Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/bc371c38-7917-3988-a5f6-0263a408b6ba.roa
File:                     bc371c38-7917-3988-a5f6-0263a408b6ba.roa (raw, json)
Hash identifier:          JGQVfjHWtkj7B+gWjNlbrESqqML+GlFS7O2YNrfOHww=
Subject key identifier:   85:E0:B1:FA:57:9C:EA:14:17:F0:6E:5C:C9:6D:FC:CC:F3:8C:BD:51
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584957F41862CB4BCD646D7A9700
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/bc371c38-7917-3988-a5f6-0263a408b6ba.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     11232
IP address blocks:        24.56.168.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:18:62:cb:4b:cd:64:6d:7a:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=62dc06cc-6b91-4262-841e-98e4377b7f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9e:3a:16:41:93:64:1d:72:68:19:46:00:c7:
                    74:2a:2c:39:cf:4c:a5:f9:bc:ff:9e:50:b3:ab:f4:
                    0c:f5:57:55:b6:26:06:43:47:03:7c:40:0f:41:0f:
                    37:cf:45:16:47:dc:27:01:b3:a5:f5:72:9a:2d:d4:
                    37:77:fa:94:d2:76:0d:81:d9:21:c0:74:d0:b6:82:
                    21:c7:a3:e1:02:3d:70:2a:56:a5:f7:b0:21:6f:00:
                    12:32:2b:80:68:03:c1:92:60:94:ee:9c:57:df:f6:
                    c3:7e:29:ab:45:a8:b9:2c:7d:79:bd:7d:dd:f1:3b:
                    73:4a:f2:44:bd:7a:25:f9:39:e7:56:6c:3a:3c:4c:
                    1c:f8:f8:2d:18:a2:47:5b:6e:07:d8:10:ab:44:8e:
                    fc:3d:bb:f1:36:23:af:51:1f:7a:12:fd:2a:d8:bf:
                    71:14:cc:6f:3d:d4:3a:d9:0f:a1:2a:56:7e:87:10:
                    35:ea:b2:68:21:45:d9:c5:f2:17:8b:a9:e8:3e:ea:
                    9c:a4:bf:c8:bf:3d:88:72:cd:83:6e:55:77:dc:dc:
                    8f:a1:b4:23:f6:0c:d4:ab:a3:0e:83:99:dc:cd:00:
                    ea:9f:ba:54:1d:c6:fe:8d:ee:ec:62:0c:f6:01:0a:
                    d3:50:70:da:b2:f7:62:60:d6:fb:39:d4:3c:26:b2:
                    5e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E0:B1:FA:57:9C:EA:14:17:F0:6E:5C:C9:6D:FC:CC:F3:8C:BD:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/bc371c38-7917-3988-a5f6-0263a408b6ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.56.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:e6:65:f8:e5:9f:5b:93:1f:4e:0d:57:31:0f:8b:13:e4:a6:
         08:f0:76:f6:1a:a6:98:8a:58:78:01:32:27:b5:0e:b1:4e:83:
         d5:2d:de:37:51:3e:ad:ce:44:2b:dd:1a:40:b7:17:c8:d4:8d:
         ee:b5:6c:1f:4c:01:49:f1:01:75:84:86:a5:18:bb:69:0a:d2:
         ee:f1:77:a5:44:d0:b8:a7:f6:5d:eb:53:c2:11:c8:c4:48:d9:
         0e:64:72:96:4d:59:ba:4a:1d:5b:89:f4:85:f6:a8:c8:7c:9b:
         29:2f:c6:3a:b3:03:43:e1:e1:6c:b9:6e:f0:f0:36:66:70:24:
         b9:f8:7a:9a:4d:5b:a1:5c:45:26:a6:2b:b0:8c:9e:2e:29:3a:
         72:d6:80:a1:58:75:59:4f:5a:a6:7c:c9:7e:5f:df:90:5d:54:
         e2:bb:42:c2:3d:cd:99:ad:7d:cd:63:6b:ad:0d:07:b2:fb:dd:
         e2:97:43:af:3f:d3:09:2c:bf:71:55:98:bb:6c:1c:2a:74:05:
         44:65:2b:64:f5:4f:0d:d0:6f:bb:88:39:0d:35:66:a4:67:c7:
         41:fb:c5:63:07:cb:60:09:9d:1e:7f:95:17:e7:48:bb:c8:33:
         64:73:ab:11:09:96:02:b4:75:b6:75:6f:42:49:9c:5d:90:1d:
         f0:00:bf:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9Bhiy0vNZG16lwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk
NjJkYzA2Y2MtNmI5MS00MjYyLTg0MWUtOThlNDM3N2I3ZjE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ46FkGTZB1yaBlGAMd0Kiw5z0yl+bz/nlCz
q/QM9VdVtiYGQ0cDfEAPQQ83z0UWR9wnAbOl9XKaLdQ3d/qU0nYNgdkhwHTQtoIh
x6PhAj1wKlal97AhbwASMiuAaAPBkmCU7pxX3/bDfimrRai5LH15vX3d8TtzSvJE
vXol+TnnVmw6PEwc+PgtGKJHW24H2BCrRI78PbvxNiOvUR96Ev0q2L9xFMxvPdQ6
2Q+hKlZ+hxA16rJoIUXZxfIXi6noPuqcpL/Ivz2Ics2DblV33NyPobQj9gzUq6MO
g5nczQDqn7pUHcb+je7sYgz2AQrTUHDasvdiYNb7OdQ8JrJe6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIXgsfpXnOoUF/BuXMlt/MzzjL1RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvYmMzNzFjMzgtNzkxNy0z
OTg4LWE1ZjYtMDI2M2E0MDhiNmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGDioMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACHmZfjln1uTH04NVzEPixPkpgjwdvYappiKWHgBMie1DrFOg9Ut3jdR
Pq3ORCvdGkC3F8jUje61bB9MAUnxAXWEhqUYu2kK0u7xd6VE0Lin9l3rU8IRyMRI
2Q5kcpZNWbpKHVuJ9IX2qMh8mykvxjqzA0Ph4Wy5bvDwNmZwJLn4eppNW6FcRSam
K7CMni4pOnLWgKFYdVlPWqZ8yX5f35BdVOK7QsI9zZmtfc1ja60NB7L73eKXQ68/
0wksv3FVmLtsHCp0BURlK2T1Tw3Qb7uIOQ01ZqRnx0H7xWMHy2AJnR5/lRfnSLvI
M2RzqxEJlgK0dbZ1b0JJnF2QHfAAvxM=
-----END CERTIFICATE-----