Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/225619c0-8d49-3946-9f71-0b86fe84c31d.roa
File:                     225619c0-8d49-3946-9f71-0b86fe84c31d.roa (raw, json)
Hash identifier:          7jBmbObWmv1z4of+386KJ6bcOqpk4F7AR0BQR/LlOsU=
Subject key identifier:   52:B3:31:48:A8:BA:A6:96:45:D1:45:68:02:CE:C2:EE:F4:A1:4F:0D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F84ABCD5552856E0E49600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/225619c0-8d49-3946-9f71-0b86fe84c31d.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33490
IP address blocks:        98.246.118.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:4a:bc:d5:55:28:56:e0:e4:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=e10cd73c-9a8c-497d-bd05-1a10ed3fd77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:53:00:da:6c:09:f8:19:ff:ae:49:d1:a4:9e:
                    ed:b5:9a:ab:17:a4:5f:eb:a1:3f:95:a9:91:31:28:
                    56:f2:11:8d:cb:d5:e0:20:c1:9b:35:f0:7d:15:66:
                    9d:e9:d1:72:66:40:09:54:79:87:0e:19:75:72:5e:
                    d4:ff:d4:f7:ec:7a:d9:e6:63:8c:cd:0f:cf:7c:05:
                    64:8e:77:06:d6:5b:12:ce:69:6a:aa:88:bc:31:95:
                    2c:fe:6e:93:51:d0:25:d7:1f:e0:ca:3b:65:3e:aa:
                    b2:c0:6e:91:00:e0:58:2f:4f:36:69:fd:22:de:71:
                    82:5f:75:96:ce:12:e0:88:66:ac:67:5e:85:69:f6:
                    e5:16:97:6c:6f:1c:10:4b:ae:4f:0f:95:44:c7:c4:
                    c1:48:14:e2:82:22:a9:d2:0e:88:6d:f0:91:5a:51:
                    db:13:61:5f:3e:36:9f:e5:2c:44:19:56:21:82:80:
                    c1:e6:af:d9:8d:c1:41:7b:88:7a:d9:a5:6f:e8:50:
                    a7:45:f9:d8:58:7d:ae:db:06:fe:ca:6f:d3:c0:a6:
                    e5:20:d8:65:1c:2b:10:5e:f7:10:06:98:28:fe:d4:
                    86:38:c8:a3:62:8a:cf:68:54:62:67:db:81:45:03:
                    d1:6c:a7:af:9d:2c:2f:12:75:44:8f:7e:37:bf:87:
                    53:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B3:31:48:A8:BA:A6:96:45:D1:45:68:02:CE:C2:EE:F4:A1:4F:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/225619c0-8d49-3946-9f71-0b86fe84c31d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.246.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:c7:80:2b:3e:2c:e8:98:bf:0b:be:9b:84:2c:7d:72:f9:61:
         66:19:0e:45:95:71:03:82:db:43:52:10:d3:3b:26:be:34:f4:
         a1:eb:ff:b5:d3:f5:c3:87:52:47:90:a4:5e:2f:b5:86:54:fb:
         a0:88:42:8e:2a:41:fc:2a:c9:a5:66:ce:39:bb:72:3c:7c:ea:
         2b:43:f5:f4:2d:9b:f9:e8:a4:21:18:de:87:4f:80:d0:0b:49:
         03:3b:d9:b5:59:23:c9:59:07:2c:1a:dd:84:a6:dd:62:e5:21:
         35:39:46:36:33:ef:65:3d:0b:9c:c7:a0:c1:d4:34:2b:cc:3c:
         dc:af:ef:1c:c2:87:f2:4b:37:f8:4b:6d:c4:a7:39:c5:21:c4:
         59:da:a0:df:99:14:a3:7b:24:76:e6:2e:0f:0d:8d:bd:39:6c:
         04:a7:c8:e9:00:f8:cf:a0:22:13:5b:09:7e:a1:2c:24:a9:0a:
         da:e6:3e:6c:f5:22:21:25:47:8d:42:dd:d9:ce:bd:ca:9a:b2:
         f7:64:85:e6:32:34:e5:e2:5e:2e:0b:e7:0d:04:5e:84:17:5a:
         ca:b3:cd:46:68:5f:43:28:96:28:1b:21:35:25:80:3d:58:17:
         f3:7d:ca:cb:f8:ac:6a:f3:28:db:bb:73:24:c6:53:24:69:b8:
         32:ea:d8:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+Eq81VUoVuDklgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
ZTEwY2Q3M2MtOWE4Yy00OTdkLWJkMDUtMWExMGVkM2ZkNzdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFMA2mwJ+Bn/rknRpJ7ttZqrF6Rf66E/lamR
MShW8hGNy9XgIMGbNfB9FWad6dFyZkAJVHmHDhl1cl7U/9T37HrZ5mOMzQ/PfAVk
jncG1lsSzmlqqoi8MZUs/m6TUdAl1x/gyjtlPqqywG6RAOBYL082af0i3nGCX3WW
zhLgiGasZ16FafblFpdsbxwQS65PD5VEx8TBSBTigiKp0g6IbfCRWlHbE2FfPjaf
5SxEGVYhgoDB5q/ZjcFBe4h62aVv6FCnRfnYWH2u2wb+ym/TwKblINhlHCsQXvcQ
Bpgo/tSGOMijYorPaFRiZ9uBRQPRbKevnSwvEnVEj343v4dT/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFKzMUiouqaWRdFFaALOwu70oU8NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjI1NjE5YzAtOGQ0OS0z
OTQ2LTlmNzEtMGI4NmZlODRjMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvZ2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIXHgCs+LOiYvwu+m4QsfXL5YWYZDkWVcQOC20NSENM7Jr409KHr/7XT
9cOHUkeQpF4vtYZU+6CIQo4qQfwqyaVmzjm7cjx86itD9fQtm/nopCEY3odPgNAL
SQM72bVZI8lZBywa3YSm3WLlITU5RjYz72U9C5zHoMHUNCvMPNyv7xzCh/JLN/hL
bcSnOcUhxFnaoN+ZFKN7JHbmLg8Njb05bASnyOkA+M+gIhNbCX6hLCSpCtrmPmz1
IiElR41C3dnOvcqasvdkheYyNOXiXi4L5w0EXoQXWsqzzUZoX0MoligbITUlgD1Y
F/N9ysv4rGrzKNu7cyTGUyRpuDLq2P8=
-----END CERTIFICATE-----