Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/653d31c9-15ae-32e9-b8af-149901dc40e7.roa
File:                     653d31c9-15ae-32e9-b8af-149901dc40e7.roa (raw, json)
Hash identifier:          bISV2c5YWFj27gb8vz/iHwsV55WgNjyXRAi2P8nc0wc=
Subject key identifier:   D5:90:D9:0B:27:E8:13:CC:0C:D8:6D:1A:8B:08:5F:2C:7C:F6:56:FC
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C42C27C89C5465F830D600
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/653d31c9-15ae-32e9-b8af-149901dc40e7.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        140.248.219.192/26 maxlen: 26
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:2c:27:c8:9c:54:65:f8:30:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=77d5bcaf-7df5-451c-a56c-418bda0ddad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:12:9d:78:e8:96:84:81:f8:7d:e0:63:5c:57:
                    01:46:7c:d4:22:77:6d:e8:36:57:d3:ee:4c:74:ec:
                    f3:cd:04:93:84:b1:68:23:f8:41:93:ed:6f:a7:64:
                    60:1b:d4:b7:72:cf:88:02:cb:b2:d6:45:2c:7b:7e:
                    07:18:c9:53:2d:6a:9c:ba:17:be:22:82:9c:5f:7b:
                    7f:b2:20:be:24:ed:cc:3e:05:13:c9:9f:20:7b:28:
                    be:cd:94:e0:67:03:6d:28:85:4d:69:70:1f:e7:ab:
                    52:aa:33:25:7d:8c:f5:56:13:1b:a7:c0:28:b1:52:
                    ab:19:5b:77:f2:f5:0a:19:f9:16:43:e0:99:c2:ac:
                    6e:03:fb:4a:13:07:ec:5b:e9:b3:b6:b4:00:53:56:
                    57:ad:79:d2:c6:57:fe:ad:a0:ac:0a:d3:28:65:db:
                    7e:24:9c:af:72:5e:0e:99:6f:26:da:63:6b:cb:0b:
                    44:11:54:e5:da:43:3d:c8:9c:db:8f:b6:57:c4:fd:
                    ae:e0:43:57:eb:1a:35:0e:64:d5:af:fb:b7:66:63:
                    0c:16:03:de:86:40:02:85:d5:52:ce:a1:20:cd:83:
                    ff:88:f9:0a:7f:9c:0a:5f:ef:93:e8:b7:40:53:3c:
                    b3:44:13:e0:e1:91:dc:71:50:c9:2f:d7:23:f2:12:
                    15:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:90:D9:0B:27:E8:13:CC:0C:D8:6D:1A:8B:08:5F:2C:7C:F6:56:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/653d31c9-15ae-32e9-b8af-149901dc40e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.219.192/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ff:e8:73:a2:87:30:37:7a:e8:96:5d:69:46:51:f9:94:e9:
         32:63:08:b1:74:01:44:ed:77:79:cc:fc:fa:d6:0d:e9:86:b9:
         94:20:47:ae:01:f5:92:69:cc:16:b4:33:c5:01:57:0b:10:b7:
         06:a8:7f:bb:6b:67:97:22:c5:c5:3a:91:36:fa:c6:d0:b4:9a:
         f6:fd:4e:1f:56:2b:4b:05:64:f3:e3:53:68:a1:4f:ea:13:36:
         05:f0:51:a9:f0:6d:a1:44:29:1e:99:48:f8:ab:03:cf:2a:06:
         fe:82:2f:da:c4:eb:41:fa:62:08:0e:37:f0:20:ba:e2:63:d9:
         b4:72:9c:7c:c2:01:42:b2:54:15:4e:21:92:15:4c:28:22:be:
         ce:e1:b1:61:94:80:f0:71:d2:e1:10:7a:c3:79:69:37:10:3e:
         cb:34:25:40:ec:1c:65:82:4e:b8:98:39:b4:e4:b8:ee:78:38:
         47:6b:17:66:cd:5b:9d:6a:39:b8:c3:8e:0d:58:f1:93:4f:3d:
         b6:b1:31:d1:64:d7:dc:35:d5:20:bb:99:ef:8a:3a:e3:a2:97:
         4a:21:2f:1c:35:b0:14:04:c7:47:23:22:49:1d:4a:08:d2:0a:
         3d:3d:0d:c5:84:8b:71:fd:67:03:f3:24:54:b3:dc:7d:f7:be:
         ec:04:3e:bc
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElTxCwnyJxUZfgw1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
NzdkNWJjYWYtN2RmNS00NTFjLWE1NmMtNDE4YmRhMGRkYWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BKdeOiWhIH4feBjXFcBRnzUIndt6DZX0+5M
dOzzzQSThLFoI/hBk+1vp2RgG9S3cs+IAsuy1kUse34HGMlTLWqcuhe+IoKcX3t/
siC+JO3MPgUTyZ8geyi+zZTgZwNtKIVNaXAf56tSqjMlfYz1VhMbp8AosVKrGVt3
8vUKGfkWQ+CZwqxuA/tKEwfsW+mztrQAU1ZXrXnSxlf+raCsCtMoZdt+JJyvcl4O
mW8m2mNrywtEEVTl2kM9yJzbj7ZXxP2u4ENX6xo1DmTVr/u3ZmMMFgPehkAChdVS
zqEgzYP/iPkKf5wKX++T6LdAUzyzRBPg4ZHccVDJL9cj8hIV/wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNWQ2Qsn6BPMDNhtGosIXyx89lb8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNjUzZDMxYzktMTVhZS0z
MmU5LWI4YWYtMTQ5OTAxZGM0MGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGjPjbwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAq/+hzoocwN3roll1pRlH5lOkyYwixdAFE7Xd5zPz61g3phrmUIEeu
AfWSacwWtDPFAVcLELcGqH+7a2eXIsXFOpE2+sbQtJr2/U4fVitLBWTz41NooU/q
EzYF8FGp8G2hRCkemUj4qwPPKgb+gi/axOtB+mIIDjfwILriY9m0cpx8wgFCslQV
TiGSFUwoIr7O4bFhlIDwcdLhEHrDeWk3ED7LNCVA7Bxlgk64mDm05LjueDhHaxdm
zVudajm4w44NWPGTTz22sTHRZNfcNdUgu5nvijrjopdKIS8cNbAUBMdHIyJJHUoI
0go9PQ3FhItx/WcD8yRUs9x9977sBD68
-----END CERTIFICATE-----