Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/94e26ac8-93a2-3488-b150-0ab306f6fc25.roa
File:                     94e26ac8-93a2-3488-b150-0ab306f6fc25.roa (raw, json)
Hash identifier:          /9ve8RGTzcMJVemGR73rO2GST4YQOaqm4vC95XJvEcI=
Subject key identifier:   7C:0E:F8:88:0A:B1:D9:3F:74:3B:62:DB:2D:B5:5A:C5:03:11:26:7D
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F43285849009806929FCCCCE438D3E100
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/94e26ac8-93a2-3488-b150-0ab306f6fc25.roa
Signing time:             Tue 25 Feb 2025 18:00:08 +0000
ROA not before:           Tue 25 Feb 2025 18:00:08 +0000
ROA not after:            Mon 26 May 2025 17:00:08 +0000
asID:                     54113
IP address blocks:        140.248.197.0/25 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:98:06:92:9f:cc:cc:e4:38:d3:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb 25 18:00:08 2025 GMT
            Not After : May 26 17:00:08 2025 GMT
        Subject: CN=28d15bb1-3947-4328-b9bf-1f2c0eb32dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3f:6d:a0:de:2a:64:f4:50:12:f9:e2:79:16:
                    ec:5f:74:d2:e7:da:97:bc:2f:3a:85:d6:2e:ce:85:
                    1a:36:3e:f6:00:41:38:d4:da:85:8c:8d:82:96:eb:
                    a2:f8:f8:31:8a:97:d8:ce:0c:ed:5b:a4:a7:04:f0:
                    0e:cf:55:76:15:4b:11:30:eb:40:47:9e:35:95:e4:
                    34:b2:3c:9c:60:cc:54:21:ec:6c:07:8b:54:d1:d2:
                    3f:1e:bd:c5:46:37:e5:79:c9:87:87:0b:f3:50:20:
                    98:66:fe:c1:c4:e5:7d:59:05:41:9e:92:16:24:e3:
                    da:6f:07:ff:4f:25:33:be:18:ec:d1:2b:d1:c4:60:
                    dd:01:54:e4:bc:1f:9a:c0:3d:8f:5f:3e:67:de:03:
                    39:41:7c:bb:16:2d:2a:86:60:8b:0b:eb:30:54:57:
                    fb:09:b0:9c:88:40:3c:6e:08:4a:ad:de:96:df:7a:
                    85:fd:88:f3:65:47:b0:99:f2:3b:98:dd:b8:81:1c:
                    d9:2f:a7:7c:d2:27:6c:cc:2c:89:5f:37:fe:55:f8:
                    d9:14:69:dd:65:e3:6a:93:ff:87:c0:3b:6d:10:f4:
                    d7:58:e4:ba:35:7d:97:51:0b:a0:a2:bb:07:70:98:
                    c7:74:e4:6e:04:2d:9c:a4:78:cb:d5:da:59:7e:41:
                    a0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0E:F8:88:0A:B1:D9:3F:74:3B:62:DB:2D:B5:5A:C5:03:11:26:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/94e26ac8-93a2-3488-b150-0ab306f6fc25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.197.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ec:be:f8:6e:8c:e8:a3:10:bd:1b:8c:ac:e9:1c:f3:2c:4a:
         13:c7:da:3c:6b:92:e7:65:74:1d:86:15:05:e1:99:e3:2a:12:
         f8:fa:31:a0:10:0c:9e:43:f4:ec:70:f1:3d:d3:61:0f:6f:82:
         07:b3:03:21:06:ff:d0:b2:ad:71:76:76:e1:fc:3b:5d:52:ed:
         03:e9:42:4c:c7:ae:27:68:c9:aa:0e:51:9d:52:0f:01:2b:88:
         c7:d7:59:bd:a2:5b:b4:68:26:5a:46:da:2f:ab:aa:9a:d3:41:
         df:40:60:56:7d:ea:cf:60:8c:d3:b8:ce:4a:cf:28:57:cd:bb:
         31:fa:f8:4d:ec:3c:05:7f:6c:07:d0:bf:b0:f2:1e:30:00:cb:
         b0:dd:b5:1e:be:3a:6e:40:f9:ee:49:3a:ce:c9:5a:99:c8:ef:
         31:bb:7e:43:81:7c:3d:4b:57:21:19:ee:ab:2f:90:38:8e:c6:
         d3:f4:3b:87:d1:bc:af:7c:f6:d8:22:4a:0e:fb:fa:ab:e3:50:
         68:81:c1:5b:4e:ee:c2:20:25:54:b8:15:e3:0b:1a:bd:cf:75:
         db:81:6a:52:12:93:06:65:d4:8c:04:20:1b:05:d8:c1:57:1b:
         f3:2c:8c:e6:49:35:47:0a:47:58:71:5d:5e:cf:5f:f9:4f:4d:
         16:fd:7b:df
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkAmAaSn8zM5DjT4QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDIyNTE4MDAwOFoXDTI1MDUyNjE3MDAwOFowLzEtMCsGA1UEAxMk
MjhkMTViYjEtMzk0Ny00MzI4LWI5YmYtMWYyYzBlYjMyZGM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD9toN4qZPRQEvnieRbsX3TS59qXvC86hdYu
zoUaNj72AEE41NqFjI2Cluui+PgxipfYzgztW6SnBPAOz1V2FUsRMOtAR541leQ0
sjycYMxUIexsB4tU0dI/Hr3FRjflecmHhwvzUCCYZv7BxOV9WQVBnpIWJOPabwf/
TyUzvhjs0SvRxGDdAVTkvB+awD2PXz5n3gM5QXy7Fi0qhmCLC+swVFf7CbCciEA8
bghKrd6W33qF/YjzZUewmfI7mN24gRzZL6d80idszCyJXzf+VfjZFGndZeNqk/+H
wDttEPTXWOS6NX2XUQugorsHcJjHdORuBC2cpHjL1dpZfkGgOQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHwO+IgKsdk/dDti2y21WsUDESZ9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvOTRlMjZhYzgtOTNhMi0z
NDg4LWIxNTAtMGFiMzA2ZjZmYzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHjPjFADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAi7L74bozooxC9G4ys6RzzLEoTx9o8a5LnZXQdhhUF4ZnjKhL4+jGg
EAyeQ/TscPE902EPb4IHswMhBv/Qsq1xdnbh/DtdUu0D6UJMx64naMmqDlGdUg8B
K4jH11m9olu0aCZaRtovq6qa00HfQGBWferPYIzTuM5KzyhXzbsx+vhN7DwFf2wH
0L+w8h4wAMuw3bUevjpuQPnuSTrOyVqZyO8xu35DgXw9S1chGe6rL5A4jsbT9DuH
0byvfPbYIkoO+/qr41BogcFbTu7CICVUuBXjCxq9z3XbgWpSEpMGZdSMBCAbBdjB
VxvzLIzmSTVHCkdYcV1ez1/5T00W/Xvf
-----END CERTIFICATE-----