Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f580d7a2-6ebe-3936-855a-5c758cbb93c9.roa
File:                     f580d7a2-6ebe-3936-855a-5c758cbb93c9.roa (raw, json)
Hash identifier:          ryzxVoyAx8MAfHip1UrSs7MqVYeAGzFXU4neP51DYOs=
Subject key identifier:   8B:23:C5:F9:E0:A7:5C:A7:06:8F:D4:EB:16:3B:24:23:02:54:A3:C2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB1567E3B8C5EB50EC4FE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f580d7a2-6ebe-3936-855a-5c758cbb93c9.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        98.215.203.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:56:7e:3b:8c:5e:b5:0e:c4:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=01433b1b-5717-430d-94e2-ca858ae3dba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:91:6d:a8:3b:53:c6:4d:82:f3:8f:94:72:4d:
                    e3:af:c3:ee:fe:89:60:4a:97:22:e7:4f:83:31:31:
                    eb:6f:72:a7:8d:a9:60:61:fd:71:36:f2:07:2c:39:
                    94:14:7c:45:ce:ed:aa:a4:92:c0:cd:c2:9f:6c:0a:
                    ab:9f:46:c0:2f:a9:9b:b1:14:74:24:48:4d:d9:0a:
                    a8:24:7f:e5:1b:f0:fd:28:f7:ff:c0:78:56:cd:39:
                    5b:0c:a9:d5:70:5f:be:37:a1:56:23:7a:eb:30:96:
                    24:c1:a9:5a:f1:f0:d6:ec:fa:67:1b:da:74:5f:57:
                    79:97:b0:fe:82:58:96:2d:66:01:52:f1:cd:b0:4f:
                    6e:53:6d:23:b9:cb:90:36:4a:17:0a:ab:ea:5e:7b:
                    39:3d:0c:a1:e4:79:7c:29:c0:0f:18:98:ae:62:17:
                    f9:a1:0e:30:1d:7b:ea:83:62:24:f8:83:71:2d:6d:
                    0a:1c:06:93:ef:2d:5f:7f:e8:bc:09:15:3c:bd:1c:
                    f8:19:2a:71:24:c6:5c:f0:30:b2:50:04:d4:0a:97:
                    c9:72:b4:f7:f5:07:95:36:4e:b0:ae:2f:46:4d:df:
                    46:ea:a9:aa:16:d8:e1:47:7e:b7:ca:f3:d2:91:b9:
                    e9:9a:92:ae:92:4c:57:87:89:cf:c8:4b:08:a2:4a:
                    d8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:23:C5:F9:E0:A7:5C:A7:06:8F:D4:EB:16:3B:24:23:02:54:A3:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f580d7a2-6ebe-3936-855a-5c758cbb93c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.215.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:61:ff:da:5a:93:02:99:b4:06:5a:37:eb:ab:76:89:d8:ee:
         3c:26:f0:cb:6f:fe:e6:e4:63:7a:7e:97:db:ad:ef:e9:d4:b8:
         b1:c4:ba:60:1d:5b:20:d3:43:e4:1e:80:5f:d5:cb:48:75:92:
         db:e0:8d:02:0b:f9:10:75:d1:7a:4d:76:18:dd:3f:57:39:ad:
         61:04:67:9e:c7:3a:05:d6:28:d8:0e:f7:28:5c:df:3a:78:79:
         ca:c2:d4:41:e0:67:5f:2a:07:80:30:6d:10:46:bc:32:3c:4a:
         cd:a1:9e:24:91:c8:da:ea:c8:e8:85:a0:e2:22:31:e4:5f:29:
         17:70:94:2a:ec:3c:c2:97:da:35:8f:7b:fe:37:6e:47:e4:64:
         b1:89:fc:03:4b:81:93:83:0e:c2:73:8e:45:02:85:d4:ac:86:
         fa:dc:26:f7:92:43:3a:96:37:98:8a:25:2f:78:df:30:98:8a:
         ee:15:2e:7c:f0:7f:00:23:72:a2:c7:d3:ae:9b:bb:21:61:6a:
         bf:e0:67:5d:a2:b4:65:3d:a4:66:f8:69:d4:8d:81:bb:43:47:
         0e:7f:0d:f9:e4:50:a6:1b:02:c4:b0:fd:23:2a:a8:6b:16:2e:
         1e:ee:87:70:6c:1a:a1:0a:83:d4:ab:49:3e:d8:db:00:42:8e:
         19:65:ed:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssVZ+O4xetQ7E/oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MDE0MzNiMWItNTcxNy00MzBkLTk0ZTItY2E4NThhZTNkYmE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpFtqDtTxk2C84+Uck3jr8Pu/olgSpci50+D
MTHrb3KnjalgYf1xNvIHLDmUFHxFzu2qpJLAzcKfbAqrn0bAL6mbsRR0JEhN2Qqo
JH/lG/D9KPf/wHhWzTlbDKnVcF++N6FWI3rrMJYkwala8fDW7PpnG9p0X1d5l7D+
gliWLWYBUvHNsE9uU20jucuQNkoXCqvqXns5PQyh5Hl8KcAPGJiuYhf5oQ4wHXvq
g2Ik+INxLW0KHAaT7y1ff+i8CRU8vRz4GSpxJMZc8DCyUATUCpfJcrT39QeVNk6w
ri9GTd9G6qmqFtjhR363yvPSkbnpmpKukkxXh4nPyEsIokrYbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIsjxfngp1ynBo/U6xY7JCMCVKPCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjU4MGQ3YTItNmViZS0z
OTM2LTg1NWEtNWM3NThjYmI5M2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYtfLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADph/9pakwKZtAZaN+urdonY7jwm8Mtv/ubkY3p+l9ut7+nUuLHEumAd
WyDTQ+QegF/Vy0h1ktvgjQIL+RB10XpNdhjdP1c5rWEEZ57HOgXWKNgO9yhc3zp4
ecrC1EHgZ18qB4AwbRBGvDI8Ss2hniSRyNrqyOiFoOIiMeRfKRdwlCrsPMKX2jWP
e/43bkfkZLGJ/ANLgZODDsJzjkUChdSshvrcJveSQzqWN5iKJS943zCYiu4VLnzw
fwAjcqLH066buyFhar/gZ12itGU9pGb4adSNgbtDRw5/DfnkUKYbAsSw/SMqqGsW
Lh7uh3BsGqEKg9SrST7Y2wBCjhll7Tw=
-----END CERTIFICATE-----