Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a21b3d09-4d84-3315-bbda-c36e5513e8ee.roa
File:                     a21b3d09-4d84-3315-bbda-c36e5513e8ee.roa (raw, json)
Hash identifier:          Q1GDivnrCYZSqe7abrEB5BDJOm4JiVkTEQ2SpoP0j0s=
Subject key identifier:   D5:C9:7D:50:59:BC:A6:FB:DB:B6:DF:86:A1:45:FB:C8:4F:13:C1:D1
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C442527FCC102F61436C00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a21b3d09-4d84-3315-bbda-c36e5513e8ee.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        199.232.60.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:42:52:7f:cc:10:2f:61:43:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=a0198b11-9e24-4f16-8e23-2dd91bee96d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:12:ea:9a:7b:43:ff:d6:80:23:38:2b:ce:bd:
                    20:f3:41:8d:e2:36:40:49:aa:14:ef:1d:d2:09:38:
                    88:6b:73:72:d1:a0:1c:3c:2b:5d:4c:41:c6:cb:91:
                    76:28:c6:95:44:e1:aa:29:4a:aa:17:7d:94:d8:b0:
                    30:e3:ca:00:d8:0a:b3:66:0e:2b:5e:0b:5c:8a:06:
                    76:6f:9c:4e:e2:91:8b:dc:97:4c:97:98:bd:70:2f:
                    3d:3a:a6:45:3c:da:ac:4c:1b:78:bf:f7:39:45:d3:
                    2f:82:b0:57:25:70:ee:01:5f:7f:01:7d:89:01:bd:
                    06:d0:84:8a:92:1c:36:ca:75:61:49:1d:cc:74:8c:
                    d0:56:62:53:9c:91:92:e2:5a:dc:6e:95:4f:71:21:
                    b5:22:89:0d:96:c8:cb:e5:df:27:74:6f:5e:1c:a2:
                    57:c5:ad:d2:0c:39:49:69:9f:b1:b3:48:8f:dc:15:
                    e7:c4:84:29:f5:26:a8:ad:20:ec:7c:fe:de:bb:22:
                    0f:5e:40:91:17:96:dd:25:aa:82:7c:69:44:5d:f0:
                    bb:dd:cd:c6:5a:10:b5:03:7c:37:7c:39:d9:4b:52:
                    b8:f7:31:97:87:7d:0b:56:57:b5:5b:15:4d:d6:ed:
                    57:b1:12:b3:ff:8b:c2:d5:1a:5d:df:c1:7f:2b:7c:
                    9f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C9:7D:50:59:BC:A6:FB:DB:B6:DF:86:A1:45:FB:C8:4F:13:C1:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a21b3d09-4d84-3315-bbda-c36e5513e8ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.232.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:7f:a6:96:61:d1:7f:ee:7f:c4:0a:fb:61:0d:96:c1:06:69:
         40:a3:e2:26:f7:48:11:e8:df:26:a7:e5:2f:fa:51:76:5f:d2:
         bd:25:13:15:32:71:34:93:69:2b:37:83:0f:cd:20:b1:df:c1:
         7a:01:9e:72:f7:da:61:97:4f:eb:ce:da:e1:f3:0b:fa:15:74:
         5e:96:f0:6d:73:eb:02:f5:f5:d3:e8:83:da:64:84:7e:13:3f:
         2d:ac:b7:6e:23:9a:3d:21:62:f5:c0:f7:d8:26:cf:e2:e9:85:
         a1:71:7e:37:b1:88:b4:34:a6:80:f2:f7:9c:9e:3f:c8:83:48:
         72:67:65:1e:d8:d1:83:01:0f:b5:2c:0a:b6:c1:ad:66:ec:cc:
         25:54:6a:6c:0b:6b:d5:8a:a5:f8:c0:ba:94:2a:44:33:4b:70:
         c6:1d:34:3e:5b:5b:19:16:8f:3b:f0:9b:91:49:11:23:3d:65:
         7c:30:e9:85:51:61:18:a5:0f:49:a9:35:9d:16:1c:82:76:b3:
         54:89:6d:86:94:e3:23:df:fc:b3:02:96:89:4a:f5:87:39:7e:
         ee:6b:ea:ef:04:65:bf:eb:37:3e:33:0d:70:06:72:cd:ba:56:
         de:b7:f8:4c:80:f3:36:37:50:cd:96:1b:f7:bb:d0:fe:5e:ee:
         13:89:53:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----