Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d98780c2-d0f7-3d33-b426-3e7287545fce.roa
File:                     d98780c2-d0f7-3d33-b426-3e7287545fce.roa (raw, json)
Hash identifier:          DymrpmooZ1yiAz4v7X1uUUZIs0kms11YiMF9aYIPq9s=
Subject key identifier:   3C:96:E8:27:E3:71:3B:F7:0D:C4:B6:84:C0:86:84:7D:E7:52:8E:26
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F6BB9F43978E576867E600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d98780c2-d0f7-3d33-b426-3e7287545fce.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33490
IP address blocks:        71.236.210.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:bb:9f:43:97:8e:57:68:67:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=c24c60d9-8ee2-4508-8b6e-a6b51d7d44ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:60:3c:27:e9:48:a3:51:a2:5b:a8:0b:1e:e4:
                    ad:f8:be:d0:99:3f:9e:16:11:82:a5:26:de:2e:ce:
                    63:fa:e1:6f:c7:ae:7d:d5:86:b3:27:59:84:c2:f2:
                    cc:d5:ff:98:a5:d4:37:f6:a1:f3:4d:3a:10:d8:ee:
                    00:c8:f0:d6:32:1d:7d:4e:0b:5f:90:5a:10:c3:7a:
                    69:0d:e7:ab:95:0b:ab:7c:f0:26:87:df:b6:af:7b:
                    f2:8d:e4:7c:e1:81:4d:c5:4e:84:05:e2:64:2c:fd:
                    51:08:35:2d:b5:dd:52:72:89:ff:b0:82:d7:ce:0f:
                    37:8b:e9:8b:c6:0c:04:d8:26:d8:1c:62:73:ad:8c:
                    d2:96:93:17:98:08:af:d0:8e:f5:ab:51:42:22:5e:
                    4a:ce:33:fa:2e:b4:5f:24:2b:11:e4:ff:d1:9b:56:
                    b1:e4:5c:64:35:bd:35:0c:40:99:0f:2b:3e:c8:ba:
                    1d:47:6f:6a:b3:4c:fe:e3:7e:b4:e6:89:b0:d5:9a:
                    1c:e8:d3:5b:65:da:aa:e2:56:39:5b:5e:a9:ce:32:
                    80:a1:3f:ec:ef:84:50:22:dc:29:39:8c:06:06:b7:
                    4b:c5:8c:90:04:03:c2:67:82:b3:ac:01:10:67:8c:
                    cf:85:e1:43:f9:d7:f1:0c:25:aa:6f:48:e7:56:20:
                    b9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:96:E8:27:E3:71:3B:F7:0D:C4:B6:84:C0:86:84:7D:E7:52:8E:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d98780c2-d0f7-3d33-b426-3e7287545fce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.236.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:41:ad:cf:31:f6:64:1e:e0:3f:5b:e0:91:70:05:4e:77:7a:
         55:22:4f:0f:2b:58:a9:c4:78:a8:c0:f9:18:ff:53:96:b8:37:
         e2:26:a7:e6:e8:11:58:99:b2:43:5a:c4:8f:c8:44:10:5a:3c:
         b9:1f:96:eb:66:91:c3:8f:42:14:bf:88:85:0a:24:c7:eb:57:
         3a:55:51:e9:35:80:2e:eb:8c:20:ba:29:8b:4e:14:ba:95:65:
         3f:e2:67:ba:bf:9d:07:5f:b2:e3:bc:50:9e:b5:ca:d1:6f:24:
         7e:3b:3c:56:0d:9a:54:0e:ac:5c:8f:b1:81:fa:7e:4d:41:2a:
         9a:a4:25:85:60:2e:2c:4f:c1:a5:4a:b7:8c:61:cb:5a:3a:b7:
         a2:bb:54:48:56:3c:cc:53:73:41:93:02:30:b7:2d:33:13:7f:
         a0:68:c2:85:0b:09:fb:b5:a9:f5:9d:34:51:df:5f:72:cb:7e:
         02:34:1b:51:ce:7d:f8:e1:e9:37:ec:61:54:0d:11:d8:b3:c8:
         76:3b:a2:5e:c0:a6:df:5a:1f:28:f3:8c:e3:96:11:ad:aa:3f:
         e7:d6:36:2a:c6:8e:8f:25:75:93:87:df:b3:20:1d:ec:08:93:
         89:1c:5f:12:57:0d:52:df:71:96:56:6e:9c:84:bb:91:82:4d:
         30:7b:ab:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09rufQ5eOV2hn5gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
YzI0YzYwZDktOGVlMi00NTA4LThiNmUtYTZiNTFkN2Q0NGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mA8J+lIo1GiW6gLHuSt+L7QmT+eFhGCpSbe
Ls5j+uFvx6591YazJ1mEwvLM1f+YpdQ39qHzTToQ2O4AyPDWMh19TgtfkFoQw3pp
DeerlQurfPAmh9+2r3vyjeR84YFNxU6EBeJkLP1RCDUttd1Scon/sILXzg83i+mL
xgwE2CbYHGJzrYzSlpMXmAiv0I71q1FCIl5KzjP6LrRfJCsR5P/Rm1ax5FxkNb01
DECZDys+yLodR29qs0z+43605omw1Zoc6NNbZdqq4lY5W16pzjKAoT/s74RQItwp
OYwGBrdLxYyQBAPCZ4KzrAEQZ4zPheFD+dfxDCWqb0jnViC5awIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDyW6CfjcTv3DcS2hMCGhH3nUo4mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDk4NzgwYzItZDBmNy0z
ZDMzLWI0MjYtM2U3Mjg3NTQ1ZmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+zSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG9Brc8x9mQe4D9b4JFwBU53elUiTw8rWKnEeKjA+Rj/U5a4N+Imp+bo
EViZskNaxI/IRBBaPLkflutmkcOPQhS/iIUKJMfrVzpVUek1gC7rjCC6KYtOFLqV
ZT/iZ7q/nQdfsuO8UJ61ytFvJH47PFYNmlQOrFyPsYH6fk1BKpqkJYVgLixPwaVK
t4xhy1o6t6K7VEhWPMxTc0GTAjC3LTMTf6BowoULCfu1qfWdNFHfX3LLfgI0G1HO
ffjh6TfsYVQNEdizyHY7ol7Apt9aHyjzjOOWEa2qP+fWNirGjo8ldZOH37MgHewI
k4kcXxJXDVLfcZZWbpyEu5GCTTB7qwc=
-----END CERTIFICATE-----