Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a56737f0-0104-37d3-9d8b-3082fc962f58.roa
File:                     a56737f0-0104-37d3-9d8b-3082fc962f58.roa (raw, json)
Hash identifier:          KzI06SXImyPwHPFptVKy7pcbv/UYPJRBt+8fu/MV70A=
Subject key identifier:   E2:D8:94:F8:A8:CF:AA:5F:17:BC:F7:1E:18:FC:1B:EA:8C:66:A9:BC
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848E0067E5451BF992B00EA7E80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a56737f0-0104-37d3-9d8b-3082fc962f58.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     397199
IP address blocks:        209.112.127.31/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:7e:54:51:bf:99:2b:00:ea:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=f1f02b0b-0daf-42e7-971c-1e73755196e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7d:fb:d5:98:25:5f:26:66:eb:55:97:5d:8d:
                    43:aa:cb:ca:e2:25:3f:9a:1c:88:8c:20:f8:7f:59:
                    0b:0f:9e:47:3c:24:49:0a:8a:4c:1d:4d:ac:a5:2d:
                    ee:9e:62:59:64:87:a3:13:3e:48:c4:53:84:ef:f5:
                    78:c6:a5:b0:05:3c:12:0b:36:af:c9:4a:b9:89:0a:
                    9c:f9:4c:00:3d:24:3b:8e:b1:ab:cf:5c:c7:ce:45:
                    9b:fa:d8:52:af:48:d3:91:5b:1f:c5:6a:17:dd:eb:
                    1f:b1:6a:df:fa:c3:55:be:9c:20:2e:4f:ec:5b:10:
                    e2:ff:94:ce:82:c4:d0:c4:01:3e:0c:4a:72:09:66:
                    87:c2:63:89:8c:3b:ea:6f:c8:fd:a6:5a:db:17:96:
                    d1:93:5c:a6:42:3a:78:11:79:71:53:b1:9a:ad:06:
                    36:f8:83:ff:bd:fa:f5:69:49:bc:1a:fd:de:d8:b0:
                    80:9e:77:c0:3d:41:d7:f4:ab:3b:99:13:c3:22:73:
                    6f:b5:79:94:a1:13:e2:28:a4:f2:12:93:07:83:e3:
                    30:b6:ce:3f:63:8b:42:e9:74:06:e9:02:ac:89:fb:
                    db:7b:34:3b:7a:78:c0:8e:1b:c6:d9:ae:aa:ed:b0:
                    e5:1e:79:72:f6:7e:92:9f:22:f8:a1:02:67:35:02:
                    c3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D8:94:F8:A8:CF:AA:5F:17:BC:F7:1E:18:FC:1B:EA:8C:66:A9:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a56737f0-0104-37d3-9d8b-3082fc962f58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:a5:ba:85:9e:98:0d:c3:c1:b0:e0:6a:cf:3b:91:5f:f2:c3:
         a9:f0:b7:e7:2d:16:b6:d3:95:83:9d:b4:72:9d:b2:32:9a:94:
         e3:39:5c:59:61:03:25:f5:7b:6a:53:4e:f9:66:eb:c1:7d:51:
         3b:48:0f:b9:a0:c5:84:03:60:9f:05:80:43:04:38:bf:09:c4:
         21:48:ab:94:b7:9a:fd:4d:37:00:4d:52:f4:9a:bb:49:de:e2:
         84:66:0a:b5:1b:78:d5:60:35:81:4a:95:a2:bf:da:40:dc:69:
         a2:1e:c1:f6:1b:12:98:5f:c0:1a:eb:27:6a:59:25:46:3f:ac:
         89:e2:2d:8b:ac:f4:93:44:30:ca:ad:1f:8d:f3:3a:b1:ed:ae:
         ea:7e:50:f5:dc:35:3b:34:8c:c1:d0:eb:43:65:8e:93:5e:18:
         c4:b8:0a:50:f6:27:75:4f:8d:80:3b:67:f1:1b:0c:5e:be:15:
         cc:02:00:11:de:f2:f8:55:54:34:c6:f1:cf:53:a9:62:4b:4c:
         08:da:9c:ab:c8:aa:19:91:ab:4c:9b:a2:03:83:0d:c3:bc:38:
         f6:67:29:12:12:c0:ee:00:3b:aa:01:0f:c1:a5:9d:e0:e9:70:
         a8:7a:ec:6d:1d:78:b6:5f:73:3f:57:e9:7f:95:1d:e7:51:06:
         02:07:2e:c7
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBn5UUb+ZKwDqfoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk
ZjFmMDJiMGItMGRhZi00MmU3LTk3MWMtMWU3Mzc1NTE5NmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX371ZglXyZm61WXXY1DqsvK4iU/mhyIjCD4
f1kLD55HPCRJCopMHU2spS3unmJZZIejEz5IxFOE7/V4xqWwBTwSCzavyUq5iQqc
+UwAPSQ7jrGrz1zHzkWb+thSr0jTkVsfxWoX3esfsWrf+sNVvpwgLk/sWxDi/5TO
gsTQxAE+DEpyCWaHwmOJjDvqb8j9plrbF5bRk1ymQjp4EXlxU7GarQY2+IP/vfr1
aUm8Gv3e2LCAnnfAPUHX9Ks7mRPDInNvtXmUoRPiKKTyEpMHg+Mwts4/Y4tC6XQG
6QKsifvbezQ7enjAjhvG2a6q7bDlHnly9n6SnyL4oQJnNQLDxQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOLYlPioz6pfF7z3Hhj8G+qMZqm8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTU2NzM3ZjAtMDEwNC0z
N2QzLTlkOGItMzA4MmZjOTYyZjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAupbqFnpgNw8Gw4GrPO5Ff8sOp8LfnLRa205WDnbRynbIympTjOVxZ
YQMl9XtqU075ZuvBfVE7SA+5oMWEA2CfBYBDBDi/CcQhSKuUt5r9TTcATVL0mrtJ
3uKEZgq1G3jVYDWBSpWiv9pA3GmiHsH2GxKYX8Aa6ydqWSVGP6yJ4i2LrPSTRDDK
rR+N8zqx7a7qflD13DU7NIzB0OtDZY6TXhjEuApQ9id1T42AO2fxGwxevhXMAgAR
3vL4VVQ0xvHPU6liS0wI2pyryKoZkatMm6IDgw3DvDj2ZykSEsDuADuqAQ/BpZ3g
6XCoeuxtHXi2X3M/V+l/lR3nUQYCBy7H
-----END CERTIFICATE-----