Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eba07100-5f73-310e-83ad-0738dac49363.roa
File:                     eba07100-5f73-310e-83ad-0738dac49363.roa (raw, json)
Hash identifier:          u/X36Yl2CdAejNTLS5aQQ9nidId5MWlv6qM99VPMz68=
Subject key identifier:   0F:8A:49:C2:F5:5A:8F:CF:29:A9:EC:79:01:ED:82:7C:07:F5:CF:16
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB0CE2566A6E7B17C71B480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eba07100-5f73-310e-83ad-0738dac49363.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        67.184.168.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:ce:25:66:a6:e7:b1:7c:71:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=1b7401b9-ac94-4718-b107-bb5092ac6014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:95:43:90:bf:95:90:3a:ad:c9:57:bb:c2:df:
                    74:cb:27:51:90:a6:33:9e:39:f6:85:0c:d9:0c:29:
                    1e:11:6e:d3:52:f4:aa:b8:65:9b:65:7e:a6:ab:cb:
                    15:df:f4:8a:1d:ce:c7:89:e0:aa:61:5d:ee:c3:9c:
                    f1:56:90:61:ab:0c:09:56:e3:3f:88:88:1a:a5:70:
                    d3:6f:97:1f:73:58:cc:4d:71:e7:85:53:bc:7f:1c:
                    2f:8d:2e:72:e6:21:40:2f:49:de:e0:cd:33:85:fa:
                    b0:32:a2:10:72:93:a4:3c:2f:4a:c9:b2:6a:48:cd:
                    09:31:86:bd:06:c1:fa:4d:6d:16:5a:19:fc:fd:93:
                    69:2e:46:85:4f:a8:f5:97:00:ad:b6:9e:3e:31:cf:
                    25:18:70:d8:4f:e1:8a:92:0c:af:60:7a:ea:c9:fe:
                    7b:ee:4d:5e:59:9d:e7:3b:c9:6c:60:62:1c:69:ee:
                    ba:a8:60:ca:12:34:84:f2:6e:97:0c:fe:72:20:85:
                    e0:9c:cd:4d:46:c3:21:84:4c:f8:43:b2:cc:e5:66:
                    8f:2f:8c:47:d8:3c:1f:63:c2:94:9a:17:97:50:79:
                    ce:8b:83:37:e7:d3:e0:cf:c8:83:4b:0b:47:aa:3e:
                    61:cb:7f:2a:ea:9a:7c:e7:0a:35:76:c4:e1:11:c0:
                    08:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8A:49:C2:F5:5A:8F:CF:29:A9:EC:79:01:ED:82:7C:07:F5:CF:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eba07100-5f73-310e-83ad-0738dac49363.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.184.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:4c:1f:4c:ca:0f:e8:da:fe:75:4f:45:3a:5c:e3:7e:b4:ed:
         e6:18:49:82:8d:11:9e:ae:56:8c:e7:c1:ef:7b:9b:4b:73:c1:
         91:03:4a:c9:81:f8:e8:d1:53:1b:d1:68:56:ff:dd:f0:9d:92:
         a5:16:71:0f:ac:62:25:a5:c7:d0:22:21:4c:0e:88:d8:92:62:
         88:80:9f:80:98:1a:93:18:08:b2:7f:17:0b:c3:f6:4d:7f:48:
         cd:73:26:69:c8:ad:ff:39:29:d3:46:41:fe:92:ed:07:3c:99:
         2a:33:5b:db:15:e8:1c:c1:b0:26:1a:67:9a:c2:9d:ac:00:68:
         53:11:2d:39:8e:d5:84:97:ee:0b:04:69:0a:ea:61:85:a2:a4:
         1e:76:da:ec:75:73:1d:19:2c:b6:0c:4e:c2:1f:44:7c:c6:78:
         9e:c8:d0:66:ec:90:04:e8:04:04:6c:cf:f2:b8:7e:c7:27:34:
         e3:11:de:8b:ec:83:07:e8:04:bb:a3:f9:7c:a6:8a:c6:71:8a:
         69:78:37:f8:66:c8:e4:64:dc:7e:12:0b:7a:24:31:1b:11:24:
         06:a2:e3:26:04:a9:d1:30:6b:d9:03:5b:fc:a2:04:83:18:13:
         e7:7d:2e:48:e9:df:84:65:f5:c1:97:2f:5d:a3:fb:a0:9f:8b:
         e9:e0:9d:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssM4lZqbnsXxxtIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MWI3NDAxYjktYWM5NC00NzE4LWIxMDctYmI1MDkyYWM2MDE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5VDkL+VkDqtyVe7wt90yydRkKYznjn2hQzZ
DCkeEW7TUvSquGWbZX6mq8sV3/SKHc7HieCqYV3uw5zxVpBhqwwJVuM/iIgapXDT
b5cfc1jMTXHnhVO8fxwvjS5y5iFAL0ne4M0zhfqwMqIQcpOkPC9KybJqSM0JMYa9
BsH6TW0WWhn8/ZNpLkaFT6j1lwCttp4+Mc8lGHDYT+GKkgyvYHrqyf577k1eWZ3n
O8lsYGIcae66qGDKEjSE8m6XDP5yIIXgnM1NRsMhhEz4Q7LM5WaPL4xH2DwfY8KU
mheXUHnOi4M359Pgz8iDSwtHqj5hy38q6pp85wo1dsThEcAILQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA+KScL1Wo/PKanseQHtgnwH9c8WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWJhMDcxMDAtNWY3My0z
MTBlLTgzYWQtMDczOGRhYzQ5MzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7ioMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK9MH0zKD+ja/nVPRTpc43607eYYSYKNEZ6uVoznwe97m0tzwZEDSsmB
+OjRUxvRaFb/3fCdkqUWcQ+sYiWlx9AiIUwOiNiSYoiAn4CYGpMYCLJ/FwvD9k1/
SM1zJmnIrf85KdNGQf6S7Qc8mSozW9sV6BzBsCYaZ5rCnawAaFMRLTmO1YSX7gsE
aQrqYYWipB522ux1cx0ZLLYMTsIfRHzGeJ7I0GbskAToBARsz/K4fscnNOMR3ovs
gwfoBLuj+XymisZximl4N/hmyORk3H4SC3okMRsRJAai4yYEqdEwa9kDW/yiBIMY
E+d9Lkjp34Rl9cGXL12j+6Cfi+ngnbg=
-----END CERTIFICATE-----