Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/01f3bebd-e19e-3830-a3ec-e884f4a82d6f.roa
File:                     01f3bebd-e19e-3830-a3ec-e884f4a82d6f.roa (raw, json)
Hash identifier:          YkMMXDlCNHk1PFV9BfN3XDm5GLCK6o17rq1ZysWddik=
Subject key identifier:   38:F7:DE:C6:27:34:33:37:C2:90:12:16:EE:34:2E:13:4D:44:66:36
Certificate issuer:       /CN=8ee8b7f9-2148-4099-8192-6428b14301be
Certificate serial:       010D0C9F432858494CC94C7241B85F6A00442040
Authority key identifier: 84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/01f3bebd-e19e-3830-a3ec-e884f4a82d6f.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     3464
IP address blocks:        192.31.107.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:4c:72:41:b8:5f:6a:00:44:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee8b7f9-2148-4099-8192-6428b14301be
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=cd61d9fd-e1d5-4942-bd98-51c3c161398d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:aa:f1:fb:06:48:81:f8:ed:e3:fe:85:d1:48:
                    0c:5a:1b:38:d7:f5:29:16:39:de:39:ce:d6:dd:21:
                    25:66:a5:59:96:d3:a8:52:96:40:8b:f6:fc:66:57:
                    e7:d7:85:b2:aa:e6:54:a6:01:5c:27:b5:2c:48:05:
                    74:26:69:af:a8:00:d8:ce:14:48:6a:61:79:f1:8b:
                    6e:80:33:fc:86:39:ee:38:be:ed:0d:07:77:a9:27:
                    88:66:bb:6f:8b:5e:36:87:27:e6:0a:7a:2b:2a:b3:
                    54:23:5f:ba:0e:a8:b5:4c:e4:8e:65:70:31:27:4b:
                    52:8b:36:de:ae:6d:01:4b:63:10:28:5d:89:ff:7a:
                    c8:96:e3:d8:82:41:c1:59:76:02:c1:17:bc:6c:6f:
                    59:60:d7:71:17:58:5c:cc:da:51:9d:c0:62:48:46:
                    54:8e:7c:7e:79:98:f3:64:33:2d:df:bd:0c:68:39:
                    fb:21:67:85:57:a2:74:95:22:22:d4:dc:bb:c4:8d:
                    eb:56:4b:3a:91:24:ca:e2:1a:2b:f6:51:ae:28:4c:
                    9a:e0:52:31:7d:bd:4d:7f:15:dc:33:a8:3c:f7:2e:
                    6b:6c:18:05:8c:91:38:e5:26:a2:c9:04:d7:e2:f9:
                    81:8c:4f:d2:47:99:ba:b7:91:5f:89:4b:f0:95:06:
                    b5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F7:DE:C6:27:34:33:37:C2:90:12:16:EE:34:2E:13:4D:44:66:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/01f3bebd-e19e-3830-a3ec-e884f4a82d6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl

            X509v3 Authority Key Identifier:
                keyid:84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:84:dc:1e:bc:74:04:57:05:d8:69:1c:07:f4:fc:d9:7e:a8:
         e5:c4:6d:a0:47:f8:1d:d0:ba:56:a3:87:6a:11:54:dc:eb:ac:
         5c:a4:87:34:fb:a7:4f:db:80:6f:3c:4f:b5:02:00:eb:0e:e1:
         d0:3e:cf:ad:01:ad:63:d7:d9:97:bc:2a:da:33:e3:1f:88:7a:
         80:50:40:0f:44:bf:13:8a:16:0b:73:ab:89:82:9d:1d:50:9f:
         d7:f8:8a:fa:e0:b6:35:20:d4:fd:02:1c:0c:8f:8d:54:70:2d:
         12:bc:a9:f2:ff:87:73:79:15:d9:44:4e:d2:69:a5:ad:67:a4:
         e1:78:86:7a:0c:fb:a1:e1:16:82:d7:60:88:88:50:e1:7c:ca:
         f4:08:e2:a7:90:d7:80:df:c0:da:2c:11:c7:5d:a3:9f:58:9e:
         85:15:53:bc:bb:10:62:10:78:f4:78:d4:81:d2:6d:10:d8:d5:
         91:83:60:a3:0d:07:ce:24:68:5a:88:c3:c5:4c:85:74:e9:fe:
         72:68:f9:eb:e3:36:92:62:f0:73:3b:2e:80:1f:23:05:4c:a8:
         2e:8d:1c:3d:ef:7f:23:cf:49:20:26:d3:64:1f:38:41:8a:de:
         30:e9:54:35:d0:48:8a:52:63:c8:a1:34:c1:a1:6d:db:ad:f0:
         b3:43:4f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----