Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/a981c111-3341-3f73-85ec-3e9f5b8d2766.roa
File:                     a981c111-3341-3f73-85ec-3e9f5b8d2766.roa (raw, json)
Hash identifier:          SftXbNgEXfQ/GN5dULOgQhsSGq8Tlf2ifwcqDHDRuww=
Subject key identifier:   1C:0E:E8:BA:AA:DC:4F:E6:21:93:32:B6:F3:3B:E7:F8:72:72:61:16
Certificate issuer:       /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8
Certificate serial:       010D0C9F4328584908817B19ABCFE344B1BED480
Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/a981c111-3341-3f73-85ec-3e9f5b8d2766.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     396500
IP address blocks:        23.187.152.0/24 maxlen: 24
                          2602:f82d::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:7b:19:ab:cf:e3:44:b1:be:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=fe6351aa-1768-49d4-a5d4-aa0c5bec442b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d8:41:5a:d5:2c:3e:5b:22:f4:1d:25:38:54:
                    e8:7a:7d:80:62:d0:c8:4f:91:81:a5:30:01:10:dc:
                    0b:6e:e4:87:81:7b:c9:72:93:b4:8b:e4:c1:85:65:
                    9a:cb:d1:73:98:02:dc:fb:a4:84:24:12:cb:7c:7e:
                    3f:f0:e4:3d:8a:cc:53:f9:2d:f0:17:96:e6:8e:4f:
                    3b:31:4a:83:f9:4a:e8:91:93:c3:ac:0f:b5:68:50:
                    94:65:b4:2c:a7:df:e0:77:1f:a4:96:14:4f:38:56:
                    20:d0:1c:30:95:82:a8:81:17:99:2f:90:f2:02:25:
                    78:43:e7:fb:62:d0:9d:df:f3:9c:bb:a1:32:fa:51:
                    09:f2:e4:22:b4:26:33:e1:7d:e4:3c:21:7c:d9:3b:
                    a3:88:c8:58:2c:08:02:74:cf:91:b5:04:5e:74:37:
                    d0:db:3e:fb:0c:b2:1c:d6:3a:43:e1:3c:5d:dc:7e:
                    54:77:ce:36:78:60:3c:c5:59:b8:1f:58:b9:75:9b:
                    5f:4d:5d:b4:43:93:fe:57:ef:c2:0e:05:41:eb:ee:
                    77:3e:ae:e3:99:d7:e9:d7:37:67:46:29:8e:70:9e:
                    e4:ae:ab:98:39:11:b2:84:94:2a:30:b6:51:71:a2:
                    59:90:f7:71:15:c8:d6:7c:c0:00:8f:77:48:27:a8:
                    83:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0E:E8:BA:AA:DC:4F:E6:21:93:32:B6:F3:3B:E7:F8:72:72:61:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/a981c111-3341-3f73-85ec-3e9f5b8d2766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl

            X509v3 Authority Key Identifier:
                keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.152.0/24
                IPv6:
                  2602:f82d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:87:0d:ca:ab:91:a8:b1:aa:a5:c4:c2:80:c2:07:36:b4:f1:
         e8:20:86:20:f9:4f:b4:ca:f9:5f:09:db:61:f3:24:5a:23:42:
         1e:7f:18:33:fc:0a:ac:3a:be:70:5f:8a:b5:15:e3:29:3a:9b:
         56:6b:d0:26:b6:58:e7:b3:c9:64:d4:44:fa:02:9e:5e:25:64:
         0f:0d:44:04:a2:56:ed:5a:64:e4:50:a0:60:85:80:b5:a9:3c:
         82:6d:ef:ec:ae:20:d2:1f:ab:21:93:fb:28:64:50:33:d5:7c:
         b8:3f:73:b8:b0:08:fe:b4:67:c0:89:93:d1:ee:15:2e:87:0f:
         5f:87:9f:32:fc:6f:8b:cd:f1:2c:5a:cc:99:03:f0:08:32:f5:
         16:14:24:43:3c:ba:3c:e6:32:7a:f2:23:72:c3:7e:93:8a:ca:
         20:f0:8c:ad:89:97:81:da:63:cf:57:5d:00:3f:0f:57:c3:0d:
         0f:ea:7c:ef:96:d9:16:c4:76:b6:30:a8:2a:ee:07:6b:dc:83:
         c8:61:53:c1:fe:cb:1f:15:d7:95:92:c2:ac:39:37:fd:15:ca:
         07:ef:0e:fa:14:76:fb:37:c1:9b:b1:3f:61:a7:50:cd:61:d6:
         c2:95:99:e9:5b:67:c1:10:15:03:42:69:1d:f7:09:49:eb:bf:
         fe:dc:0a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----