Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/259f3724-3c3e-369d-802f-686d6a0da0d6.roa
File:                     259f3724-3c3e-369d-802f-686d6a0da0d6.roa (raw, json)
Hash identifier:          UxYSe1c8kHD9wLG+DMDplJzYnYKDy4i8ZeFz4e8DAg0=
Subject key identifier:   6E:E3:F3:81:C2:32:10:1F:68:2A:A3:6F:4D:95:02:63:6F:C9:7C:B5
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFCA53130BBD1BA5246C80
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/259f3724-3c3e-369d-802f-686d6a0da0d6.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     15290
IP address blocks:        206.191.74.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:ca:53:13:0b:bd:1b:a5:24:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=5fb6ce83-0c28-48f8-98c0-e03ce2a1312c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3b:80:f3:93:98:36:a6:e7:48:3f:40:24:98:
                    24:a3:92:28:63:f1:5d:a8:8e:b4:d9:77:13:0f:b7:
                    60:59:11:c8:f0:0e:2e:81:4b:91:e0:da:18:94:28:
                    3d:25:5d:a4:cd:63:e5:40:65:a1:04:49:90:3b:42:
                    db:2d:f0:cb:58:bf:47:47:36:d2:dc:d0:33:2d:28:
                    ab:46:29:93:96:4f:5b:a0:c4:77:f0:6d:dd:d8:ec:
                    41:15:bd:94:b3:dc:f6:b5:24:f5:56:64:2d:68:b6:
                    e4:a2:b8:7a:71:11:93:10:6e:7e:fb:98:3c:4b:fe:
                    22:50:5a:d5:21:ec:de:f5:c0:91:ef:74:9d:6f:41:
                    93:07:b4:f0:0f:74:60:8e:87:ea:a2:f2:6e:2e:df:
                    a2:0d:86:8b:5c:19:f3:02:de:f7:72:b1:09:12:34:
                    d8:cf:61:a5:bc:0c:a0:31:94:45:c7:50:0b:3c:9d:
                    45:20:94:43:a8:73:15:4b:23:3c:90:4b:9b:b3:24:
                    46:d3:be:3c:db:76:50:ea:4f:9e:52:1f:7e:31:86:
                    5d:ec:33:5a:f9:f6:a6:2b:f6:1b:5e:61:d0:2e:92:
                    a7:e3:e3:c4:f9:6c:50:b8:94:b5:db:e4:23:3c:f2:
                    a3:76:45:c0:25:8b:fa:24:e1:7c:e6:91:09:07:05:
                    c3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E3:F3:81:C2:32:10:1F:68:2A:A3:6F:4D:95:02:63:6F:C9:7C:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/259f3724-3c3e-369d-802f-686d6a0da0d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.191.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a2:51:bc:da:7c:34:20:3a:ed:00:32:f2:25:40:45:b8:2f:
         d8:0d:dc:b0:ba:22:00:df:f7:01:b3:18:b1:d1:2d:65:ec:dc:
         34:39:88:68:a3:ea:76:11:ac:4f:a6:b6:45:23:88:c8:c4:07:
         97:92:0d:35:9a:94:c1:eb:b7:00:a0:49:b9:82:1c:bd:5d:5f:
         21:5a:a5:6d:2d:74:fb:81:b8:45:d1:d8:e3:74:6d:0c:fb:e8:
         2a:e4:53:08:52:b3:7b:8d:b6:86:49:38:2c:4c:f3:10:39:f0:
         a1:1e:ed:6d:fd:85:6e:60:de:e3:64:c6:d1:ed:ef:78:64:d1:
         53:6f:09:dc:b4:7e:aa:e8:cf:00:bf:ae:4b:ee:95:35:dc:c3:
         a5:4e:22:f9:64:9e:5f:61:80:83:d6:2d:51:29:03:3d:ad:3f:
         59:cc:99:87:46:d1:7a:0f:8c:91:c4:d2:71:f9:e4:2e:d7:2c:
         76:15:d9:4c:5e:25:3a:12:92:ca:41:cf:bb:6a:1c:c0:50:66:
         68:ab:c3:49:28:f8:cf:bc:c3:f5:9e:f2:95:b0:9d:43:a6:22:
         4e:62:33:57:e1:1f:d5:45:c1:90:25:02:58:ba:80:74:58:1d:
         0b:67:65:61:54:14:64:7f:45:21:cc:e1:f7:27:cf:35:51:aa:
         b3:66:94:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn538pTEwu9G6UkbIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk
NWZiNmNlODMtMGMyOC00OGY4LTk4YzAtZTAzY2UyYTEzMTJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTuA85OYNqbnSD9AJJgko5IoY/FdqI602XcT
D7dgWRHI8A4ugUuR4NoYlCg9JV2kzWPlQGWhBEmQO0LbLfDLWL9HRzbS3NAzLSir
RimTlk9boMR38G3d2OxBFb2Us9z2tST1VmQtaLbkorh6cRGTEG5++5g8S/4iUFrV
Ieze9cCR73Sdb0GTB7TwD3RgjofqovJuLt+iDYaLXBnzAt73crEJEjTYz2GlvAyg
MZRFx1ALPJ1FIJRDqHMVSyM8kEubsyRG074823ZQ6k+eUh9+MYZd7DNa+famK/Yb
XmHQLpKn4+PE+WxQuJS12+QjPPKjdkXAJYv6JOF85pEJBwXDXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG7j84HCMhAfaCqjb02VAmNvyXy1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvMjU5ZjM3MjQtM2MzZS0z
NjlkLTgwMmYtNjg2ZDZhMGRhMGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzr9KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEKiUbzafDQgOu0AMvIlQEW4L9gN3LC6IgDf9wGzGLHRLWXs3DQ5iGij
6nYRrE+mtkUjiMjEB5eSDTWalMHrtwCgSbmCHL1dXyFapW0tdPuBuEXR2ON0bQz7
6CrkUwhSs3uNtoZJOCxM8xA58KEe7W39hW5g3uNkxtHt73hk0VNvCdy0fqrozwC/
rkvulTXcw6VOIvlknl9hgIPWLVEpAz2tP1nMmYdG0XoPjJHE0nH55C7XLHYV2Uxe
JToSkspBz7tqHMBQZmirw0ko+M+8w/We8pWwnUOmIk5iM1fhH9VFwZAlAli6gHRY
HQtnZWFUFGR/RSHM4fcnzzVRqrNmlDI=
-----END CERTIFICATE-----