Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/555c0bc8-ee66-3fdb-ba71-d7f6c6458be9.roa
File:                     555c0bc8-ee66-3fdb-ba71-d7f6c6458be9.roa (raw, json)
Hash identifier:          rzWZO+mBgogQ+KBL8b7d4u/DrKkzWDxvVdj9QTp+RAs=
Subject key identifier:   AB:94:D9:4C:AD:A4:6D:69:F8:90:0F:26:AD:84:B8:50:B1:7D:16:5C
Certificate issuer:       /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial:       010D0C9F432858491AA6C426634FC0E804849220
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/555c0bc8-ee66-3fdb-ba71-d7f6c6458be9.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     6461
IP address blocks:        68.170.192.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:c4:26:63:4f:c0:e8:04:84:92:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=34ba3622-c080-413f-ba85-faf1bc17ae20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:04:dd:9f:bb:56:54:e7:d8:ac:f6:fa:d1:86:
                    5b:41:47:68:d2:7f:b5:66:7d:97:df:5c:82:12:40:
                    55:fb:64:61:20:c7:e4:02:43:3d:63:62:f8:2b:8a:
                    6a:cb:2e:60:cb:96:ec:a1:8b:03:67:52:d9:61:b9:
                    c5:1e:2b:60:41:f2:14:2b:a3:77:d3:da:fd:dd:8a:
                    8d:1c:90:5c:1b:28:24:13:9a:09:52:b2:0f:8f:95:
                    1d:74:c0:e6:fc:4a:58:51:8a:cb:07:3e:ed:f6:d3:
                    a0:05:45:22:4e:7b:74:e0:4e:b4:e9:5b:17:75:14:
                    67:22:28:c4:35:7d:f7:87:2c:64:97:0f:b1:b2:47:
                    2b:95:91:7e:de:7b:1c:49:f2:ba:fb:25:be:d3:1d:
                    a1:30:7e:0e:55:d5:94:3f:11:84:83:99:25:4a:3f:
                    13:96:6f:30:8f:d1:2c:ea:99:e9:cc:5b:75:c9:e8:
                    c7:a5:7f:b5:41:40:dc:dc:7d:e1:7d:cb:54:fd:2a:
                    f0:4f:87:ba:fb:28:57:90:13:3f:89:f2:dc:96:fd:
                    c1:03:65:1f:dd:38:f4:da:4c:3e:a3:10:e3:20:6e:
                    91:7a:4c:50:e5:50:f9:0c:33:91:4d:c5:b2:aa:77:
                    70:70:44:27:18:6b:ce:4a:7a:a8:af:d1:70:41:56:
                    3b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:94:D9:4C:AD:A4:6D:69:F8:90:0F:26:AD:84:B8:50:B1:7D:16:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/555c0bc8-ee66-3fdb-ba71-d7f6c6458be9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:5f:77:53:8a:59:65:68:d6:09:3d:6f:f8:78:c7:39:4c:ee:
         fb:19:94:0d:50:db:63:fa:82:9f:a1:1d:cd:04:a8:84:ba:17:
         5a:7c:c0:66:97:54:0e:cb:f0:0e:8a:13:7e:fd:d8:11:a6:3e:
         d4:1c:b1:4f:21:66:49:d3:f4:86:42:97:75:02:b9:1b:15:bf:
         7f:a5:3e:7b:1b:90:99:81:7c:dd:de:46:c3:10:5e:eb:40:f0:
         13:1b:74:f8:c1:70:18:85:e2:c0:f9:04:5f:ef:37:7b:15:ee:
         d0:c3:0a:92:36:f6:ce:ce:15:fe:ae:72:9f:a8:f4:7b:3a:48:
         f4:9c:81:62:10:4f:9c:61:42:92:dd:1a:30:f7:fb:a1:b6:6f:
         71:16:a3:75:f1:03:b0:03:5c:62:62:ba:bb:08:9b:46:43:6c:
         75:29:02:a8:82:be:d3:c5:ae:8f:d6:1a:b9:9d:8c:3b:93:e5:
         03:0e:f8:3a:e8:2b:83:c2:83:d1:21:10:66:2f:ec:8c:fb:0f:
         7b:af:35:04:87:9d:fe:95:6c:b1:fa:4b:d8:14:42:f3:95:d8:
         73:18:2a:8e:4a:8e:80:aa:db:0e:40:97:d0:c6:c2:5f:9a:e1:
         78:4c:37:94:ed:ba:3d:9d:f6:2b:94:73:18:cc:03:29:21:3b:
         97:2c:d8:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkapsQmY0/A6ASEkiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj
ZmEzMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk
MzRiYTM2MjItYzA4MC00MTNmLWJhODUtZmFmMWJjMTdhZTIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQTdn7tWVOfYrPb60YZbQUdo0n+1Zn2X31yC
EkBV+2RhIMfkAkM9Y2L4K4pqyy5gy5bsoYsDZ1LZYbnFHitgQfIUK6N309r93YqN
HJBcGygkE5oJUrIPj5UddMDm/EpYUYrLBz7t9tOgBUUiTnt04E606VsXdRRnIijE
NX33hyxklw+xskcrlZF+3nscSfK6+yW+0x2hMH4OVdWUPxGEg5klSj8Tlm8wj9Es
6pnpzFt1yejHpX+1QUDc3H3hfctU/SrwT4e6+yhXkBM/ifLclv3BA2Uf3Tj02kw+
oxDjIG6RekxQ5VD5DDORTcWyqndwcEQnGGvOSnqor9FwQVY7zQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKuU2UytpG1p+JAPJq2EuFCxfRZcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy
MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvNTU1YzBiYzgtZWU2Ni0z
ZmRiLWJhNzEtZDdmNmM2NDU4YmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli
MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw
Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk
MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKrAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKlfd1OKWWVo1gk9b/h4xzlM7vsZlA1Q22P6gp+hHc0EqIS6F1p8wGaX
VA7L8A6KE3792BGmPtQcsU8hZknT9IZCl3UCuRsVv3+lPnsbkJmBfN3eRsMQXutA
8BMbdPjBcBiF4sD5BF/vN3sV7tDDCpI29s7OFf6ucp+o9Hs6SPScgWIQT5xhQpLd
GjD3+6G2b3EWo3XxA7ADXGJiursIm0ZDbHUpAqiCvtPFro/WGrmdjDuT5QMO+Dro
K4PCg9EhEGYv7Iz7D3uvNQSHnf6VbLH6S9gUQvOV2HMYKo5KjoCq2w5Al9DGwl+a
4XhMN5Ttuj2d9iuUcxjMAykhO5cs2Jk=
-----END CERTIFICATE-----