Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12d157d5-8385-3b7e-96a5-0c9b5a8b5c9e.roa
File:                     12d157d5-8385-3b7e-96a5-0c9b5a8b5c9e.roa (raw, json)
Hash identifier:          IhGHh+hioU4ZaYKNhUe5kNyiwREWeFLUqvAQQeWipuk=
Subject key identifier:   F4:F9:38:D4:CA:A9:EE:50:50:C9:43:BB:26:CD:CD:A3:EF:57:1B:42
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6DD1BD98055C4B72C6A7C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12d157d5-8385-3b7e-96a5-0c9b5a8b5c9e.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     13367
IP address blocks:        98.59.40.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:d1:bd:98:05:5c:4b:72:c6:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=04f2d5d7-32ae-4d13-a6e9-0135f05a65f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a1:bd:e4:dd:b9:f5:89:3f:6d:62:e2:8c:77:
                    58:1e:4c:5d:0a:e4:74:91:9e:b1:68:16:25:2f:ff:
                    cf:57:8a:df:7d:36:30:1b:f2:90:5d:5c:e7:4e:4e:
                    72:f7:ff:f1:68:ca:a2:03:2c:16:86:79:e3:ec:8f:
                    27:31:2b:34:1c:86:b6:8e:07:ef:cf:ca:03:5e:1b:
                    c9:3b:9a:07:29:84:c0:79:b8:48:8d:b7:9e:1e:bd:
                    5d:00:4a:1f:4a:7e:dd:32:fd:9a:28:c9:f4:f4:b5:
                    3b:1d:c7:2b:95:42:f7:7f:4c:ce:98:dd:ce:f1:8d:
                    b3:9b:d8:48:dd:f8:8c:97:cd:9c:68:27:2e:13:00:
                    03:b7:2f:ef:fe:bd:4a:84:15:59:03:37:f8:a3:32:
                    7e:5a:d1:10:bb:9b:3c:f6:e5:98:8e:69:58:ff:4b:
                    f3:6c:b6:1b:fe:64:a6:a0:05:e9:cd:96:bc:c7:38:
                    1f:f8:c9:a0:73:46:bd:ab:29:53:5b:a6:d0:e8:16:
                    1b:f3:41:81:a4:c1:b4:61:fd:e1:00:1d:5c:3e:d5:
                    e8:8b:88:af:1e:91:2b:a1:48:f3:c9:4e:ed:09:4c:
                    57:e2:58:cb:0b:85:0f:7e:06:b7:00:88:d7:b5:d4:
                    e7:a2:34:9a:23:f1:78:43:e6:27:6f:ae:64:f7:e4:
                    2c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F9:38:D4:CA:A9:EE:50:50:C9:43:BB:26:CD:CD:A3:EF:57:1B:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12d157d5-8385-3b7e-96a5-0c9b5a8b5c9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.59.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:8d:11:ff:fa:12:1f:5b:f4:9c:c1:43:4f:fb:0d:03:78:f3:
         75:02:64:60:8f:b0:f2:ff:66:18:dc:e7:b6:b8:65:63:cd:5d:
         0c:3b:79:2a:b9:12:8b:db:e6:e4:26:32:06:9b:db:74:af:66:
         1a:8d:b3:42:87:d5:ec:be:63:3b:97:cc:d7:9f:21:35:6f:39:
         6d:f7:80:3f:7b:62:e9:e6:71:b3:e6:2b:a0:39:72:71:58:5d:
         8c:a6:21:64:74:c5:81:8d:47:72:b8:32:d2:09:64:eb:4c:d2:
         aa:05:b3:4d:2b:33:b6:21:17:dd:e5:0e:90:58:6c:42:a9:a1:
         cf:02:74:f5:07:29:d5:f3:c6:a4:12:e6:46:43:8e:53:f2:57:
         d6:c2:7f:d1:04:50:1a:eb:72:81:e6:96:c4:17:d4:22:de:23:
         86:98:95:7f:f4:97:25:4a:f3:1e:3f:b5:eb:bc:54:5d:34:96:
         cd:15:da:fd:c0:50:a8:76:5c:55:e5:4f:6a:e7:9d:cd:01:f6:
         04:d0:82:a5:b2:f7:6b:10:5c:5d:a2:50:80:f2:e4:f3:62:5c:
         b5:80:43:91:d1:5f:5b:ea:a7:0b:54:58:4c:ef:7e:65:12:bc:
         77:2c:2d:a6:8b:69:82:54:64:a2:42:ad:06:48:cf:13:7d:f4:
         ad:98:f8:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebdG9mAVcS3LGp8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
MDRmMmQ1ZDctMzJhZS00ZDEzLWE2ZTktMDEzNWYwNWE2NWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaG95N259Yk/bWLijHdYHkxdCuR0kZ6xaBYl
L//PV4rffTYwG/KQXVznTk5y9//xaMqiAywWhnnj7I8nMSs0HIa2jgfvz8oDXhvJ
O5oHKYTAebhIjbeeHr1dAEofSn7dMv2aKMn09LU7HccrlUL3f0zOmN3O8Y2zm9hI
3fiMl82caCcuEwADty/v/r1KhBVZAzf4ozJ+WtEQu5s89uWYjmlY/0vzbLYb/mSm
oAXpzZa8xzgf+Mmgc0a9qylTW6bQ6BYb80GBpMG0Yf3hAB1cPtXoi4ivHpEroUjz
yU7tCUxX4ljLC4UPfga3AIjXtdTnojSaI/F4Q+Ynb65k9+QsVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPT5ONTKqe5QUMlDuybNzaPvVxtCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTJkMTU3ZDUtODM4NS0z
YjdlLTk2YTUtMGM5YjVhOGI1YzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYjsoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG+NEf/6Eh9b9JzBQ0/7DQN483UCZGCPsPL/Zhjc57a4ZWPNXQw7eSq5
Eovb5uQmMgab23SvZhqNs0KH1ey+YzuXzNefITVvOW33gD97YunmcbPmK6A5cnFY
XYymIWR0xYGNR3K4MtIJZOtM0qoFs00rM7YhF93lDpBYbEKpoc8CdPUHKdXzxqQS
5kZDjlPyV9bCf9EEUBrrcoHmlsQX1CLeI4aYlX/0lyVK8x4/teu8VF00ls0V2v3A
UKh2XFXlT2rnnc0B9gTQgqWy92sQXF2iUIDy5PNiXLWAQ5HRX1vqpwtUWEzvfmUS
vHcsLaaLaYJUZKJCrQZIzxN99K2Y+LM=
-----END CERTIFICATE-----