Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/095b3dd6-20ae-3a8b-b0ed-6555d22d4a1b.roa
File:                     095b3dd6-20ae-3a8b-b0ed-6555d22d4a1b.roa (raw, json)
Hash identifier:          EDBZp5YTTj8SFCm8EayAak9sFl6YtuA8A0Im6KJJTec=
Subject key identifier:   AC:A2:76:35:E3:6E:00:26:42:F5:6F:41:F0:42:90:A3:6C:2F:70:4B
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285849350E8CB8DFEEA5915F523980
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/095b3dd6-20ae-3a8b-b0ed-6555d22d4a1b.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     1239
IP address blocks:        216.65.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:8c:b8:df:ee:a5:91:5f:52:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=db637546-d4d0-4068-a715-4d421056fcfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a1:e1:c7:f8:35:c6:bd:02:96:53:39:37:f6:
                    1d:44:26:15:67:88:af:92:f3:6a:d0:99:a1:f3:52:
                    54:c0:68:32:01:e4:87:b7:a7:36:e4:26:d1:66:4b:
                    fa:7d:f7:25:e9:a3:05:ec:09:7f:47:64:1a:84:7f:
                    e9:84:f3:0a:d4:06:46:a3:79:ff:e3:00:02:29:fe:
                    a1:8e:fa:65:55:a4:64:ea:54:71:4d:00:07:60:49:
                    4a:f5:ce:31:27:a0:92:6d:8f:ab:fe:c7:0e:b2:c0:
                    3a:e3:5e:d6:98:7b:7b:d8:bb:a4:30:bb:41:03:ce:
                    80:47:cb:3e:51:62:fc:22:9d:bc:57:98:45:f7:27:
                    55:5e:39:a4:a4:38:5c:b0:91:df:25:e4:99:63:ee:
                    41:52:31:06:68:72:12:a0:66:a6:34:52:6a:5b:36:
                    ad:65:93:ea:6d:8b:37:9f:38:fd:f2:36:e0:ef:04:
                    02:a3:a1:8b:ee:76:cb:83:ea:0e:70:c0:37:dd:ac:
                    6f:12:ba:b3:25:d7:f7:97:03:28:f8:4a:2a:19:c9:
                    1a:9d:93:e3:8a:5c:51:55:d4:96:7d:ed:b0:64:4d:
                    b1:3b:be:96:c7:21:4a:ee:90:06:39:79:a9:d6:3e:
                    9f:ab:92:fd:df:9e:6b:dd:b9:a7:d5:e1:de:c1:7e:
                    1e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A2:76:35:E3:6E:00:26:42:F5:6F:41:F0:42:90:A3:6C:2F:70:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/095b3dd6-20ae-3a8b-b0ed-6555d22d4a1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.65.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:77:10:63:19:86:de:0d:1f:8f:4b:f7:28:54:37:b6:a7:ca:
         04:f7:2a:7b:f0:57:ee:fd:11:ad:ff:4f:59:fb:36:be:90:6c:
         64:ec:7e:4d:78:98:7a:1e:13:fe:1f:fd:21:97:6b:63:f3:88:
         e5:89:60:17:af:21:ca:e5:3d:63:64:82:ed:37:60:ed:a7:f9:
         4d:0c:be:d7:ff:30:e8:f6:1a:f8:b6:49:3d:65:c9:d9:66:a1:
         41:a6:62:e2:0d:eb:bb:89:87:67:00:c3:9e:54:6b:25:6c:e1:
         9e:36:8d:b4:b3:1a:c8:d3:16:3f:b4:03:1b:25:46:7b:9f:8e:
         5e:91:c1:4f:0f:78:0e:e0:e2:41:bf:a7:23:0e:82:05:af:ad:
         f1:b1:75:a6:9e:9d:f7:a4:25:42:02:ca:d8:1c:86:db:28:a4:
         0f:3c:f7:25:92:98:19:8f:c2:c9:25:1d:e8:73:a5:5d:24:a0:
         bc:10:af:52:0f:67:56:2e:60:75:2f:31:d0:dc:a3:4b:39:a8:
         84:03:e6:51:0a:b6:9a:45:48:ce:a0:d3:e1:c4:d6:9d:5e:13:
         b4:4d:25:b1:f4:a5:70:1c:c1:5a:e2:d0:e1:ce:d4:27:5f:17:
         7f:03:65:33:88:f4:c3:e9:80:37:db:ae:93:24:45:f1:23:82:
         90:08:2b:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Doy43+6lkV9SOYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz
NjFiMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
ZGI2Mzc1NDYtZDRkMC00MDY4LWE3MTUtNGQ0MjEwNTZmY2ZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6Hhx/g1xr0CllM5N/YdRCYVZ4ivkvNq0Jmh
81JUwGgyAeSHt6c25CbRZkv6ffcl6aMF7Al/R2QahH/phPMK1AZGo3n/4wACKf6h
jvplVaRk6lRxTQAHYElK9c4xJ6CSbY+r/scOssA6417WmHt72LukMLtBA86AR8s+
UWL8Ip28V5hF9ydVXjmkpDhcsJHfJeSZY+5BUjEGaHISoGamNFJqWzatZZPqbYs3
nzj98jbg7wQCo6GL7nbLg+oOcMA33axvErqzJdf3lwMo+EoqGckanZPjilxRVdSW
fe2wZE2xO76WxyFK7pAGOXmp1j6fq5L9355r3bmn1eHewX4eBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKyidjXjbgAmQvVvQfBCkKNsL3BLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx
Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMDk1YjNkZDYtMjBhZS0z
YThiLWIwZWQtNjU1NWQyMmQ0YTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2
ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw
MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh
NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2EGAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH13EGMZht4NH49L9yhUN7anygT3KnvwV+79Ea3/T1n7Nr6QbGTsfk14
mHoeE/4f/SGXa2PziOWJYBevIcrlPWNkgu03YO2n+U0Mvtf/MOj2Gvi2ST1lydlm
oUGmYuIN67uJh2cAw55UayVs4Z42jbSzGsjTFj+0AxslRnufjl6RwU8PeA7g4kG/
pyMOggWvrfGxdaaenfekJUICytgchtsopA889yWSmBmPwsklHehzpV0koLwQr1IP
Z1YuYHUvMdDco0s5qIQD5lEKtppFSM6g0+HE1p1eE7RNJbH0pXAcwVri0OHO1Cdf
F38DZTOI9MPpgDfbrpMkRfEjgpAIK1g=
-----END CERTIFICATE-----