Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/07625b9d-f55c-34f2-8d9c-4be2b5875a0c.roa
File:                     07625b9d-f55c-34f2-8d9c-4be2b5875a0c.roa (raw, json)
Hash identifier:          mx87w9ZV8eJnhILk4ZK9hh9uA4/7aTJP06Q+zL0XYaA=
Subject key identifier:   D0:D9:C1:D4:DC:9A:CD:70:A0:9B:B8:DE:B8:AC:C8:70:9C:BE:39:7F
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848D6411BA6A74448769ACE0080
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/07625b9d-f55c-34f2-8d9c-4be2b5875a0c.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     7018
IP address blocks:        142.111.73.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:1b:a6:a7:44:48:76:9a:ce:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=cc443592-4b0c-42a2-b909-f7de9326bbd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2e:15:80:a7:0e:48:fc:9e:85:db:5a:96:d9:
                    18:43:c5:cd:a8:cf:95:81:3b:86:55:f9:a0:55:da:
                    6a:d4:f1:b6:60:00:20:f5:17:91:f9:0e:61:1d:8b:
                    1a:f8:93:12:38:3c:f4:b5:b3:bf:f3:46:52:98:d9:
                    27:94:b8:a0:58:c9:86:4b:6e:f5:e2:cc:61:8f:f1:
                    1c:ca:21:1c:e8:6b:de:45:78:21:69:dc:50:a3:0a:
                    14:02:d5:b3:c2:63:e1:ae:93:db:c7:98:84:0c:54:
                    86:36:4b:ae:2a:75:93:41:ec:25:bd:1b:b8:c6:72:
                    da:d1:22:89:67:4b:c2:81:7a:27:37:fa:38:80:17:
                    db:93:1d:ce:dc:60:ef:03:7a:d7:b3:f0:14:6f:00:
                    37:c9:6e:11:af:dd:15:42:c4:38:98:9b:55:d3:ae:
                    4a:4a:54:64:5c:31:4a:0b:1a:3b:03:c0:35:0e:0f:
                    d6:93:6d:11:f3:06:1b:31:98:61:e4:60:ed:0b:4b:
                    9f:66:ae:ee:78:c2:ea:91:4c:f1:25:0b:fd:2f:4f:
                    8e:b3:80:98:5e:fa:d2:0c:dc:ee:34:6c:e5:bc:cb:
                    29:4c:2b:47:1f:d8:b2:dc:db:36:6f:6a:cb:50:b6:
                    75:4f:dc:7e:ab:e6:a0:9f:74:5b:5c:d9:f6:3d:b5:
                    10:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D9:C1:D4:DC:9A:CD:70:A0:9B:B8:DE:B8:AC:C8:70:9C:BE:39:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/07625b9d-f55c-34f2-8d9c-4be2b5875a0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:75:55:69:14:c7:85:d0:fd:8a:4d:a6:77:38:7f:4d:a0:e1:
         da:58:66:22:f2:ca:aa:c1:66:b6:1e:f2:94:66:5f:4d:f7:fc:
         ff:de:6b:68:d4:20:78:63:67:16:9f:be:3b:a9:fa:af:d3:64:
         d3:f3:52:5f:0f:3e:95:8c:a6:6f:06:90:50:03:3d:fb:93:88:
         fc:9d:e0:dc:88:82:97:c8:b7:5c:af:1a:ec:1c:56:91:14:71:
         8c:99:6a:f3:d5:cd:b4:38:52:7c:3e:c0:1e:f4:bd:87:c3:26:
         cc:57:ae:c6:7a:73:7c:12:7d:fe:d2:b8:57:fa:b5:db:75:f0:
         8a:27:75:6c:c8:78:ee:cd:5c:f8:4c:68:16:b7:3c:d0:e6:d4:
         10:87:2f:a5:fe:66:04:8e:ab:43:70:dd:f5:c8:b0:bb:22:34:
         bb:07:45:c5:ba:35:35:2b:2d:51:26:52:bd:2e:e2:d5:d1:66:
         28:21:a6:3f:99:dd:97:b3:d2:1c:c5:87:e1:a9:a0:da:db:a5:
         8a:ef:31:cd:c6:ae:4c:52:9f:6f:dd:15:a5:52:ca:33:6e:15:
         31:20:17:d8:99:7d:6a:87:7f:4d:b3:a6:73:ee:2d:9f:52:52:
         97:b3:21:a0:7e:27:7f:8b:16:f6:b4:03:6a:f2:92:9b:3c:7a:
         a0:6f:ae:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQRump0RIdprOAIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk
Y2M0NDM1OTItNGIwYy00MmEyLWI5MDktZjdkZTkzMjZiYmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S4VgKcOSPyehdtaltkYQ8XNqM+VgTuGVfmg
Vdpq1PG2YAAg9ReR+Q5hHYsa+JMSODz0tbO/80ZSmNknlLigWMmGS2714sxhj/Ec
yiEc6GveRXghadxQowoUAtWzwmPhrpPbx5iEDFSGNkuuKnWTQewlvRu4xnLa0SKJ
Z0vCgXonN/o4gBfbkx3O3GDvA3rXs/AUbwA3yW4Rr90VQsQ4mJtV065KSlRkXDFK
Cxo7A8A1Dg/Wk20R8wYbMZhh5GDtC0ufZq7ueMLqkUzxJQv9L0+Os4CYXvrSDNzu
NGzlvMspTCtHH9iy3Ns2b2rLULZ1T9x+q+agn3RbXNn2PbUQ6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNDZwdTcms1woJu43risyHCcvjl/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMDc2MjViOWQtZjU1Yy0z
NGYyLThkOWMtNGJlMmI1ODc1YTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm9JMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADh1VWkUx4XQ/YpNpnc4f02g4dpYZiLyyqrBZrYe8pRmX033/P/ea2jU
IHhjZxafvjup+q/TZNPzUl8PPpWMpm8GkFADPfuTiPyd4NyIgpfIt1yvGuwcVpEU
cYyZavPVzbQ4Unw+wB70vYfDJsxXrsZ6c3wSff7SuFf6tdt18IondWzIeO7NXPhM
aBa3PNDm1BCHL6X+ZgSOq0Nw3fXIsLsiNLsHRcW6NTUrLVEmUr0u4tXRZighpj+Z
3Zez0hzFh+GpoNrbpYrvMc3GrkxSn2/dFaVSyjNuFTEgF9iZfWqHf02zpnPuLZ9S
UpezIaB+J3+LFva0A2rykps8eqBvrmI=
-----END CERTIFICATE-----