Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/9d364bf3-3eed-32e7-b026-9e12210ba228.roa
File:                     9d364bf3-3eed-32e7-b026-9e12210ba228.roa (raw, json)
Hash identifier:          Y9VfoouPLMP4SMpK4VJKTEuAjjpp5sC3PIRFE+l4sQE=
Subject key identifier:   15:9C:24:A4:12:7C:20:93:71:1A:08:97:4F:A5:B0:CB:EB:82:45:A8
Certificate issuer:       /CN=88390227-7474-42cc-ab77-86c936657096
Certificate serial:       010D0C9F43285848EF6164AAC48C2D763DC8C980
Authority key identifier: 2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/9d364bf3-3eed-32e7-b026-9e12210ba228.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        207.230.141.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:64:aa:c4:8c:2d:76:3d:c8:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88390227-7474-42cc-ab77-86c936657096
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=eea36791-0fd3-47a2-83bd-98ca75097a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8f:da:df:87:85:bf:19:fb:7a:dd:30:8f:b7:
                    f5:3c:e9:ba:66:2f:9f:b4:7e:74:9e:c1:68:35:0e:
                    6e:9b:99:42:76:7c:39:1e:a7:8c:17:fe:f4:e5:8f:
                    64:42:e2:28:e8:08:a2:e0:2e:58:a9:0e:6c:0d:bf:
                    c1:14:47:c9:d2:e5:ce:1f:00:6d:da:c2:c8:b8:93:
                    7b:41:7b:d3:0e:cf:b3:dd:b0:2e:b7:b6:6a:13:d8:
                    24:5b:ec:59:8b:6e:c2:20:0a:95:10:99:1d:13:e5:
                    ba:ec:87:ce:c1:9a:f6:46:29:85:d6:91:a9:40:6b:
                    27:eb:65:42:97:4b:70:97:76:df:e2:1c:41:75:3c:
                    ab:1b:08:66:0c:5f:00:6f:ef:41:f7:6d:43:5d:3d:
                    1a:a7:6e:2e:6b:4b:37:04:c7:3b:e1:7a:40:16:94:
                    c5:aa:f1:8d:11:25:84:5d:28:5f:41:77:3c:9f:2d:
                    a0:0d:7f:0d:3d:0c:09:d9:a8:2b:33:aa:c2:50:f1:
                    40:b1:95:c7:a7:4a:b5:0c:11:48:09:2f:cc:f0:cd:
                    08:71:fc:ab:23:df:d9:28:81:74:59:5e:c6:b2:63:
                    0e:d2:54:33:4f:d0:8a:04:7c:da:e1:c7:96:52:aa:
                    6e:d2:0d:97:1a:e9:2d:f3:a0:5f:14:9b:80:d2:13:
                    e9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9C:24:A4:12:7C:20:93:71:1A:08:97:4F:A5:B0:CB:EB:82:45:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/9d364bf3-3eed-32e7-b026-9e12210ba228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl

            X509v3 Authority Key Identifier:
                keyid:2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:59:65:db:11:cd:71:63:0c:12:13:72:d5:87:8a:8e:4b:68:
         07:e4:31:3d:32:f1:23:15:b8:43:a3:3d:b0:40:87:0a:cf:fe:
         25:40:8c:df:8b:87:ed:4a:19:33:fa:47:ab:b3:e0:6c:10:ca:
         ce:ca:e5:99:84:29:e2:08:47:ff:0b:e5:c0:d5:3e:f4:15:24:
         d5:29:68:32:f3:0a:3f:ca:d2:b0:81:0d:80:32:d2:85:58:34:
         ea:55:43:06:08:1a:12:8d:bc:62:19:f1:c6:2d:35:f3:9e:18:
         43:4d:74:77:83:f8:5e:2f:64:98:d4:69:3b:c6:bb:cb:dc:14:
         fe:09:9e:21:21:c9:3b:d6:53:ee:43:67:dd:d1:12:26:e9:0d:
         c7:ad:f5:48:16:6a:9d:a5:2c:b9:13:3e:31:26:e3:30:dc:48:
         b3:8a:b6:66:64:f9:c1:08:49:32:47:99:e2:fd:52:b3:2f:27:
         2f:e0:b1:4f:42:35:a7:ce:96:c2:e3:c6:5a:84:04:2e:6e:fd:
         18:59:b2:b3:fc:61:2c:d0:b9:38:16:7a:ed:9f:d9:57:4d:c2:
         91:b1:e4:bf:71:b9:46:28:0b:9e:f5:ec:71:c7:98:16:c2:ad:
         81:ef:67:93:96:12:e2:0f:43:fa:b3:b0:c4:4f:d1:19:42:71:
         9e:80:76:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----