Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/721a5b11-ef3f-39b7-a62a-8ce1adb4e6b4.roa
File:                     721a5b11-ef3f-39b7-a62a-8ce1adb4e6b4.roa (raw, json)
Hash identifier:          Oktr2Kh6g+KtnRqW3sKN4eH/GG4TaQRHpf/LkmPgOtQ=
Subject key identifier:   44:85:3D:21:F9:5D:BC:1B:D8:04:7B:90:98:F9:3B:6E:F0:BB:BC:A3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB18092D94B55082C36F180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/721a5b11-ef3f-39b7-a62a-8ce1adb4e6b4.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        71.204.160.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:80:92:d9:4b:55:08:2c:36:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=a6ce14bb-50dc-4edd-be19-daf248c5e460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d0:e0:ad:ce:ce:d9:d3:47:df:23:fa:08:e2:
                    18:0a:ea:77:a6:ac:d5:3f:d5:ec:75:09:d7:92:c5:
                    5c:fe:aa:5c:9c:19:01:3b:ca:a1:98:52:92:15:98:
                    3e:5e:51:19:3b:90:60:45:33:b1:b4:75:e0:c1:e1:
                    27:95:10:7c:f0:e8:5f:24:2a:16:79:c2:c8:16:49:
                    58:c7:a8:f5:ff:32:f3:5b:71:f6:95:f3:b9:84:ae:
                    b1:11:43:69:10:0b:f4:09:db:cb:95:12:73:2e:d9:
                    72:a1:08:a3:21:8f:8f:f6:4c:f5:a7:4e:86:e0:5f:
                    88:17:a9:cf:a7:b5:63:50:2c:ea:82:f8:2e:cd:c1:
                    5c:a7:ef:6e:23:fe:d0:f9:84:1d:a5:e4:48:77:fc:
                    02:f9:e5:d1:91:11:ad:be:a7:d2:eb:1b:dd:56:88:
                    89:a7:2b:1d:63:6e:63:07:19:4e:90:e3:1f:e3:43:
                    2a:e8:96:a5:d8:2c:0c:99:04:26:18:29:0f:6b:8d:
                    09:41:57:44:bc:86:76:04:0f:81:03:8b:2b:8b:30:
                    cb:7b:26:21:7d:48:e7:72:f8:a1:4c:83:8d:0b:bc:
                    c2:df:d2:41:79:d3:f4:e5:5c:6a:05:07:35:21:79:
                    ba:50:15:7d:ac:49:13:ef:85:d3:8f:29:30:4d:fc:
                    5a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:85:3D:21:F9:5D:BC:1B:D8:04:7B:90:98:F9:3B:6E:F0:BB:BC:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/721a5b11-ef3f-39b7-a62a-8ce1adb4e6b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.204.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:d3:07:23:5a:3c:d5:3b:5a:b6:06:b5:12:30:7e:3b:95:e3:
         76:db:6b:59:8e:de:c1:39:1c:3c:d3:b4:21:ca:65:43:75:7c:
         3a:c5:a8:8a:f1:13:40:bb:d8:b7:da:98:7d:0d:31:f4:3f:82:
         21:d0:82:70:64:ae:ff:e6:4a:2c:5f:32:02:ea:9c:c2:50:0c:
         43:2c:2c:29:86:1c:4c:fe:eb:9f:53:10:8f:e0:9a:af:f8:9b:
         a7:2e:66:d8:0b:4b:2c:99:94:73:c3:90:49:41:c6:1d:0c:19:
         cb:08:59:8f:b4:46:3b:0c:0a:0b:a8:ae:f4:f0:07:6b:c0:ad:
         fe:e4:da:63:83:39:4e:a5:1a:42:1f:54:3f:62:bd:2c:23:48:
         dd:40:ef:96:84:c5:d1:75:14:f6:98:10:a2:30:9f:86:3e:16:
         37:64:b5:11:ab:a2:3a:97:8c:4f:7f:69:bd:ae:91:eb:14:8f:
         46:b2:9f:1d:24:4b:13:74:b4:68:80:81:df:f9:ea:26:d2:08:
         f6:34:64:4b:b6:db:20:f9:40:28:34:c6:52:a4:4c:ae:5a:3e:
         e9:2f:5e:49:04:58:17:5a:1d:d9:32:c7:7f:4e:87:9e:1f:22:
         b4:0e:d1:d9:97:5a:dd:fa:d2:5d:22:10:13:f4:e2:ba:76:aa:
         5e:4c:68:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssYCS2UtVCCw28YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
YTZjZTE0YmItNTBkYy00ZWRkLWJlMTktZGFmMjQ4YzVlNDYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltDgrc7O2dNH3yP6COIYCup3pqzVP9XsdQnX
ksVc/qpcnBkBO8qhmFKSFZg+XlEZO5BgRTOxtHXgweEnlRB88OhfJCoWecLIFklY
x6j1/zLzW3H2lfO5hK6xEUNpEAv0CdvLlRJzLtlyoQijIY+P9kz1p06G4F+IF6nP
p7VjUCzqgvguzcFcp+9uI/7Q+YQdpeRId/wC+eXRkRGtvqfS6xvdVoiJpysdY25j
BxlOkOMf40Mq6Jal2CwMmQQmGCkPa40JQVdEvIZ2BA+BA4srizDLeyYhfUjncvih
TIONC7zC39JBedP05VxqBQc1IXm6UBV9rEkT74XTjykwTfxaAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFESFPSH5Xbwb2AR7kJj5O27wu7yjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzIxYTViMTEtZWYzZi0z
OWI3LWE2MmEtOGNlMWFkYjRlNmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8ygMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALPTByNaPNU7WrYGtRIwfjuV43bba1mO3sE5HDzTtCHKZUN1fDrFqIrx
E0C72LfamH0NMfQ/giHQgnBkrv/mSixfMgLqnMJQDEMsLCmGHEz+659TEI/gmq/4
m6cuZtgLSyyZlHPDkElBxh0MGcsIWY+0RjsMCguorvTwB2vArf7k2mODOU6lGkIf
VD9ivSwjSN1A75aExdF1FPaYEKIwn4Y+FjdktRGrojqXjE9/ab2ukesUj0aynx0k
SxN0tGiAgd/56ibSCPY0ZEu22yD5QCg0xlKkTK5aPukvXkkEWBdaHdkyx39Oh54f
IrQO0dmXWt360l0iEBP04rp2ql5MaOw=
-----END CERTIFICATE-----