Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3ccfca7-9e0c-31bf-9c11-7e8acf95f556.roa
File:                     e3ccfca7-9e0c-31bf-9c11-7e8acf95f556.roa (raw, json)
Hash identifier:          v5XL+ZjkqCFcAXTuXstLupiVCulN6WXKKYuweS4Btr4=
Subject key identifier:   70:E8:57:9F:B7:CE:DD:7E:F3:42:51:90:A7:DE:03:FD:CB:E6:8A:5F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858494B641E7BD94A32170B785600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3ccfca7-9e0c-31bf-9c11-7e8acf95f556.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     0
IP address blocks:        199.7.62.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:1e:7b:d9:4a:32:17:0b:78:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=4e57f691-6f6b-4146-80fa-c1897bf174ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8d:d4:b1:d5:3b:fa:41:98:2a:fb:4b:40:df:
                    9a:41:ca:d2:a3:fc:92:6e:9d:ca:92:29:33:b7:cb:
                    fa:ba:dc:ea:f8:d3:46:31:98:75:8e:16:bd:fb:0e:
                    39:c5:0e:c6:80:13:a6:a6:99:83:26:45:73:b0:11:
                    b9:4f:50:b3:4b:92:8a:06:d1:32:af:94:6c:d9:b6:
                    71:76:5a:42:ec:7d:a0:eb:f9:a4:8c:6f:be:4f:3e:
                    a3:50:26:92:58:21:8f:7f:63:30:f5:99:60:a8:d7:
                    a9:53:18:83:99:95:54:8a:f6:39:43:60:ff:b7:d4:
                    2f:e1:1a:21:c0:6b:c1:a8:97:57:6a:9f:a0:86:e2:
                    fc:32:91:f9:ff:df:21:82:df:82:3b:19:89:26:93:
                    15:1e:1e:2a:e0:76:04:40:03:38:e4:83:32:92:f7:
                    80:e9:60:44:e0:0c:3a:2d:cb:53:ac:79:b1:bc:11:
                    08:4c:b0:0e:27:9d:1e:27:e0:de:ea:22:33:53:83:
                    9d:7e:c4:01:c7:70:ac:37:79:62:7d:a0:38:ed:09:
                    02:2a:af:6f:a8:6d:74:3c:e6:a7:00:95:d6:00:d4:
                    fe:52:34:c1:5e:2f:48:e5:f0:5c:72:1c:c3:4d:da:
                    9b:7e:f3:db:d3:b5:05:1d:8f:91:d2:33:2a:05:39:
                    7f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E8:57:9F:B7:CE:DD:7E:F3:42:51:90:A7:DE:03:FD:CB:E6:8A:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3ccfca7-9e0c-31bf-9c11-7e8acf95f556.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:40:b5:e7:3a:ee:e5:36:fb:ab:d7:06:21:07:cf:34:f0:87:
         b8:33:36:78:f7:16:ec:5f:51:37:d5:61:77:57:4c:71:5a:c7:
         87:f2:80:94:89:b2:e3:a0:18:79:21:bf:0d:52:49:b8:76:40:
         34:de:63:c9:75:1b:b4:b1:06:b4:11:e0:bf:ce:5e:18:a5:1f:
         88:d2:25:ef:3f:c4:52:f5:97:f4:e2:9e:4d:e3:f3:0a:da:98:
         0b:76:df:1e:51:43:02:bd:9a:26:cc:65:e1:ff:17:94:d1:4b:
         05:3c:aa:29:c7:89:fa:9a:7e:31:f7:3e:7e:09:ca:71:6c:b2:
         74:99:76:6c:84:bb:c1:b6:74:d5:6f:31:a7:a3:43:3a:0b:4c:
         2c:b9:48:7f:96:74:8a:10:8f:0b:63:2d:8e:02:37:b5:89:9e:
         98:49:ed:8b:15:3b:28:05:9f:07:ff:81:85:73:71:c4:de:2f:
         dc:a3:0b:6b:7b:6d:a0:06:ac:13:b7:f4:a2:2f:78:bc:f7:79:
         56:a4:b8:0d:df:52:48:b7:74:ff:f1:41:6e:62:02:db:65:73:
         e4:06:30:41:8e:70:c7:0c:d8:34:aa:3f:d1:61:ac:f9:2c:05:
         5b:c6:12:e1:e1:3c:fc:4c:39:b3:34:39:95:a8:fd:b7:65:1d:
         cb:42:a6:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZB572UoyFwt4VgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
NGU1N2Y2OTEtNmY2Yi00MTQ2LTgwZmEtYzE4OTdiZjE3NGNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo43UsdU7+kGYKvtLQN+aQcrSo/ySbp3Kkikz
t8v6utzq+NNGMZh1jha9+w45xQ7GgBOmppmDJkVzsBG5T1CzS5KKBtEyr5Rs2bZx
dlpC7H2g6/mkjG++Tz6jUCaSWCGPf2Mw9ZlgqNepUxiDmZVUivY5Q2D/t9Qv4Roh
wGvBqJdXap+ghuL8MpH5/98hgt+COxmJJpMVHh4q4HYEQAM45IMykveA6WBE4Aw6
LctTrHmxvBEITLAOJ50eJ+De6iIzU4OdfsQBx3CsN3lifaA47QkCKq9vqG10POan
AJXWANT+UjTBXi9I5fBcchzDTdqbfvPb07UFHY+R0jMqBTl/SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHDoV5+3zt1+80JRkKfeA/3L5opfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTNjY2ZjYTctOWUwYy0z
MWJmLTljMTEtN2U4YWNmOTVmNTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwc+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGtAtec67uU2+6vXBiEHzzTwh7gzNnj3FuxfUTfVYXdXTHFax4fygJSJ
suOgGHkhvw1SSbh2QDTeY8l1G7SxBrQR4L/OXhilH4jSJe8/xFL1l/Tink3j8wra
mAt23x5RQwK9mibMZeH/F5TRSwU8qinHifqafjH3Pn4JynFssnSZdmyEu8G2dNVv
MaejQzoLTCy5SH+WdIoQjwtjLY4CN7WJnphJ7YsVOygFnwf/gYVzccTeL9yjC2t7
baAGrBO39KIveLz3eVakuA3fUki3dP/xQW5iAttlc+QGMEGOcMcM2DSqP9FhrPks
BVvGEuHhPPxMObM0OZWo/bdlHctCprY=
-----END CERTIFICATE-----