Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d689207a-c713-4157-97a1-5bb990bd3816/7224b45f-44e9-38c6-b91b-c8b261c49710.roa
File:                     7224b45f-44e9-38c6-b91b-c8b261c49710.roa (raw, json)
Hash identifier:          2HlQzP/j8++kqGkXb93Z6u8rfMX44b582/tpKbielSE=
Subject key identifier:   A8:E3:AA:7A:3C:40:37:D3:60:A9:71:99:8F:93:03:D0:C5:B8:F2:2B
Certificate issuer:       /CN=d689207a-c713-4157-97a1-5bb990bd3816
Certificate serial:       010D0C9F432858480644FEC235DB08FA3DBF7080
Authority key identifier: C9:B3:C7:F4:BA:34:D4:0E:33:66:60:6E:75:59:F9:43:9E:75:34:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d689207a-c713-4157-97a1-5bb990bd3816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d689207a-c713-4157-97a1-5bb990bd3816/7224b45f-44e9-38c6-b91b-c8b261c49710.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     62660
IP address blocks:        192.225.208.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:44:fe:c2:35:db:08:fa:3d:bf:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d689207a-c713-4157-97a1-5bb990bd3816
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=fcea41ca-9fd9-43f5-bb36-28ed693d51ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4b:fd:42:4d:48:b5:4b:48:e0:0f:03:51:ae:
                    23:f3:d9:10:32:45:c3:0a:4a:4d:a9:bd:7a:26:61:
                    ad:e5:f9:9e:dc:34:24:b9:fc:3c:6a:ab:06:35:c1:
                    e6:5a:90:b0:2d:bd:e8:7f:85:7e:49:ea:f5:a7:fa:
                    04:2b:22:94:46:da:d6:2a:95:54:ed:a8:cd:12:5f:
                    af:59:42:d0:8b:df:fc:02:ca:2d:d0:19:dd:6a:33:
                    11:d2:5b:66:bb:83:76:14:96:8b:0d:82:dc:aa:57:
                    e8:e4:b5:a0:5f:18:e7:8c:74:eb:66:07:5d:80:b4:
                    5a:ac:06:86:75:74:7b:55:51:3c:19:99:f4:8e:6e:
                    ab:35:a3:94:b1:77:20:f8:e4:db:78:49:d6:5d:63:
                    a1:a4:7b:a1:95:d3:28:0d:8c:d5:d8:2a:dc:2f:4b:
                    ea:64:a7:2e:d0:e1:de:f6:4a:d5:bd:b3:92:49:71:
                    37:df:93:e9:3e:f7:c5:4c:88:8d:c4:de:79:83:56:
                    8a:b6:90:b9:b5:91:6d:13:a4:b2:6a:d2:6a:2b:18:
                    9e:a6:d1:8e:f4:e0:83:65:f0:12:9e:b0:30:21:bb:
                    3b:2d:dd:8c:38:31:7d:3f:24:a2:de:22:be:e7:8c:
                    e0:ef:79:83:76:4f:1a:4e:f2:e8:40:2d:d0:3c:fa:
                    e7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E3:AA:7A:3C:40:37:D3:60:A9:71:99:8F:93:03:D0:C5:B8:F2:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d689207a-c713-4157-97a1-5bb990bd3816/7224b45f-44e9-38c6-b91b-c8b261c49710.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d689207a-c713-4157-97a1-5bb990bd3816/d689207a-c713-4157-97a1-5bb990bd3816.crl

            X509v3 Authority Key Identifier:
                keyid:C9:B3:C7:F4:BA:34:D4:0E:33:66:60:6E:75:59:F9:43:9E:75:34:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d689207a-c713-4157-97a1-5bb990bd3816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.225.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:29:4e:33:41:d9:3e:0f:c3:52:f0:e7:40:fd:2a:46:52:48:
         b6:91:0c:32:f1:df:f3:6b:aa:07:3a:80:37:b1:40:c0:81:b0:
         76:4c:54:e2:2e:65:4c:0b:00:b3:5e:f0:cd:86:c2:6a:0d:f6:
         b7:3e:1f:cc:cd:47:ea:f5:ab:59:17:1f:e6:a0:74:3f:fa:9f:
         00:03:ca:a3:fb:44:d6:1d:09:c7:1b:c3:d3:5a:ab:0f:6c:0b:
         ff:bd:9c:73:11:a2:34:bf:26:1c:9f:09:b0:21:1b:71:94:b0:
         8c:e0:54:c7:41:97:97:a5:9f:2a:89:ef:ae:df:9e:12:4f:15:
         73:f1:55:2b:e2:2e:52:cc:66:dc:ba:65:23:f5:4e:07:81:cc:
         a6:cc:0d:6c:ce:f2:33:65:d9:d8:3a:1f:db:6a:5b:e0:49:f3:
         8d:01:fd:b6:69:12:34:95:dc:60:45:c6:10:10:ad:31:87:ce:
         4f:51:cc:dc:6b:9a:7e:5c:42:98:1b:4c:9f:df:d8:4e:c9:7d:
         fd:42:9a:3b:b8:11:00:7d:cc:4b:ff:ca:ff:43:56:96:ca:bf:
         aa:f3:78:d1:6d:68:bd:f0:6b:1f:d8:f1:03:00:c5:99:c3:29:
         07:de:17:42:b6:e7:18:79:55:26:d9:3e:76:6b:6a:02:f8:2f:
         43:af:c1:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgGRP7CNdsI+j2/cIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDY4OTIwN2EtYzcxMy00MTU3LTk3YTEtNWJiOTkwYmQz
ODE2MB4XDTI0MTEyODAyMDAzOFoXDTI1MDIyNjAyMDAzOFowLzEtMCsGA1UEAxMk
ZmNlYTQxY2EtOWZkOS00M2Y1LWJiMzYtMjhlZDY5M2Q1MWNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0v9Qk1ItUtI4A8DUa4j89kQMkXDCkpNqb16
JmGt5fme3DQkufw8aqsGNcHmWpCwLb3of4V+Ser1p/oEKyKURtrWKpVU7ajNEl+v
WULQi9/8Asot0BndajMR0ltmu4N2FJaLDYLcqlfo5LWgXxjnjHTrZgddgLRarAaG
dXR7VVE8GZn0jm6rNaOUsXcg+OTbeEnWXWOhpHuhldMoDYzV2CrcL0vqZKcu0OHe
9krVvbOSSXE335PpPvfFTIiNxN55g1aKtpC5tZFtE6SyatJqKxieptGO9OCDZfAS
nrAwIbs7Ld2MODF9PySi3iK+54zg73mDdk8aTvLoQC3QPPrnvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKjjqno8QDfTYKlxmY+TA9DFuPIrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjg5
MjA3YS1jNzEzLTQxNTctOTdhMS01YmI5OTBiZDM4MTYvNzIyNGI0NWYtNDRlOS0z
OGM2LWI5MWItYzhiMjYxYzQ5NzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY4OTIwN2EtYzcxMy00MTU3LTk3
YTEtNWJiOTkwYmQzODE2L2Q2ODkyMDdhLWM3MTMtNDE1Ny05N2ExLTViYjk5MGJk
MzgxNi5jcmwwHwYDVR0jBBgwFoAUybPH9Lo01A4zZmBudVn5Q551NLcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjg5MjA3YS1jNzEzLTQxNTctOTdhMS01YmI5
OTBiZDM4MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwOHQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFYpTjNB2T4Pw1Lw50D9KkZSSLaRDDLx3/Nrqgc6gDexQMCBsHZMVOIu
ZUwLALNe8M2GwmoN9rc+H8zNR+r1q1kXH+agdD/6nwADyqP7RNYdCccbw9Naqw9s
C/+9nHMRojS/JhyfCbAhG3GUsIzgVMdBl5elnyqJ767fnhJPFXPxVSviLlLMZty6
ZSP1TgeBzKbMDWzO8jNl2dg6H9tqW+BJ840B/bZpEjSV3GBFxhAQrTGHzk9RzNxr
mn5cQpgbTJ/f2E7Jff1Cmju4EQB9zEv/yv9DVpbKv6rzeNFtaL3wax/Y8QMAxZnD
KQfeF0K25xh5VSbZPnZragL4L0OvwYI=
-----END CERTIFICATE-----