Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4b624e85-9ef9-359d-98f1-cb3f14c94516.roa
File:                     4b624e85-9ef9-359d-98f1-cb3f14c94516.roa (raw, json)
Hash identifier:          0ziAjuiHDlg+Vd2Ar11eFUWicjXfTDWdNBgq9XR/jec=
Subject key identifier:   E6:80:9A:4D:B3:BD:37:AB:03:5D:52:D1:79:63:0D:7A:45:F1:E8:09
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C444A41DE9BA2DB74B1180
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4b624e85-9ef9-359d-98f1-cb3f14c94516.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        199.232.228.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:44:a4:1d:e9:ba:2d:b7:4b:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=349e1ecc-e129-4774-bfe8-d2209950c801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f5:e7:bc:1b:38:2d:85:7e:ae:c9:cd:09:2c:
                    f5:63:61:1f:80:0a:b3:26:16:0e:91:e5:1d:85:e4:
                    11:9d:0e:25:e9:ad:2e:1a:5b:10:8b:4b:a0:3c:02:
                    73:92:1a:62:55:22:27:46:28:f5:ab:55:71:21:b6:
                    65:44:4d:47:7d:a6:8c:0f:e2:39:6b:d7:32:f5:e1:
                    72:83:27:4a:7b:97:f1:9b:d9:ff:9c:5f:9e:49:e0:
                    86:ae:ec:42:2a:c5:51:6b:b4:d4:74:2a:7d:27:ad:
                    58:2b:4b:29:32:40:09:48:ad:eb:a8:d3:ac:3c:5e:
                    55:b9:c1:56:33:11:53:dc:27:b6:58:69:c5:c4:9b:
                    13:fe:7e:69:ae:f7:57:94:43:66:82:dc:9e:26:ae:
                    81:c8:60:19:6e:ed:22:f6:31:48:f2:dc:da:66:92:
                    ca:b3:b8:8e:c5:1c:92:29:41:05:33:6e:a0:be:22:
                    32:18:c9:7a:cb:44:50:a6:ec:1b:5b:e2:70:24:7c:
                    04:26:12:08:76:34:85:81:11:c6:c1:12:f9:14:88:
                    bc:0b:ae:c9:02:f3:74:a2:8e:fc:6d:d2:53:88:67:
                    fb:1a:00:84:f8:5f:51:55:33:2b:1f:7d:19:81:49:
                    a4:1d:a6:70:22:9f:f5:b0:6e:0a:cf:cf:82:f9:38:
                    00:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:80:9A:4D:B3:BD:37:AB:03:5D:52:D1:79:63:0D:7A:45:F1:E8:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/4b624e85-9ef9-359d-98f1-cb3f14c94516.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.232.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:b8:66:03:85:9c:06:e6:bb:e0:2c:45:42:b2:23:61:96:bd:
         9e:7d:39:7c:64:5e:fa:71:f5:f6:07:54:ec:92:13:dd:5b:61:
         d6:f7:05:51:38:d5:85:86:68:08:2f:16:66:eb:92:76:cd:da:
         ad:4e:ee:bd:d1:9a:92:58:3e:3f:d0:a2:40:bc:e3:49:d8:1b:
         3e:bf:50:f9:2a:24:46:c9:f5:17:ee:c7:dd:7a:70:5a:24:93:
         04:4d:38:bc:32:b2:47:f8:93:25:c7:13:73:2d:ab:ab:5d:83:
         20:73:8b:a9:21:ee:96:f9:85:19:3b:75:82:fe:a8:0a:36:15:
         56:9f:e2:fe:1d:2a:12:c8:e6:6b:8b:98:8d:3c:5c:00:1d:c3:
         85:8d:40:19:38:c9:4e:3c:9d:95:a5:0c:6e:26:27:ba:46:f5:
         af:b5:77:3f:43:1a:0c:88:39:af:c2:aa:5e:ce:d3:7d:d2:2e:
         3c:b9:43:85:b8:19:6d:bb:41:f7:84:f8:36:28:a2:92:6a:06:
         38:46:25:3f:71:42:c8:23:0d:04:2f:5f:74:90:5c:d8:93:00:
         5c:8b:85:a4:7a:78:cb:82:f3:0b:d0:d1:46:42:2f:69:af:80:
         1a:8b:fb:eb:03:80:47:95:ea:fc:85:c9:5a:c1:2c:0c:a2:ce:
         ee:e3:3e:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxESkHem6LbdLEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
MzQ5ZTFlY2MtZTEyOS00Nzc0LWJmZTgtZDIyMDk5NTBjODAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPXnvBs4LYV+rsnNCSz1Y2EfgAqzJhYOkeUd
heQRnQ4l6a0uGlsQi0ugPAJzkhpiVSInRij1q1VxIbZlRE1HfaaMD+I5a9cy9eFy
gydKe5fxm9n/nF+eSeCGruxCKsVRa7TUdCp9J61YK0spMkAJSK3rqNOsPF5VucFW
MxFT3Ce2WGnFxJsT/n5prvdXlENmgtyeJq6ByGAZbu0i9jFI8tzaZpLKs7iOxRyS
KUEFM26gviIyGMl6y0RQpuwbW+JwJHwEJhIIdjSFgRHGwRL5FIi8C67JAvN0oo78
bdJTiGf7GgCE+F9RVTMrH30ZgUmkHaZwIp/1sG4Kz8+C+TgAdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOaAmk2zvTerA11S0XljDXpF8egJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNGI2MjRlODUtOWVmOS0z
NTlkLTk4ZjEtY2IzZjE0Yzk0NTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+jkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKS4ZgOFnAbmu+AsRUKyI2GWvZ59OXxkXvpx9fYHVOySE91bYdb3BVE4
1YWGaAgvFmbrknbN2q1O7r3RmpJYPj/QokC840nYGz6/UPkqJEbJ9Rfux916cFok
kwRNOLwyskf4kyXHE3Mtq6tdgyBzi6kh7pb5hRk7dYL+qAo2FVaf4v4dKhLI5muL
mI08XAAdw4WNQBk4yU48nZWlDG4mJ7pG9a+1dz9DGgyIOa/Cql7O033SLjy5Q4W4
GW27QfeE+DYoopJqBjhGJT9xQsgjDQQvX3SQXNiTAFyLhaR6eMuC8wvQ0UZCL2mv
gBqL++sDgEeV6vyFyVrBLAyizu7jPmc=
-----END CERTIFICATE-----