Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/ffa280a4-d0de-3791-8fdc-60d53efa6d0f.roa
File:                     ffa280a4-d0de-3791-8fdc-60d53efa6d0f.roa (raw, json)
Hash identifier:          Y2HmIz6uruhon6xoaRKEiI0vDYQ6E0g0rmR59rKZuQ4=
Subject key identifier:   2E:CD:C2:99:E6:18:94:78:E7:92:9A:F5:F3:79:2C:58:09:4A:47:94
Certificate issuer:       /CN=12fa7453-6b85-412b-b280-7c71eec6c46b
Certificate serial:       010D0C9F43285848854B4073AEDEC0A0AAB894C0
Authority key identifier: 6A:52:B7:00:A6:FA:7F:6D:B6:3C:CC:97:63:A0:7F:18:31:EF:1A:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/ffa280a4-d0de-3791-8fdc-60d53efa6d0f.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     394356
IP address blocks:        158.51.152.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:40:73:ae:de:c0:a0:aa:b8:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fa7453-6b85-412b-b280-7c71eec6c46b
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=6312193d-3e69-4271-8154-ed4507dc896b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:29:f6:bd:ce:b7:47:7b:96:1f:5c:de:3a:de:
                    15:f0:35:5b:17:3a:33:ee:0c:ea:d3:73:35:d6:e6:
                    d6:11:39:6d:85:fd:13:40:fa:f5:8c:50:9e:cb:73:
                    dc:71:b9:e0:40:0a:89:c2:2f:d7:de:53:97:24:df:
                    21:9b:a6:df:15:72:42:e6:6e:ba:b2:d3:49:79:1e:
                    5e:e1:57:ae:3f:e5:02:57:42:82:b2:f5:e1:c5:c9:
                    ec:56:0d:09:f0:ad:4e:3a:19:69:5a:25:45:45:14:
                    9f:95:aa:fc:b4:58:19:39:16:0c:2a:75:5d:2e:89:
                    6f:24:70:72:68:38:60:8e:31:05:cf:da:17:39:3d:
                    eb:14:e3:53:2a:43:87:4d:f8:5d:77:aa:92:07:38:
                    79:2f:28:2f:e5:8c:d8:8f:06:f4:d1:40:e9:f5:08:
                    66:1d:df:68:e7:9e:49:47:bd:3a:e9:ad:db:2e:b0:
                    eb:b6:6b:b8:df:5f:c8:1d:4e:38:86:84:38:c8:ab:
                    ed:9d:04:87:9c:db:6d:e8:04:3b:72:0a:70:b0:32:
                    41:c8:d7:f3:95:0b:28:db:6b:ea:e1:8a:90:cc:c5:
                    6b:33:4f:01:88:11:e8:f5:0c:4e:5c:6d:44:70:44:
                    a6:c9:4b:03:f4:4a:30:75:af:a4:4e:0c:7e:20:37:
                    f9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CD:C2:99:E6:18:94:78:E7:92:9A:F5:F3:79:2C:58:09:4A:47:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/ffa280a4-d0de-3791-8fdc-60d53efa6d0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/12fa7453-6b85-412b-b280-7c71eec6c46b.crl

            X509v3 Authority Key Identifier:
                keyid:6A:52:B7:00:A6:FA:7F:6D:B6:3C:CC:97:63:A0:7F:18:31:EF:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:c3:61:e0:cc:57:cc:9d:67:37:9e:4c:f3:9f:60:48:7d:00:
         35:f3:77:d7:fe:be:9a:ea:4d:84:07:dc:fb:92:dd:39:c9:93:
         df:8b:53:74:c4:7c:64:93:f4:91:a7:8d:9a:26:25:ac:cb:35:
         08:54:05:7c:1d:fe:d8:d1:7b:62:da:bb:a4:1b:b8:ce:a7:dc:
         10:89:26:0a:c5:f3:e1:30:a4:13:7b:0f:fd:c3:5a:c5:28:9d:
         81:cc:c5:69:73:d9:c4:b6:07:29:6d:09:8f:f8:2f:f5:50:da:
         28:9d:31:72:1e:9d:16:17:29:09:13:f1:17:5c:f6:e0:24:f0:
         3a:49:dc:18:aa:3e:25:b4:9c:3c:48:c2:f0:bd:86:2b:59:df:
         3b:bd:fb:25:b4:4b:7b:af:4c:3e:37:af:5b:29:1d:60:f4:8f:
         a0:05:8f:d6:57:c2:ce:01:fc:f3:ba:33:09:53:64:14:b8:3d:
         46:e4:93:26:c3:2b:f3:fd:4a:60:b8:77:2a:e3:32:cb:45:c2:
         7d:63:18:b2:dd:72:ee:e0:72:86:98:55:5f:4f:09:6a:5e:9e:
         66:a1:9b:e0:0e:58:f7:bc:70:2e:9b:ff:67:58:a3:c3:7f:2f:
         75:92:86:a3:2c:44:58:2f:ae:93:79:45:76:25:8b:02:56:af:
         cc:7c:5a:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFS0Bzrt7AoKq4lMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTJmYTc0NTMtNmI4NS00MTJiLWIyODAtN2M3MWVlYzZj
NDZiMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk
NjMxMjE5M2QtM2U2OS00MjcxLTgxNTQtZWQ0NTA3ZGM4OTZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqin2vc63R3uWH1zeOt4V8DVbFzoz7gzq03M1
1ubWETlthf0TQPr1jFCey3PccbngQAqJwi/X3lOXJN8hm6bfFXJC5m66stNJeR5e
4VeuP+UCV0KCsvXhxcnsVg0J8K1OOhlpWiVFRRSflar8tFgZORYMKnVdLolvJHBy
aDhgjjEFz9oXOT3rFONTKkOHTfhdd6qSBzh5Lygv5YzYjwb00UDp9QhmHd9o555J
R7066a3bLrDrtmu431/IHU44hoQ4yKvtnQSHnNtt6AQ7cgpwsDJByNfzlQso22vq
4YqQzMVrM08BiBHo9QxOXG1EcESmyUsD9Eowda+kTgx+IDf5uwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC7NwpnmGJR455Ka9fN5LFgJSkeUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMmZh
NzQ1My02Yjg1LTQxMmItYjI4MC03YzcxZWVjNmM0NmIvZmZhMjgwYTQtZDBkZS0z
NzkxLThmZGMtNjBkNTNlZmE2ZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTJmYTc0NTMtNmI4NS00MTJiLWIy
ODAtN2M3MWVlYzZjNDZiLzEyZmE3NDUzLTZiODUtNDEyYi1iMjgwLTdjNzFlZWM2
YzQ2Yi5jcmwwHwYDVR0jBBgwFoAUalK3AKb6f222PMyXY6B/GDHvGhkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMmZhNzQ1My02Yjg1LTQxMmItYjI4MC03Yzcx
ZWVjNmM0NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnjOYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALLDYeDMV8ydZzeeTPOfYEh9ADXzd9f+vprqTYQH3PuS3TnJk9+LU3TE
fGST9JGnjZomJazLNQhUBXwd/tjRe2Lau6QbuM6n3BCJJgrF8+EwpBN7D/3DWsUo
nYHMxWlz2cS2ByltCY/4L/VQ2iidMXIenRYXKQkT8Rdc9uAk8DpJ3BiqPiW0nDxI
wvC9hitZ3zu9+yW0S3uvTD43r1spHWD0j6AFj9ZXws4B/PO6MwlTZBS4PUbkkybD
K/P9SmC4dyrjMstFwn1jGLLdcu7gcoaYVV9PCWpenmahm+AOWPe8cC6b/2dYo8N/
L3WShqMsRFgvrpN5RXYliwJWr8x8Whk=
-----END CERTIFICATE-----