Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad38365d-15c6-38b5-af39-e95aa959d99e.roa
File:                     ad38365d-15c6-38b5-af39-e95aa959d99e.roa (raw, json)
Hash identifier:          /9d9fh4uGyCQ+xuAWgdq2jjIds6GzCWbgwiolO+QBrs=
Subject key identifier:   31:91:CC:D9:01:D7:63:CC:58:8A:7C:D9:DE:62:72:87:05:33:2D:9C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB17975E8446F935B20F840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad38365d-15c6-38b5-af39-e95aa959d99e.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        67.180.24.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:79:75:e8:44:6f:93:5b:20:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=da55db75-1071-4673-b822-98b1f2e30370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a9:db:5f:0e:25:88:28:a1:2e:76:2b:4b:a7:
                    b5:fa:2f:ed:2f:75:45:cf:5d:27:74:a9:fd:a5:3c:
                    a9:0e:56:e4:80:e6:eb:91:a5:04:30:75:52:92:e3:
                    3b:c2:7e:fb:07:33:49:59:a9:0f:71:87:25:a7:38:
                    5f:24:7e:47:e6:7a:0f:e4:5a:66:64:ec:ea:51:3c:
                    23:e9:a8:24:12:1b:34:81:17:27:8d:4a:05:a5:36:
                    e8:08:de:d4:17:14:e3:6f:e0:59:ed:8a:0a:a2:8d:
                    2c:36:bc:e3:9c:19:e4:96:6f:ea:b2:ac:dd:91:4d:
                    7b:86:2a:3a:c1:96:31:aa:44:2d:85:66:d3:d1:f9:
                    b6:13:86:4b:97:3f:29:60:3b:f2:9b:e9:d1:4a:73:
                    3b:cb:95:01:25:cd:6b:02:8c:53:30:ae:61:a2:49:
                    46:24:f7:2b:93:07:94:06:18:c7:5e:2d:cf:f3:4b:
                    1f:91:e1:ff:e7:e4:59:85:a2:04:db:c2:12:bf:c3:
                    64:b9:40:e3:34:f0:13:f5:8d:03:20:47:4b:73:b6:
                    54:ab:3b:4a:fa:6c:f1:c9:93:48:9e:cc:38:c6:05:
                    bb:20:a6:32:35:0f:e6:15:6d:71:45:01:7d:a1:b5:
                    9d:3a:1b:c6:f7:ef:64:39:de:78:6a:f1:f5:2a:97:
                    ba:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:91:CC:D9:01:D7:63:CC:58:8A:7C:D9:DE:62:72:87:05:33:2D:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad38365d-15c6-38b5-af39-e95aa959d99e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.180.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:98:06:7f:2f:20:5b:b2:26:df:0a:82:df:9e:a9:94:e4:3a:
         2c:d9:c9:7e:4e:07:e5:fc:32:90:88:38:eb:2d:8b:0f:ad:ce:
         31:11:31:7a:29:76:3c:46:04:2a:92:f8:82:bb:50:fd:bd:53:
         36:ce:7a:ea:3f:e0:04:70:4e:53:a5:37:e3:5f:18:8a:a1:80:
         29:75:d2:b9:3e:eb:30:1e:6d:1d:69:f8:7b:27:20:c8:b7:78:
         98:c0:b7:93:56:82:bd:1a:0d:6b:59:fe:c8:5b:ba:76:da:38:
         52:f9:aa:ce:cc:4d:2e:0e:e9:cb:22:c5:dc:f5:ca:04:6b:c3:
         e3:c9:4d:86:ee:02:e6:59:db:b8:e1:aa:b4:78:da:06:3d:99:
         88:eb:17:18:cf:c4:5b:3a:23:98:9f:ff:4c:08:12:5d:9d:9f:
         89:93:d2:2a:b9:ca:4f:69:a0:e2:4f:ac:20:00:da:16:e7:48:
         e1:d5:56:ec:28:c4:f3:83:5e:1a:7c:24:a8:1f:b1:9a:cc:b3:
         00:36:73:0a:91:e5:13:cb:28:f5:f4:72:76:24:ee:d1:f9:1d:
         9c:79:36:cf:32:6f:d2:1a:77:90:db:b8:0d:2f:89:eb:fb:6f:
         cd:c0:22:fc:a8:89:93:ad:78:fb:88:d2:c5:dd:da:ee:6b:0f:
         53:f9:73:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssXl16ERvk1sg+EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZGE1NWRiNzUtMTA3MS00NjczLWI4MjItOThiMWYyZTMwMzcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qnbXw4liCihLnYrS6e1+i/tL3VFz10ndKn9
pTypDlbkgObrkaUEMHVSkuM7wn77BzNJWakPcYclpzhfJH5H5noP5FpmZOzqUTwj
6agkEhs0gRcnjUoFpTboCN7UFxTjb+BZ7YoKoo0sNrzjnBnklm/qsqzdkU17hio6
wZYxqkQthWbT0fm2E4ZLlz8pYDvym+nRSnM7y5UBJc1rAoxTMK5hoklGJPcrkweU
BhjHXi3P80sfkeH/5+RZhaIE28ISv8NkuUDjNPAT9Y0DIEdLc7ZUqztK+mzxyZNI
nsw4xgW7IKYyNQ/mFW1xRQF9obWdOhvG9+9kOd54avH1Kpe6JwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDGRzNkB12PMWIp82d5icocFMy2cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWQzODM2NWQtMTVjNi0z
OGI1LWFmMzktZTk1YWE5NTlkOTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ7QYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJKYBn8vIFuyJt8Kgt+eqZTkOizZyX5OB+X8MpCIOOstiw+tzjERMXop
djxGBCqS+IK7UP29UzbOeuo/4ARwTlOlN+NfGIqhgCl10rk+6zAebR1p+HsnIMi3
eJjAt5NWgr0aDWtZ/shbunbaOFL5qs7MTS4O6csixdz1ygRrw+PJTYbuAuZZ27jh
qrR42gY9mYjrFxjPxFs6I5if/0wIEl2dn4mT0iq5yk9poOJPrCAA2hbnSOHVVuwo
xPODXhp8JKgfsZrMswA2cwqR5RPLKPX0cnYk7tH5HZx5Ns8yb9Iad5DbuA0viev7
b83AIvyoiZOtePuI0sXd2u5rD1P5c9k=
-----END CERTIFICATE-----