Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/493092a8-37e7-3600-a267-48e17c0aa38d.roa
File:                     493092a8-37e7-3600-a267-48e17c0aa38d.roa (raw, json)
Hash identifier:          XZ+UWKPlSwO7GLgt24Ern2/KD5pIzo7kzJpSB82JMFE=
Subject key identifier:   9B:BB:09:7B:4F:B8:3A:DA:04:B3:89:EC:32:07:CA:B9:9A:F1:11:42
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFD8E5CBAEA56503F273A0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/493092a8-37e7-3600-a267-48e17c0aa38d.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     21570
IP address blocks:        66.46.40.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:d8:e5:cb:ae:a5:65:03:f2:73:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=5bb40e0b-e78d-4230-afd8-57060006a865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:60:bd:6a:d7:37:09:e1:78:59:c7:b8:01:98:
                    29:16:d1:99:6c:71:19:4f:8d:f7:72:ff:29:77:8a:
                    ef:1d:68:76:7c:8a:40:8a:b8:70:e6:61:7e:02:94:
                    39:96:c4:79:91:e7:6a:e4:e7:8d:02:f6:8e:1d:41:
                    40:e6:e7:cc:6c:e2:54:22:94:e6:d7:0c:0c:2a:da:
                    bc:ef:95:20:9f:69:0b:43:5c:f9:49:03:4b:5b:71:
                    a7:d1:24:83:21:68:3e:b9:c8:cd:71:2f:cc:43:0d:
                    d5:fb:ae:a4:03:df:df:b8:a0:cd:44:c3:49:f9:11:
                    d6:aa:53:e7:8b:75:03:ab:96:8d:2f:dc:40:6a:e6:
                    c2:6b:8e:81:91:df:40:c9:97:b5:f6:c5:0e:b6:fa:
                    77:6f:4b:22:a6:a0:0e:3a:77:93:b4:82:19:4a:c7:
                    5e:b7:92:de:72:08:d7:e8:a4:ed:14:54:fb:ff:df:
                    75:4b:48:c6:9d:57:b5:ea:99:21:fd:5e:b1:28:98:
                    57:a8:05:ac:44:13:6a:5b:5d:fe:93:30:dd:34:31:
                    d7:cc:c8:b3:0d:99:18:f0:cf:9b:9e:88:d4:21:1e:
                    ba:06:dd:97:61:7c:08:38:4d:15:2e:32:78:b1:7c:
                    dc:b1:e3:8d:78:50:00:15:e2:0b:de:67:12:7e:5c:
                    1b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BB:09:7B:4F:B8:3A:DA:04:B3:89:EC:32:07:CA:B9:9A:F1:11:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/493092a8-37e7-3600-a267-48e17c0aa38d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.46.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:fc:61:76:68:33:f7:94:24:45:78:c7:ab:79:42:57:d5:95:
         47:4a:8d:c1:d5:fa:54:55:ae:7e:23:68:52:e6:8f:b6:53:fe:
         80:e9:02:a4:27:3f:65:c4:23:2d:5e:99:21:44:11:ad:a9:7c:
         35:f6:94:f4:f3:3e:80:bb:83:cd:fa:74:78:c5:53:7c:90:ae:
         11:23:5f:04:72:33:fd:e0:d8:f4:5e:c4:ba:b0:13:93:11:8e:
         bd:f4:a3:1b:b1:a1:a5:b3:6f:b6:05:a2:43:06:94:15:ba:2c:
         1e:50:3c:5b:e7:4b:35:92:42:b2:e6:57:cb:5f:73:bd:0e:54:
         9f:d8:d0:bb:42:db:8d:1c:79:b4:01:87:ba:b2:83:c0:a1:aa:
         43:b6:a5:bb:87:55:e0:e5:55:4d:fd:2d:32:5f:3c:60:a6:b5:
         6e:7a:6c:b8:26:a8:68:5b:c7:6a:c9:23:af:d9:d6:04:19:75:
         8d:e7:3c:22:31:a9:36:5f:92:30:74:01:66:af:72:d3:cc:06:
         85:9d:d5:7e:f3:19:bf:9c:f3:a3:e0:5a:13:cd:d0:97:ec:a6:
         d8:a1:8c:eb:52:2f:f9:5f:8e:59:83:65:6c:ba:ac:b8:6d:e8:
         67:9a:86:d9:32:53:d5:71:d4:31:8f:f7:d2:17:73:ef:4d:53:
         df:2e:fa:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn539jly66lZQPyc6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk
NWJiNDBlMGItZTc4ZC00MjMwLWFmZDgtNTcwNjAwMDZhODY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2C9atc3CeF4Wce4AZgpFtGZbHEZT433cv8p
d4rvHWh2fIpAirhw5mF+ApQ5lsR5kedq5OeNAvaOHUFA5ufMbOJUIpTm1wwMKtq8
75Ugn2kLQ1z5SQNLW3Gn0SSDIWg+ucjNcS/MQw3V+66kA9/fuKDNRMNJ+RHWqlPn
i3UDq5aNL9xAaubCa46Bkd9AyZe19sUOtvp3b0sipqAOOneTtIIZSsdet5LecgjX
6KTtFFT7/991S0jGnVe16pkh/V6xKJhXqAWsRBNqW13+kzDdNDHXzMizDZkY8M+b
nojUIR66Bt2XYXwIOE0VLjJ4sXzcseONeFAAFeIL3mcSflwbZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJu7CXtPuDraBLOJ7DIHyrma8RFCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvNDkzMDkyYTgtMzdlNy0z
NjAwLWEyNjctNDhlMTdjMGFhMzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQi4oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFH8YXZoM/eUJEV4x6t5QlfVlUdKjcHV+lRVrn4jaFLmj7ZT/oDpAqQn
P2XEIy1emSFEEa2pfDX2lPTzPoC7g836dHjFU3yQrhEjXwRyM/3g2PRexLqwE5MR
jr30oxuxoaWzb7YFokMGlBW6LB5QPFvnSzWSQrLmV8tfc70OVJ/Y0LtC240cebQB
h7qyg8ChqkO2pbuHVeDlVU39LTJfPGCmtW56bLgmqGhbx2rJI6/Z1gQZdY3nPCIx
qTZfkjB0AWavctPMBoWd1X7zGb+c86PgWhPN0JfsptihjOtSL/lfjlmDZWy6rLht
6GeahtkyU9Vx1DGP99IXc+9NU98u+qU=
-----END CERTIFICATE-----