:35:22:31:69:d5:67:
         d3:ff:01:ba:b1:f0:a3:ac:41:01:b4:40:01:7b:97:44:8d:50:
         67:5f:ee:5c:05:19:ca:02:cc:4f:75:62:03:03:de:e3:ce:95:
         24:40:28:21:11:e0:20:dc:6f:1e:10:2d:dc:b8:4d:67:ac:73:
         80:72:5c:de:f5:aa:53:f1:27:4c:b9:48:b1:cf:c2:b6:ed:6c:
         b8:e5:df:7a:af:2c:71:55:eb:ce:0e:68:83:e5:19:ac:20:f2:
         c7:9a:c9:43:81:29:bd:cb:d0:bd:37:a8:25:e8:f5:83:98:30:
         35:33:9f:4e:a5:75:81:73:af:38:24:a8:69:d3:06:fd:dd:04:
         3e:23:24:03:10:72:1b:db:2c:72:42:66:d5:8e:0a:e2:fb:34:
         91:7e:6c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----