Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee25f80c-fc67-3d86-a557-7fc7c9a1dab4.roa
File:                     ee25f80c-fc67-3d86-a557-7fc7c9a1dab4.roa (raw, json)
Hash identifier:          67hhJkDj8ywDmUBP5wTUc2VCehUvbntT+Zbe+jlQepo=
Subject key identifier:   CE:DD:72:12:35:AF:B2:68:FF:64:57:74:7F:47:9B:9E:AD:17:4F:AC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6C75408DF32BB10A4815C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee25f80c-fc67-3d86-a557-7fc7c9a1dab4.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33287
IP address blocks:        76.98.0.0/15 maxlen: 15
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:75:40:8d:f3:2b:b1:0a:48:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=5e7ae487-2afa-4da6-ba75-35ecec8c3d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fa:4d:52:8c:63:6d:60:35:50:ad:b4:e4:5b:
                    60:a9:b4:39:fb:35:56:26:7b:a2:43:65:f3:23:c8:
                    a2:2c:d6:bd:77:1b:d3:c9:ad:11:f6:57:95:40:ca:
                    90:c7:89:a1:01:d1:55:82:23:60:66:ff:f3:fc:e5:
                    c5:16:07:dc:1e:18:95:de:ed:b8:b3:13:3c:68:b4:
                    52:9d:5d:75:62:ee:23:d3:34:5c:15:b9:cd:0d:ef:
                    14:4b:e3:9b:a5:db:17:03:ca:65:c1:e9:16:a9:ad:
                    fa:d5:6e:4f:cf:61:57:dc:ed:3b:0e:aa:f1:04:41:
                    ec:76:f0:e4:a8:0a:26:fe:06:52:fd:81:bd:70:56:
                    21:1e:9a:2b:88:b1:22:49:c3:5e:50:64:0c:fe:c6:
                    35:f9:53:2a:eb:30:7a:d6:4e:f1:d2:36:02:85:43:
                    60:1a:75:e1:3c:f5:59:62:6e:7c:71:b5:0f:99:7b:
                    ae:d7:13:0a:1e:b5:01:a1:61:0e:9e:21:e8:bb:51:
                    43:e4:ac:b1:44:aa:10:13:4f:36:c9:c4:5f:57:38:
                    44:65:cb:14:8c:fb:9c:ea:70:07:59:16:c4:f1:79:
                    01:ad:88:c0:16:11:6d:fe:88:5d:04:cc:32:8e:9d:
                    bd:37:d8:04:0c:0c:cd:89:2e:10:7f:00:04:bc:40:
                    43:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DD:72:12:35:AF:B2:68:FF:64:57:74:7F:47:9B:9E:AD:17:4F:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee25f80c-fc67-3d86-a557-7fc7c9a1dab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.98.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:2f:08:da:90:45:51:5a:70:8b:95:12:b9:67:7d:92:cb:1f:
         93:34:57:05:c5:6f:8a:35:7d:67:71:53:b6:7e:26:2d:91:49:
         f1:f1:04:f8:42:a5:f2:0a:fd:10:fc:40:0e:72:af:7f:17:23:
         4e:fe:5b:65:0d:f2:76:cc:e9:7b:86:5b:37:c7:a3:be:4e:f5:
         5b:f6:46:a5:45:93:b9:18:e5:e2:07:9f:99:4d:34:b6:b0:fb:
         22:8e:60:bc:8c:cc:4f:60:d4:2c:3f:80:cc:f8:78:a2:43:82:
         95:a1:92:08:31:39:c5:51:c8:81:77:7e:5b:7c:c6:05:f7:bf:
         13:f0:f5:bd:e1:34:c2:cc:f9:2f:93:ec:5e:c4:47:66:6a:da:
         0e:1e:1b:97:87:81:37:21:00:bf:67:41:49:11:32:b8:26:30:
         3a:b0:02:c0:14:4c:9a:3b:2c:4f:84:9f:a7:c2:e9:65:26:2f:
         f2:79:51:ea:49:8a:5d:e9:1c:b5:3d:5a:04:80:52:cc:53:14:
         74:62:33:ff:99:fe:85:5a:4f:cc:22:8d:c4:cf:93:91:9b:3b:
         88:6b:4a:49:f2:4a:71:0b:8f:d8:38:66:36:52:e5:82:b6:67:
         c5:96:b9:2c:fc:d6:a2:9c:12:f9:f7:d6:4d:67:75:0f:70:fe:
         17:9c:98:51
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEiebHVAjfMrsQpIFcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
NWU3YWU0ODctMmFmYS00ZGE2LWJhNzUtMzVlY2VjOGMzZDY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvpNUoxjbWA1UK205FtgqbQ5+zVWJnuiQ2Xz
I8iiLNa9dxvTya0R9leVQMqQx4mhAdFVgiNgZv/z/OXFFgfcHhiV3u24sxM8aLRS
nV11Yu4j0zRcFbnNDe8US+ObpdsXA8plwekWqa361W5Pz2FX3O07DqrxBEHsdvDk
qAom/gZS/YG9cFYhHporiLEiScNeUGQM/sY1+VMq6zB61k7x0jYChUNgGnXhPPVZ
Ym58cbUPmXuu1xMKHrUBoWEOniHou1FD5KyxRKoQE082ycRfVzhEZcsUjPuc6nAH
WRbE8XkBrYjAFhFt/ohdBMwyjp29N9gEDAzNiS4QfwAEvEBDTwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFM7dchI1r7Jo/2RXdH9Hm56tF0+sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWUyNWY4MGMtZmM2Ny0z
ZDg2LWE1NTctN2ZjN2M5YTFkYWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBTGIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAxC8I2pBFUVpwi5USuWd9kssfkzRXBcVvijV9Z3FTtn4mLZFJ8fEE+EKl
8gr9EPxADnKvfxcjTv5bZQ3ydszpe4ZbN8ejvk71W/ZGpUWTuRjl4gefmU00trD7
Io5gvIzMT2DULD+AzPh4okOClaGSCDE5xVHIgXd+W3zGBfe/E/D1veE0wsz5L5Ps
XsRHZmraDh4bl4eBNyEAv2dBSREyuCYwOrACwBRMmjssT4Sfp8LpZSYv8nlR6kmK
XekctT1aBIBSzFMUdGIz/5n+hVpPzCKNxM+TkZs7iGtKSfJKcQuP2DhmNlLlgrZn
xZa5LPzWopwS+ffWTWd1D3D+F5yYUQ==
-----END CERTIFICATE-----