Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/a91f6701-0585-395e-ad18-03c9b663d0f6.roa
File:                     a91f6701-0585-395e-ad18-03c9b663d0f6.roa (raw, json)
Hash identifier:          1I1nw20Y+p626GKLslZ/ikQPwQ8Mp72HZfrvJjM6YEg=
Subject key identifier:   49:C1:46:57:7E:93:D1:71:70:E0:40:B0:8D:51:23:C9:6A:78:06:2D
Certificate issuer:       /CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
Certificate serial:       010D0C9F432858493ED3D90515830E25D6A9A100
Authority key identifier: 7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/a91f6701-0585-395e-ad18-03c9b663d0f6.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        69.89.42.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:d9:05:15:83:0e:25:d6:a9:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=f747328d-d91d-4b7b-88f9-5e67e09c1c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:05:62:f4:94:9a:d2:a6:39:f8:b9:64:ba:03:
                    14:a8:6a:5b:02:c1:93:69:28:08:3b:27:39:41:eb:
                    6b:90:ec:c6:94:3a:26:b4:83:d6:02:94:1a:22:1e:
                    4d:0f:81:bd:f0:f0:26:63:ac:66:22:f1:e6:5f:47:
                    9a:23:96:d4:dd:d7:de:19:37:ce:14:77:17:16:4b:
                    23:59:53:b0:31:3d:e8:6b:ba:ca:a4:ec:1e:46:29:
                    38:74:a3:9f:32:9b:8a:9a:92:0a:02:a9:86:47:87:
                    16:89:eb:be:cd:7f:42:5c:c9:91:32:db:b4:d1:95:
                    0f:d1:3f:a4:5a:a8:ed:55:85:b5:c5:50:37:fb:33:
                    50:d7:5d:d1:8a:03:fa:39:e9:39:e1:7d:93:82:a4:
                    7f:d4:7f:9e:c2:6b:3c:b4:d6:04:76:f4:e7:39:0b:
                    02:f5:da:71:ec:0f:9c:94:99:09:32:d7:da:76:05:
                    db:04:35:38:70:19:ea:23:cb:57:34:15:58:87:88:
                    c4:6e:df:92:b0:c6:9f:16:90:f9:1c:0f:6f:75:06:
                    5a:40:c6:cb:ab:52:e3:c1:f1:5e:46:8c:3d:87:62:
                    63:6a:33:c4:68:07:e5:81:23:a7:c2:96:9a:31:d7:
                    86:b6:c9:24:10:c7:c3:9a:ac:61:d0:bb:6c:d2:ed:
                    36:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C1:46:57:7E:93:D1:71:70:E0:40:B0:8D:51:23:C9:6A:78:06:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/a91f6701-0585-395e-ad18-03c9b663d0f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl

            X509v3 Authority Key Identifier:
                keyid:7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.89.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:3b:7e:c4:97:e8:cd:0c:51:76:41:12:a2:e0:34:1f:69:16:
         24:49:83:c5:72:6e:00:74:22:44:ed:0a:f4:87:70:5f:eb:17:
         dd:f8:d6:75:83:9d:15:0f:a6:7b:bc:e4:e9:1c:f6:fb:b8:cd:
         1c:14:ee:1e:3f:c1:9d:15:ec:e8:2f:c0:f4:82:3b:5d:02:ca:
         b9:c6:65:fe:94:12:38:eb:92:b3:b0:58:1b:a6:e2:bb:5e:a7:
         3d:32:c9:32:47:bf:b8:8f:28:cf:76:91:88:bd:8d:92:b5:b4:
         c7:bb:4b:f7:31:64:b1:6d:ac:e6:d4:5e:87:eb:f8:ca:18:9e:
         97:1d:1a:57:be:74:fe:c7:0a:16:c2:18:de:4d:c3:9e:50:93:
         6f:ac:21:3b:3f:30:fd:43:50:2a:bb:78:69:21:3d:3d:98:6e:
         20:95:3f:0f:f1:cd:03:8e:61:0f:28:02:e6:c5:b7:e4:f4:3e:
         62:51:ca:3e:76:2c:c7:f1:55:0c:66:6e:90:54:4a:3d:0b:06:
         4e:c0:9c:63:87:ad:df:bd:c8:07:7f:3e:60:37:32:6b:06:16:
         ce:fa:17:9c:f3:50:d3:bf:a3:61:ab:55:6b:d4:71:db:e9:23:
         0e:30:bc:cb:4c:f7:42:ec:08:01:dc:84:7f:75:2a:22:c0:28:
         0a:0d:69:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+09kFFYMOJdapoQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGU0MzNjMWYtYTA3Mi00ZGZkLTgwOTYtYzZjODYzNGE0
OWY4MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk
Zjc0NzMyOGQtZDkxZC00YjdiLTg4ZjktNWU2N2UwOWMxYzQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QVi9JSa0qY5+LlkugMUqGpbAsGTaSgIOyc5
QetrkOzGlDomtIPWApQaIh5ND4G98PAmY6xmIvHmX0eaI5bU3dfeGTfOFHcXFksj
WVOwMT3oa7rKpOweRik4dKOfMpuKmpIKAqmGR4cWieu+zX9CXMmRMtu00ZUP0T+k
WqjtVYW1xVA3+zNQ113RigP6Oek54X2TgqR/1H+ewms8tNYEdvTnOQsC9dpx7A+c
lJkJMtfadgXbBDU4cBnqI8tXNBVYh4jEbt+SsMafFpD5HA9vdQZaQMbLq1LjwfFe
Row9h2JjajPEaAflgSOnwpaaMdeGtskkEMfDmqxh0Lts0u02kwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEnBRld+k9FxcOBAsI1RI8lqeAYtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQz
M2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4NjM0YTQ5ZjgvYTkxZjY3MDEtMDU4NS0z
OTVlLWFkMTgtMDNjOWI2NjNkMGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGU0MzNjMWYtYTA3Mi00ZGZkLTgw
OTYtYzZjODYzNGE0OWY4LzhlNDMzYzFmLWEwNzItNGRmZC04MDk2LWM2Yzg2MzRh
NDlmOC5jcmwwHwYDVR0jBBgwFoAUf5Rf3H0zcSnURH4cJ0ZvWGrU4icwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQzM2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4
NjM0YTQ5ZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARVkqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEU7fsSX6M0MUXZBEqLgNB9pFiRJg8VybgB0IkTtCvSHcF/rF9341nWD
nRUPpnu85Okc9vu4zRwU7h4/wZ0V7OgvwPSCO10CyrnGZf6UEjjrkrOwWBum4rte
pz0yyTJHv7iPKM92kYi9jZK1tMe7S/cxZLFtrObUXofr+MoYnpcdGle+dP7HChbC
GN5Nw55Qk2+sITs/MP1DUCq7eGkhPT2YbiCVPw/xzQOOYQ8oAubFt+T0PmJRyj52
LMfxVQxmbpBUSj0LBk7AnGOHrd+9yAd/PmA3MmsGFs76F5zzUNO/o2GrVWvUcdvp
Iw4wvMtM90LsCAHchH91KiLAKAoNafA=
-----END CERTIFICATE-----