Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3feb386c-c339-378f-8932-30a790f574a8.roa
File:                     3feb386c-c339-378f-8932-30a790f574a8.roa (raw, json)
Hash identifier:          xLLaqgsqOKtoCyYkg7MjryDDjxfUYSdu0QG5NpAiLzU=
Subject key identifier:   63:26:46:D8:67:8C:D4:09:F3:CA:DB:FD:49:4D:D9:E9:64:F6:56:DE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6CE2612B9882C0A7726764
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3feb386c-c339-378f-8932-30a790f574a8.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     22909
IP address blocks:        68.53.52.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:e2:61:2b:98:82:c0:a7:72:67:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=6f02e4d8-4651-47b1-8378-d5b394ee81ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c4:dc:f9:98:ba:94:4e:82:b0:bd:ef:da:17:
                    24:90:2f:0a:e8:38:3c:fe:ca:8b:83:80:7c:2f:31:
                    19:95:43:37:ab:41:70:05:69:68:c1:26:f0:31:1f:
                    6e:10:41:7e:dc:d3:d5:22:69:b3:c6:25:0a:8a:96:
                    e9:6b:f2:47:31:b1:ba:75:fc:b2:35:da:4a:7f:41:
                    b5:b9:42:98:fb:45:1a:c7:e2:a2:59:18:75:59:ba:
                    af:0e:24:8a:23:1a:e2:a5:2b:df:a8:51:96:ef:b0:
                    47:a0:c0:54:d8:e0:2d:2e:aa:67:b7:37:77:3f:d6:
                    c7:f4:e3:f8:6a:01:83:60:29:07:b7:25:56:4c:94:
                    ac:4a:33:97:0a:69:57:de:45:db:05:f8:0a:e9:2d:
                    b0:2e:56:0d:54:35:34:65:92:be:88:94:4e:56:bc:
                    fc:47:a2:a6:2c:a5:70:35:1c:9f:27:c4:2e:63:6f:
                    f9:c6:cc:ed:88:f0:d0:31:eb:9a:c1:e6:ff:42:62:
                    e2:1a:c0:cf:b5:62:0d:2c:0d:c8:8b:77:aa:6c:8e:
                    ba:88:96:05:8b:26:fb:d1:37:3a:fd:6a:39:58:1d:
                    7d:14:26:0c:a5:0f:32:71:0b:7a:05:81:0c:ab:7c:
                    34:7b:e0:13:14:29:f4:6b:b0:90:56:de:49:8c:db:
                    84:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:26:46:D8:67:8C:D4:09:F3:CA:DB:FD:49:4D:D9:E9:64:F6:56:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3feb386c-c339-378f-8932-30a790f574a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.53.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:2a:e6:9b:ad:e0:ff:1e:1b:fd:0a:00:8f:5b:36:5a:aa:0e:
         82:a3:17:51:2b:ab:3e:b9:eb:f1:25:a3:b8:1e:6d:97:6a:1d:
         25:13:97:a9:f2:54:a1:66:6d:bf:1d:61:f3:0e:2e:d5:d3:8e:
         7f:44:55:6c:0c:5c:03:b4:15:6d:6e:06:fe:a3:ac:aa:c7:96:
         fc:4a:0b:a8:3e:c1:28:1f:ab:27:e1:97:d3:eb:d7:a9:f6:67:
         5c:02:e6:eb:36:35:e6:a0:d6:e7:e2:c4:ef:d4:0e:ed:fb:89:
         e7:84:e4:c6:df:69:71:53:98:dd:d1:69:3f:4d:2c:3b:f8:cc:
         cb:72:a6:cd:67:1a:44:90:6c:8f:eb:e3:30:6e:14:ce:b2:00:
         42:ca:90:85:a5:a4:e2:73:4d:8e:b9:1a:cf:7b:9d:ef:c4:32:
         a0:af:bc:ca:95:be:94:39:97:03:7b:31:5c:97:03:21:6b:bf:
         f1:48:b8:00:a2:ae:e9:29:26:c6:be:f3:03:eb:a7:85:ef:df:
         49:40:ec:a5:ca:ea:e6:6e:aa:c2:0d:b7:5b:4a:7b:63:7a:53:
         12:27:7e:8d:33:ec:87:58:d3:f0:05:b3:ed:8c:0e:ca:94:12:
         89:d0:7e:fe:1d:a3:78:19:8f:63:91:e7:03:13:18:70:cf:bf:
         b5:0f:20:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebOJhK5iCwKdyZ2QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
NmYwMmU0ZDgtNDY1MS00N2IxLTgzNzgtZDViMzk0ZWU4MWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsTc+Zi6lE6CsL3v2hckkC8K6Dg8/sqLg4B8
LzEZlUM3q0FwBWlowSbwMR9uEEF+3NPVImmzxiUKipbpa/JHMbG6dfyyNdpKf0G1
uUKY+0Uax+KiWRh1WbqvDiSKIxripSvfqFGW77BHoMBU2OAtLqpntzd3P9bH9OP4
agGDYCkHtyVWTJSsSjOXCmlX3kXbBfgK6S2wLlYNVDU0ZZK+iJROVrz8R6KmLKVw
NRyfJ8QuY2/5xsztiPDQMeuaweb/QmLiGsDPtWINLA3Ii3eqbI66iJYFiyb70Tc6
/Wo5WB19FCYMpQ8ycQt6BYEMq3w0e+ATFCn0a7CQVt5JjNuEMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGMmRthnjNQJ88rb/UlN2elk9lbeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2ZlYjM4NmMtYzMzOS0z
NzhmLTg5MzItMzBhNzkwZjU3NGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDU0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAgq5put4P8eG/0KAI9bNlqqDoKjF1Erqz656/Elo7gebZdqHSUTl6ny
VKFmbb8dYfMOLtXTjn9EVWwMXAO0FW1uBv6jrKrHlvxKC6g+wSgfqyfhl9Pr16n2
Z1wC5us2Neag1ufixO/UDu37ieeE5MbfaXFTmN3RaT9NLDv4zMtyps1nGkSQbI/r
4zBuFM6yAELKkIWlpOJzTY65Gs97ne/EMqCvvMqVvpQ5lwN7MVyXAyFrv/FIuACi
rukpJsa+8wPrp4Xv30lA7KXK6uZuqsINt1tKe2N6UxInfo0z7IdY0/AFs+2MDsqU
EonQfv4do3gZj2OR5wMTGHDPv7UPIPc=
-----END CERTIFICATE-----