Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04863e87-d0fa-3bbf-8221-b8be61bb47e3.roa
File:                     04863e87-d0fa-3bbf-8221-b8be61bb47e3.roa (raw, json)
Hash identifier:          RYGl4A1M2MMvIqN4o5NAy1Df/DInF2Vtl8monB18l/I=
Subject key identifier:   44:65:7B:92:3A:89:0C:E9:EC:D0:09:3E:31:7B:95:3B:48:CC:93:67
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F90C74CB9E2F4E09A3A580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04863e87-d0fa-3bbf-8221-b8be61bb47e3.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33668
IP address blocks:        98.250.254.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f9:0c:74:cb:9e:2f:4e:09:a3:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=e43e03f9-8700-4017-b647-30bbbecc92a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d4:f1:1d:ca:49:fb:01:49:dc:25:6e:3a:6a:
                    c4:1a:1f:fd:36:c2:44:a8:0d:16:82:45:aa:04:43:
                    7c:91:45:cb:55:f9:6b:9e:8d:74:0f:14:fd:1f:3b:
                    7d:26:42:bc:81:05:e2:18:46:ee:17:68:dc:6d:ec:
                    f0:15:78:05:ae:36:09:07:1e:4c:f2:7e:67:81:18:
                    6a:f7:a1:44:27:e0:b9:8e:3b:cb:10:1f:cc:dd:96:
                    0b:2f:a9:78:96:cd:c8:a3:e7:c7:ea:2f:f6:c2:7d:
                    36:40:db:0b:f7:36:95:e8:fb:bc:85:8b:95:09:b7:
                    aa:a1:9e:8d:14:d0:77:7b:16:62:c7:f8:46:0f:c9:
                    89:4c:e1:42:17:08:82:92:f9:18:2a:ac:c9:84:7f:
                    90:8e:b1:f3:49:49:1f:45:e8:c7:47:96:20:d9:25:
                    67:3d:5f:cd:13:29:55:4c:fc:87:b7:f5:cc:59:d5:
                    5a:dd:ec:da:eb:f8:8a:b5:1c:d1:04:df:22:1c:26:
                    c6:d9:a2:4f:0d:99:de:14:56:1f:31:9f:d1:35:f2:
                    5f:48:c6:3c:a4:f7:4b:55:5d:0c:69:21:02:30:9c:
                    fe:92:92:d7:01:77:07:c8:56:0b:7a:b7:79:94:13:
                    70:32:ba:a4:0f:f9:20:7d:4c:a5:7c:02:47:2d:5f:
                    26:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:65:7B:92:3A:89:0C:E9:EC:D0:09:3E:31:7B:95:3B:48:CC:93:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04863e87-d0fa-3bbf-8221-b8be61bb47e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.250.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:71:df:a2:25:c7:a5:6d:34:8e:01:c3:a5:4f:bf:d6:3e:52:
         9e:e4:32:9f:73:66:93:aa:40:7e:a5:91:73:0d:b1:ad:7a:dd:
         c5:33:f7:c2:01:a0:17:c0:f1:b9:95:86:bc:47:17:0a:84:43:
         38:09:fc:03:18:2d:95:4f:cc:26:9e:a9:42:10:c8:ae:e4:2f:
         02:9a:b2:21:71:f2:29:ec:62:37:c4:2b:75:60:c8:b3:56:16:
         5b:15:85:54:54:91:35:2e:af:aa:0d:8d:b3:0d:4d:05:f2:6f:
         53:d0:c8:27:87:6f:b8:88:a8:5f:e5:89:0d:7a:09:ac:7f:43:
         a4:64:c7:44:9f:63:a7:bc:97:81:06:de:33:02:43:03:49:85:
         c7:db:78:90:66:f0:65:91:92:ae:6d:b3:72:df:3d:cb:fd:f5:
         2b:b3:26:99:37:c6:b3:64:22:61:86:8b:8d:32:de:d0:e6:5f:
         52:e8:6c:d4:2f:a7:11:5c:c7:8f:df:ee:bd:a3:27:a4:bc:c4:
         ab:00:49:d9:8a:bc:96:a9:9b:68:ed:3e:5c:30:e8:b8:f3:81:
         93:ee:d8:2b:00:7e:20:c9:a6:33:06:e6:1b:39:f7:d5:22:dd:
         fb:78:37:6c:d7:b3:c3:c3:3d:5a:d3:76:2f:43:d9:28:de:1d:
         54:cf:70:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+Qx0y54vTgmjpYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
ZTQzZTAzZjktODcwMC00MDE3LWI2NDctMzBiYmJlY2M5MmEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdTxHcpJ+wFJ3CVuOmrEGh/9NsJEqA0WgkWq
BEN8kUXLVflrno10DxT9Hzt9JkK8gQXiGEbuF2jcbezwFXgFrjYJBx5M8n5ngRhq
96FEJ+C5jjvLEB/M3ZYLL6l4ls3Io+fH6i/2wn02QNsL9zaV6Pu8hYuVCbeqoZ6N
FNB3exZix/hGD8mJTOFCFwiCkvkYKqzJhH+QjrHzSUkfRejHR5Yg2SVnPV/NEylV
TPyHt/XMWdVa3eza6/iKtRzRBN8iHCbG2aJPDZneFFYfMZ/RNfJfSMY8pPdLVV0M
aSECMJz+kpLXAXcHyFYLerd5lBNwMrqkD/kgfUylfAJHLV8miQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFERle5I6iQzp7NAJPjF7lTtIzJNnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDQ4NjNlODctZDBmYS0z
YmJmLTgyMjEtYjhiZTYxYmI0N2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvr+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD5x36Ilx6VtNI4Bw6VPv9Y+Up7kMp9zZpOqQH6lkXMNsa163cUz98IB
oBfA8bmVhrxHFwqEQzgJ/AMYLZVPzCaeqUIQyK7kLwKasiFx8insYjfEK3VgyLNW
FlsVhVRUkTUur6oNjbMNTQXyb1PQyCeHb7iIqF/liQ16Cax/Q6Rkx0SfY6e8l4EG
3jMCQwNJhcfbeJBm8GWRkq5ts3LfPcv99SuzJpk3xrNkImGGi40y3tDmX1LobNQv
pxFcx4/f7r2jJ6S8xKsASdmKvJapm2jtPlww6LjzgZPu2CsAfiDJpjMG5hs599Ui
3ft4N2zXs8PDPVrTdi9D2SjeHVTPcME=
-----END CERTIFICATE-----