Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19ce7062-b312-3445-864c-6fc5ecedc107.roa
File:                     19ce7062-b312-3445-864c-6fc5ecedc107.roa (raw, json)
Hash identifier:          Yc724p/H4TUvJS8YIx2VtBbbxyJ9g/pcOJVUbXSheIo=
Subject key identifier:   46:1D:46:93:7F:17:0A:52:DB:E0:73:B6:F6:5D:9F:59:4C:DE:D7:EA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB0D3FB6A318D374405FDE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19ce7062-b312-3445-864c-6fc5ecedc107.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        68.44.232.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:d3:fb:6a:31:8d:37:44:05:fd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=7b9b08cd-54a2-4584-8ed8-129bc824916f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:20:2d:50:0e:78:fe:f1:bf:e9:13:07:7d:80:
                    e6:cd:48:98:99:3b:db:4f:99:79:d2:8d:f7:33:28:
                    34:19:f6:18:86:54:09:31:43:39:76:38:5c:03:35:
                    b8:44:b3:52:d0:3a:17:49:7c:7c:d9:a1:31:a0:db:
                    ff:f7:a0:fc:6f:6f:5c:da:de:b2:0f:31:fe:5e:e2:
                    a6:00:e8:71:73:e2:c4:ae:95:3b:98:70:4d:eb:30:
                    6d:a7:9d:00:60:de:81:1e:da:d6:42:60:f5:af:7d:
                    b7:98:45:6e:45:c2:4e:d4:b3:27:84:47:90:f1:78:
                    9c:a4:d1:e0:e3:15:7d:8e:48:19:09:f5:d1:21:1f:
                    d3:fc:28:21:a3:e6:e0:50:20:74:0f:06:9f:d1:d9:
                    08:fa:12:b5:94:3f:4d:f3:68:5c:a2:a2:18:fa:85:
                    56:be:dc:0f:51:b2:2f:e7:5a:f0:3f:02:dd:3a:92:
                    b6:04:3b:50:d9:fe:30:7d:a0:ce:90:27:30:c8:31:
                    ee:63:e6:72:69:04:b2:0c:a7:3e:24:d8:d4:cf:56:
                    25:13:63:9b:fc:64:76:17:97:38:ba:29:3e:ae:c3:
                    98:2f:3f:c6:4e:dd:17:fd:97:b4:1e:91:14:42:25:
                    c9:9b:5a:e8:f0:a9:c3:67:52:32:ea:c7:9f:65:7a:
                    f0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1D:46:93:7F:17:0A:52:DB:E0:73:B6:F6:5D:9F:59:4C:DE:D7:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19ce7062-b312-3445-864c-6fc5ecedc107.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.44.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:95:f9:7b:1b:4f:79:74:28:eb:50:c1:5b:76:2b:c9:1b:92:
         54:fe:a7:68:69:1a:ee:05:b6:ca:b0:cd:88:cd:57:55:3a:e1:
         a1:36:f1:69:0c:09:68:a7:2a:50:c5:f6:9f:9b:5f:d3:e6:07:
         10:52:14:af:3a:48:bf:c6:19:ac:a7:64:88:3c:37:c8:55:5b:
         44:55:64:15:ae:7f:23:a2:c3:fc:a9:ab:3f:88:89:77:27:7f:
         9b:93:33:11:ff:4c:78:0c:99:28:b2:90:fe:6d:8c:c4:25:0b:
         14:6c:4d:04:49:02:c8:0c:8a:56:cf:6b:48:56:5f:cb:2b:93:
         6b:c8:a8:40:e8:d0:e2:30:6a:51:ac:17:c0:50:59:66:b1:e6:
         08:72:1a:39:69:b3:64:2e:15:57:fb:28:89:9b:50:fe:71:78:
         62:b5:cc:ff:2e:23:0d:5e:5a:26:fc:19:cb:79:ec:c1:8a:e2:
         9c:e1:e8:c2:e1:24:8c:c1:d2:44:4f:d1:3d:e3:7b:d8:4d:81:
         6c:be:d9:13:40:11:8a:ae:30:de:0a:19:c4:e0:4c:ac:9e:c8:
         af:9a:2f:f3:68:fb:84:a3:ad:06:12:8b:8e:f1:48:d9:8c:b2:
         e5:73:cd:24:c8:b0:c5:7f:7f:e9:34:9c:34:d8:3c:2b:27:f1:
         41:f9:44:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssNP7ajGNN0QF/eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
N2I5YjA4Y2QtNTRhMi00NTg0LThlZDgtMTI5YmM4MjQ5MTZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSAtUA54/vG/6RMHfYDmzUiYmTvbT5l50o33
Myg0GfYYhlQJMUM5djhcAzW4RLNS0DoXSXx82aExoNv/96D8b29c2t6yDzH+XuKm
AOhxc+LErpU7mHBN6zBtp50AYN6BHtrWQmD1r323mEVuRcJO1LMnhEeQ8XicpNHg
4xV9jkgZCfXRIR/T/Cgho+bgUCB0Dwaf0dkI+hK1lD9N82hcoqIY+oVWvtwPUbIv
51rwPwLdOpK2BDtQ2f4wfaDOkCcwyDHuY+ZyaQSyDKc+JNjUz1YlE2Ob/GR2F5c4
uik+rsOYLz/GTt0X/Ze0HpEUQiXJm1ro8KnDZ1Iy6sefZXrwQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEYdRpN/FwpS2+BztvZdn1lM3tfqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTljZTcwNjItYjMxMi0z
NDQ1LTg2NGMtNmZjNWVjZWRjMTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCzoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANyV+XsbT3l0KOtQwVt2K8kbklT+p2hpGu4FtsqwzYjNV1U64aE28WkM
CWinKlDF9p+bX9PmBxBSFK86SL/GGaynZIg8N8hVW0RVZBWufyOiw/ypqz+IiXcn
f5uTMxH/THgMmSiykP5tjMQlCxRsTQRJAsgMilbPa0hWX8srk2vIqEDo0OIwalGs
F8BQWWax5ghyGjlps2QuFVf7KImbUP5xeGK1zP8uIw1eWib8Gct57MGK4pzh6MLh
JIzB0kRP0T3je9hNgWy+2RNAEYquMN4KGcTgTKyeyK+aL/No+4SjrQYSi47xSNmM
suVzzSTIsMV/f+k0nDTYPCsn8UH5RBQ=
-----END CERTIFICATE-----