Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/9434823d-150d-3662-936e-72491447d2fa.roa
File:                     9434823d-150d-3662-936e-72491447d2fa.roa (raw, json)
Hash identifier:          9ZPdhGxc5XQHndF1x5oeu+cSj6rNkfaK2G6qUDFHDYU=
Subject key identifier:   1B:7B:1F:05:A2:CE:1E:1D:E8:DD:8C:8D:49:28:03:F8:0C:FC:4B:5D
Certificate issuer:       /CN=88390227-7474-42cc-ab77-86c936657096
Certificate serial:       010D0C9F43285848EF6151B296ECCCFE75920100
Authority key identifier: 2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/9434823d-150d-3662-936e-72491447d2fa.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        207.230.142.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:51:b2:96:ec:cc:fe:75:92:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88390227-7474-42cc-ab77-86c936657096
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=8668fba2-234c-4f3e-91c8-e1f4fb92ff76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e4:26:69:a9:e0:8a:b6:f2:2a:88:8e:fd:7f:
                    ce:4c:f8:ec:a4:2e:3a:18:f5:c3:32:06:02:81:67:
                    ff:8d:b7:50:55:6c:42:26:06:c7:3b:c7:76:7b:0e:
                    fe:0e:7a:0e:08:07:d6:18:94:a2:73:af:de:1d:a1:
                    57:5c:0f:20:63:b7:59:40:c2:8b:09:f7:26:bf:f6:
                    13:0e:da:21:98:d8:77:e5:f8:d8:6e:5b:a4:08:4f:
                    da:fd:35:c2:ef:1d:a4:76:f8:fa:59:d8:b9:ed:a4:
                    b4:b6:a5:37:db:fc:9d:46:07:00:98:6d:35:93:13:
                    b8:c8:44:a1:b8:a4:94:59:53:0d:63:e5:79:65:af:
                    2d:a6:a6:a2:ed:cc:fa:32:92:52:1a:15:2c:4d:94:
                    de:24:65:a4:7b:6e:2e:94:4a:73:55:8e:98:a4:66:
                    a7:43:d6:63:4c:89:89:42:69:a8:0a:bf:b1:8f:6c:
                    20:82:1e:64:1c:aa:e2:ab:ef:80:5b:d2:2d:32:b6:
                    bd:78:75:44:bd:78:bf:59:3d:34:43:fc:99:c8:3f:
                    5a:1b:6b:1d:28:50:df:53:22:8f:28:fa:cb:9a:ec:
                    ea:f6:a0:9b:84:4e:36:74:95:b3:00:34:13:ee:0c:
                    aa:da:26:5f:55:f0:e1:fb:b8:22:a1:d2:22:0c:80:
                    6e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7B:1F:05:A2:CE:1E:1D:E8:DD:8C:8D:49:28:03:F8:0C:FC:4B:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/9434823d-150d-3662-936e-72491447d2fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl

            X509v3 Authority Key Identifier:
                keyid:2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:90:75:b0:85:fd:46:75:ce:38:8e:f8:f8:03:71:9e:43:90:
         bd:33:28:a5:7c:c2:4c:fb:06:21:10:8d:1f:41:ce:29:4c:75:
         31:17:bd:c1:7d:3e:5b:cf:31:87:bd:33:64:c4:b8:ce:62:b0:
         d2:f0:df:05:12:91:d3:d3:55:44:b6:a2:f2:c4:4d:80:9a:38:
         a0:61:af:97:e8:f8:6c:10:18:b1:a2:75:01:7d:1b:b5:ac:35:
         db:a7:57:c0:66:0b:0a:b9:0c:b5:5c:e4:e6:0c:af:86:35:28:
         98:df:af:74:d7:e3:b4:3e:98:ab:c2:dc:fc:e8:d8:27:f0:57:
         15:c5:ba:d7:88:11:80:c2:f9:68:27:4e:50:c8:66:4f:fe:4e:
         c0:3b:7c:3c:bb:60:b0:06:bb:57:7c:57:d9:d9:ef:78:0c:05:
         79:fa:2a:0a:ea:05:87:79:96:3b:b6:6b:52:e0:3b:b6:2c:d7:
         61:a2:b7:ac:c6:63:e7:9c:d3:ff:02:33:d9:c3:a1:90:df:42:
         61:b6:b5:a4:b3:10:da:89:4d:18:14:35:d4:aa:7b:0d:b0:4b:
         7b:67:31:44:ab:d0:75:b8:46:b4:7e:8a:0b:25:f0:87:84:68:
         bd:45:d3:28:bb:96:09:73:d1:15:b0:36:54:cd:33:5d:db:eb:
         31:6d:b0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----