Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/61b0b54d-d7a1-3584-acd6-30e24b5de225.roa
File:                     61b0b54d-d7a1-3584-acd6-30e24b5de225.roa (raw, json)
Hash identifier:          d5prkx7AFFumY0dvEFACrnkzOPwPeygWZhdpmt5M6mY=
Subject key identifier:   5A:16:41:84:A3:5D:B0:26:BC:F9:30:9D:D0:CA:B7:81:1F:67:D4:94
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285849088171A1690E6619EDB92500
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/61b0b54d-d7a1-3584-acd6-30e24b5de225.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     174
IP address blocks:        198.145.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:71:a1:69:0e:66:19:ed:b9:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=1422d8ce-b07b-4fec-8212-38a12f197a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:b4:64:80:03:2d:64:b1:7d:58:82:fb:f9:
                    00:b5:b7:7e:c5:1a:11:b7:24:f2:e1:6a:0d:1f:70:
                    98:6c:fc:b6:04:d6:e6:95:c2:22:5e:0e:9e:17:fb:
                    4b:9b:8f:1c:c7:23:31:78:8e:f5:87:5b:77:05:16:
                    d8:68:e1:f4:00:db:ae:81:c0:48:82:6a:1d:f8:13:
                    ed:b5:7c:8a:d5:60:12:9b:5f:81:61:c1:cd:4e:58:
                    1e:4c:72:89:f2:ea:5d:d9:39:86:7b:3b:a2:47:70:
                    f7:e1:96:5a:54:7c:26:b9:8f:6c:d6:e2:ea:eb:bf:
                    9d:2a:52:88:57:99:53:4c:14:50:72:97:09:86:38:
                    e6:a5:13:2a:4f:81:8e:be:0b:4f:94:d7:58:4f:f7:
                    d9:55:78:6d:47:2b:25:25:8e:66:14:54:d7:50:af:
                    7c:62:80:22:c8:d1:a9:0b:8a:f5:b1:aa:e1:75:7d:
                    0e:ea:5c:28:b5:2d:e2:e4:a8:4f:5b:62:56:ca:ce:
                    70:5a:d1:ec:32:59:29:78:af:43:eb:db:1f:e2:38:
                    85:5b:d6:76:e3:ca:71:d3:78:e9:01:ca:d9:5e:59:
                    91:10:94:6b:d0:c4:5b:3d:e1:37:f4:c3:13:d6:71:
                    4b:b2:6f:99:84:0b:32:2e:0e:85:19:dd:15:a4:ed:
                    38:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:16:41:84:A3:5D:B0:26:BC:F9:30:9D:D0:CA:B7:81:1F:67:D4:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/61b0b54d-d7a1-3584-acd6-30e24b5de225.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:1e:16:13:e2:7b:69:ec:d1:0a:00:d6:bd:87:4f:fc:d1:0c:
         92:a6:a1:70:0d:96:95:98:cd:b4:bb:77:24:94:1f:92:fd:4e:
         45:57:c7:14:97:7b:2a:95:ce:43:25:e6:c8:fc:5e:fa:e1:46:
         ea:ed:c2:af:ab:24:b1:09:72:80:9b:be:37:7f:56:70:a4:a2:
         6a:ae:39:30:02:c0:bf:f1:0f:5a:51:b2:9d:ff:94:b4:80:95:
         e4:b7:ae:99:73:c8:6e:4c:d2:e4:08:f8:48:04:70:5e:b2:8e:
         52:49:d2:65:f4:c0:d7:0e:6c:6b:22:b4:7d:0a:83:3b:c4:5b:
         7f:87:72:a0:b9:fa:6a:58:bb:75:14:34:ac:9b:fb:15:07:36:
         ec:3b:64:3b:20:f8:f8:41:a7:a4:d5:58:8e:6e:d6:f9:8c:d7:
         b8:6e:89:1e:0d:bd:53:e8:b7:e4:67:06:b1:0d:7c:4e:42:5a:
         10:ae:78:2c:6a:12:38:11:c5:26:68:2d:48:5f:42:64:0d:09:
         c6:ad:09:b8:0f:ce:9f:89:4d:c2:cf:77:e1:99:64:c8:62:ca:
         a8:43:22:ec:17:e9:87:4d:26:6e:e3:69:55:5f:6e:70:34:10:
         59:d9:d2:ed:29:a9:94:2a:da:45:62:ad:17:1a:a6:15:fa:bb:
         d3:b4:4b:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgXGhaQ5mGe25JQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz
NjFiMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk
MTQyMmQ4Y2UtYjA3Yi00ZmVjLTgyMTItMzhhMTJmMTk3YTBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTa0ZIADLWSxfViC+/kAtbd+xRoRtyTy4WoN
H3CYbPy2BNbmlcIiXg6eF/tLm48cxyMxeI71h1t3BRbYaOH0ANuugcBIgmod+BPt
tXyK1WASm1+BYcHNTlgeTHKJ8upd2TmGezuiR3D34ZZaVHwmuY9s1uLq67+dKlKI
V5lTTBRQcpcJhjjmpRMqT4GOvgtPlNdYT/fZVXhtRyslJY5mFFTXUK98YoAiyNGp
C4r1sarhdX0O6lwotS3i5KhPW2JWys5wWtHsMlkpeK9D69sf4jiFW9Z248px03jp
AcrZXlmREJRr0MRbPeE39MMT1nFLsm+ZhAsyLg6FGd0VpO04CQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFoWQYSjXbAmvPkwndDKt4EfZ9SUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx
Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNjFiMGI1NGQtZDdhMS0z
NTg0LWFjZDYtMzBlMjRiNWRlMjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2
ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw
MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh
NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExpFQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADYeFhPie2ns0QoA1r2HT/zRDJKmoXANlpWYzbS7dySUH5L9TkVXxxSX
eyqVzkMl5sj8XvrhRurtwq+rJLEJcoCbvjd/VnCkomquOTACwL/xD1pRsp3/lLSA
leS3rplzyG5M0uQI+EgEcF6yjlJJ0mX0wNcObGsitH0KgzvEW3+HcqC5+mpYu3UU
NKyb+xUHNuw7ZDsg+PhBp6TVWI5u1vmM17huiR4NvVPot+RnBrENfE5CWhCueCxq
EjgRxSZoLUhfQmQNCcatCbgPzp+JTcLPd+GZZMhiyqhDIuwX6YdNJm7jaVVfbnA0
EFnZ0u0pqZQq2kVirRcaphX6u9O0S/0=
-----END CERTIFICATE-----