Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0bfbddc3-6a37-3b70-a002-19768779af3c.roa
File:                     0bfbddc3-6a37-3b70-a002-19768779af3c.roa (raw, json)
Hash identifier:          d+2kQCQ0fy1LT5F+4ag3uKEeOhgYKf88KE7dodZsdpc=
Subject key identifier:   B8:4F:9C:74:C3:62:9C:65:87:CB:A1:04:ED:52:01:36:BB:84:A0:33
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C42CC2487472C6FDA188C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0bfbddc3-6a37-3b70-a002-19768779af3c.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        140.248.242.128/26 maxlen: 26
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:2c:c2:48:74:72:c6:fd:a1:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=212383c2-6474-4a2c-b222-e52dea5bf375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3c:13:f4:35:9f:3f:aa:a6:68:4b:3d:0f:e9:
                    b9:bb:c3:86:24:b2:90:19:38:a4:8f:b3:32:3e:ba:
                    70:9f:97:a4:07:5f:1a:54:10:9e:dd:f7:cf:ef:ed:
                    d6:54:92:dc:ff:93:c4:74:b8:18:3d:e3:05:33:49:
                    45:26:b8:0e:f5:6e:42:4e:80:13:23:86:28:a2:1a:
                    67:61:fd:0c:5c:83:ad:6c:40:0b:9d:2e:11:06:65:
                    c7:6d:4e:79:11:d5:6c:e6:52:26:b7:52:b7:b5:71:
                    d8:15:5f:05:ce:a5:bf:9d:ce:7b:a6:4f:d9:35:f8:
                    83:2e:46:3e:25:69:de:47:ef:29:a1:52:20:8e:d8:
                    b4:d8:10:fb:5d:e5:47:92:c5:8b:d3:33:0b:9f:bd:
                    4d:e1:ee:b0:88:95:d4:32:00:7b:d8:e5:4a:1b:c3:
                    0c:b5:e6:a8:2a:ba:54:cf:a3:b3:42:63:ce:36:76:
                    2d:21:e4:8d:ab:81:83:22:31:6d:bc:d3:53:f9:61:
                    7a:0e:32:a9:3a:eb:7d:3c:93:e2:db:52:5f:0d:e5:
                    b6:c0:b2:53:e7:b3:50:ba:35:5b:e9:f1:43:84:b1:
                    ac:70:5e:70:9e:65:c6:51:ca:1c:e4:b2:a3:9f:6d:
                    a7:1f:12:32:1e:73:29:0f:46:fc:5e:da:71:d2:ab:
                    86:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4F:9C:74:C3:62:9C:65:87:CB:A1:04:ED:52:01:36:BB:84:A0:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0bfbddc3-6a37-3b70-a002-19768779af3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.242.128/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:9c:35:35:df:aa:b0:5b:d9:a3:8c:f9:23:9b:42:99:8a:0d:
         bb:62:5f:96:f5:dd:44:5f:45:86:46:be:4e:78:81:11:ae:fa:
         d6:2e:13:4f:a3:00:9f:c9:fa:e3:a5:48:b8:ad:43:eb:b3:9a:
         3d:1c:91:d2:b3:ae:d0:98:19:78:8c:a0:e3:a8:db:b4:e5:7e:
         2c:fe:7b:41:98:b6:4e:6e:b4:56:0b:10:71:64:c0:78:0f:fe:
         71:bb:26:0a:07:80:34:15:45:55:d2:ed:61:4a:ff:b7:4a:12:
         6e:2d:17:93:b1:07:d4:41:4a:f0:f9:f6:f3:64:e3:5a:8c:aa:
         fc:b8:fb:69:f3:9a:80:bb:69:63:23:ae:3d:90:c0:5b:ff:09:
         c1:5b:36:44:98:48:3e:a5:43:98:1e:9f:3b:a0:ee:17:b9:3e:
         3f:c9:f4:49:f7:9f:36:68:c7:bd:e6:c2:d2:8f:49:cb:8d:ba:
         68:b8:05:cc:a2:4b:93:59:eb:26:de:5e:96:59:76:e7:06:b4:
         69:df:b9:98:54:dd:a0:b1:d7:9f:0f:97:33:79:6d:9f:1b:45:
         d3:68:11:3d:e0:e1:6d:3c:5a:e3:65:ac:d1:19:fb:5e:35:9c:
         29:eb:d4:df:9f:10:1b:d4:ab:b1:b9:44:67:bb:bf:5e:0e:8c:
         11:c4:e4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----