Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/122ba3a7-92f7-37cd-8058-dc0c5d459cd4.roa
File:                     122ba3a7-92f7-37cd-8058-dc0c5d459cd4.roa (raw, json)
Hash identifier:          4Yq5znlO5QsKL9cJQ+spIyZ9ylEWcQLFI5jheMoVFL4=
Subject key identifier:   1C:67:24:38:23:6D:3B:0B:BF:D9:0F:A7:53:C1:B5:91:05:D0:F0:37
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848E16BCB55F0147E8BBC92C800
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/122ba3a7-92f7-37cd-8058-dc0c5d459cd4.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     396588
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:cb:55:f0:14:7e:8b:bc:92:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=62a76c52-a0d7-4a4f-b20d-82580bdf347d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9f:70:39:80:49:41:f3:b5:8d:b5:01:65:97:
                    75:c6:c8:e5:a8:5b:2f:fd:de:68:6e:ab:19:1d:2d:
                    16:07:82:2b:02:1e:7b:d7:4c:b1:54:41:ab:65:7f:
                    20:fc:4d:0d:f9:d6:37:ed:88:60:c7:63:47:2a:25:
                    76:1d:ac:cd:e8:e1:fe:20:ab:e7:c7:8f:14:f2:87:
                    c9:aa:06:81:8e:b8:93:8c:5e:35:cb:37:b0:f9:41:
                    18:66:4d:f8:e1:e2:ff:e2:73:f8:79:e2:4a:d1:61:
                    5e:2a:17:c9:a9:15:3a:5b:45:6a:56:09:72:02:5e:
                    9f:24:ff:e3:9e:8d:75:ec:03:26:eb:be:e4:b8:72:
                    ff:eb:fb:8c:7a:90:0b:9d:ea:02:13:71:9d:f5:bc:
                    b0:70:c6:69:01:e0:89:1c:dd:52:fd:fc:8e:1a:b2:
                    d4:01:f8:35:c2:6e:be:3d:96:50:fc:04:bb:cc:3c:
                    39:79:11:54:61:13:2b:e1:76:02:42:4d:7f:65:2b:
                    24:cd:24:10:ac:68:cb:ff:52:85:c9:67:d3:20:2a:
                    52:75:64:cc:68:1e:a0:e1:75:3b:86:80:da:5c:29:
                    55:2f:32:54:e9:89:f1:2d:8d:e4:62:5f:55:33:fd:
                    79:7f:90:f2:aa:55:45:32:56:5d:c8:d5:56:97:8b:
                    0b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:67:24:38:23:6D:3B:0B:BF:D9:0F:A7:53:C1:B5:91:05:D0:F0:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/122ba3a7-92f7-37cd-8058-dc0c5d459cd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:cd:a0:ec:e3:04:e9:04:6f:a7:29:61:54:8d:46:4e:c7:c9:
         00:93:84:ec:da:25:0c:f5:60:cb:11:97:84:55:6c:6e:ed:25:
         b6:22:d8:8f:c7:b6:1f:91:d4:9c:d9:bf:5e:35:ee:2f:58:48:
         5a:e4:d3:96:15:45:c5:3f:fa:ab:ea:0c:45:ca:d3:8d:ca:75:
         32:5d:dc:95:0c:e9:b1:1a:11:3d:a2:7d:84:da:d4:26:dd:e2:
         bc:be:90:59:8d:37:51:5d:57:df:97:19:99:86:f1:0b:e5:b8:
         e8:6e:1a:43:d8:6b:a1:c4:3f:54:43:de:63:8c:ed:cf:19:ef:
         42:54:7c:2b:78:66:bb:ca:50:e6:cf:92:8d:a5:76:72:9a:0b:
         2e:cc:86:51:61:ce:23:01:a4:b3:fd:54:41:d0:11:ea:ff:0e:
         4f:cb:12:a6:33:be:33:75:c3:66:d9:51:ec:be:cd:8c:56:15:
         f9:28:0f:f4:dc:e4:62:85:39:5e:39:6b:7a:42:6f:ba:24:ca:
         56:9c:0f:e8:2e:bd:f0:bc:71:1c:25:73:89:93:73:b7:5f:e0:
         6f:f8:72:04:69:99:7d:82:7b:5c:fb:6d:49:52:d9:54:a0:77:
         ce:1b:13:b3:1b:df:2c:df:2d:a9:4d:32:22:06:df:85:6d:c2:
         0b:8c:ac:46
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjha8tV8BR+i7ySyAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk
NjJhNzZjNTItYTBkNy00YTRmLWIyMGQtODI1ODBiZGYzNDdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ9wOYBJQfO1jbUBZZd1xsjlqFsv/d5obqsZ
HS0WB4IrAh5710yxVEGrZX8g/E0N+dY37Yhgx2NHKiV2HazN6OH+IKvnx48U8ofJ
qgaBjriTjF41yzew+UEYZk344eL/4nP4eeJK0WFeKhfJqRU6W0VqVglyAl6fJP/j
no117AMm677kuHL/6/uMepALneoCE3Gd9bywcMZpAeCJHN1S/fyOGrLUAfg1wm6+
PZZQ/AS7zDw5eRFUYRMr4XYCQk1/ZSskzSQQrGjL/1KFyWfTICpSdWTMaB6g4XU7
hoDaXClVLzJU6YnxLY3kYl9VM/15f5DyqlVFMlZdyNVWl4sL3wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBxnJDgjbTsLv9kPp1PBtZEF0PA3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTIyYmEzYTctOTJmNy0z
N2NkLTgwNTgtZGMwYzVkNDU5Y2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBNzaDs4wTpBG+nKWFUjUZOx8kAk4Ts2iUM9WDLEZeEVWxu7SW2ItiP
x7YfkdSc2b9eNe4vWEha5NOWFUXFP/qr6gxFytONynUyXdyVDOmxGhE9on2E2tQm
3eK8vpBZjTdRXVfflxmZhvEL5bjobhpD2GuhxD9UQ95jjO3PGe9CVHwreGa7ylDm
z5KNpXZymgsuzIZRYc4jAaSz/VRB0BHq/w5PyxKmM74zdcNm2VHsvs2MVhX5KA/0
3ORihTleOWt6Qm+6JMpWnA/oLr3wvHEcJXOJk3O3X+Bv+HIEaZl9gntc+21JUtlU
oHfOGxOzG98s3y2pTTIiBt+FbcILjKxG
-----END CERTIFICATE-----