Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/c8629013-8b6c-35e2-b517-c9085ddd8d98.roa
File:                     c8629013-8b6c-35e2-b517-c9085ddd8d98.roa (raw, json)
Hash identifier:          ZGothx/zhGGVsG/CUk7vV1+wk/ZiZLkZmmVw5OYrADw=
Subject key identifier:   77:EA:8E:1D:11:B6:EE:11:9B:16:AA:6E:FA:87:F1:23:7B:F2:62:7C
Certificate issuer:       /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial:       010D0C9F4328584953C44B3EE49223D2CA1A2D20
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/c8629013-8b6c-35e2-b517-c9085ddd8d98.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     13737
IP address blocks:        68.233.42.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:4b:3e:e4:92:23:d2:ca:1a:2d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=7a76074c-d449-46b1-a653-5c8b85d4909f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f3:ca:c4:4a:6c:f6:77:5d:55:d8:c9:7a:02:
                    52:73:c0:04:c7:66:00:ea:9c:aa:6e:7b:f7:36:b4:
                    08:0a:db:c3:fc:1e:98:82:50:a9:ab:a6:2c:b8:34:
                    6b:3e:ba:32:e5:56:4f:7f:da:d2:1b:f0:46:22:73:
                    2e:d0:c4:02:0d:bd:96:13:bf:d9:3a:ba:40:1f:e0:
                    c7:aa:d6:92:ed:55:e7:f2:bb:f7:d0:5f:6d:5d:4a:
                    5a:92:70:e0:5a:07:86:fd:17:16:d7:b1:9f:fc:b3:
                    90:a8:01:9c:30:e1:dd:13:ec:5e:b6:aa:d6:5f:94:
                    c5:6a:a8:5f:46:ab:85:e2:2c:71:f5:a8:e2:75:46:
                    c8:a3:51:77:8d:de:7e:9b:fa:c6:ca:d8:d5:c4:27:
                    35:ac:0d:0e:79:3a:5d:ba:7e:b3:cc:8b:46:a6:43:
                    fb:39:f4:88:0e:b0:63:ee:68:1d:fc:89:19:a2:eb:
                    68:37:11:b6:f2:e2:43:70:c1:b0:2e:cc:b5:1b:9c:
                    0b:9e:53:7a:29:19:44:03:a7:67:d3:12:ce:4c:0a:
                    04:a2:b3:49:1b:c6:bf:bf:00:b2:b9:f3:2e:15:03:
                    de:25:3a:d9:74:cd:51:87:b1:70:e6:70:cf:51:49:
                    7a:1c:91:49:ab:bb:fb:ee:42:07:af:db:4b:5d:a9:
                    08:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EA:8E:1D:11:B6:EE:11:9B:16:AA:6E:FA:87:F1:23:7B:F2:62:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/c8629013-8b6c-35e2-b517-c9085ddd8d98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl

            X509v3 Authority Key Identifier:
                keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.233.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:90:93:bc:37:93:21:23:42:a3:09:c4:8c:c5:30:01:03:61:
         fc:64:cb:d7:4a:7f:34:78:31:3e:3a:67:d9:d0:b7:ee:ea:81:
         88:73:cf:ba:92:8e:8c:0e:a2:03:0f:2a:8c:86:98:91:5c:16:
         74:71:09:c7:a5:78:88:ce:94:b4:1f:4e:b1:f8:76:73:c4:35:
         2d:44:35:7a:eb:c8:f5:94:46:a4:c6:74:61:03:7d:e7:25:f6:
         bd:8e:72:68:a0:3c:dc:6c:eb:43:28:6b:ff:30:a3:6a:f1:3f:
         5f:07:e9:78:2a:ee:57:c6:50:26:57:fd:66:e2:68:3d:93:34:
         90:9e:03:ee:ac:a2:d6:af:cd:75:7e:77:ab:f7:95:49:e4:33:
         98:28:8e:45:e6:a4:57:bb:38:e0:f3:d0:1c:09:45:8c:c9:7d:
         ed:2f:58:45:82:03:45:ce:c2:9e:68:4e:07:a7:3b:a5:89:22:
         b8:30:f5:c6:e7:a8:a9:0d:b3:70:57:a7:ce:fb:2a:2b:61:bf:
         41:84:2e:99:8f:f1:0d:93:0a:91:61:94:71:a1:6a:10:f5:04:
         00:aa:74:09:11:87:58:b3:10:b8:ae:f8:e1:ac:e6:c9:b3:88:
         d2:0a:e7:64:69:df:37:4f:86:bb:4a:e3:b3:00:f3:dc:50:56:
         b8:0a:dc:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxEs+5JIj0soaLSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4
N2ZmMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
N2E3NjA3NGMtZDQ0OS00NmIxLWE2NTMtNWM4Yjg1ZDQ5MDlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvPKxEps9nddVdjJegJSc8AEx2YA6pyqbnv3
NrQICtvD/B6YglCpq6YsuDRrProy5VZPf9rSG/BGInMu0MQCDb2WE7/ZOrpAH+DH
qtaS7VXn8rv30F9tXUpaknDgWgeG/RcW17Gf/LOQqAGcMOHdE+xetqrWX5TFaqhf
RquF4ixx9ajidUbIo1F3jd5+m/rGytjVxCc1rA0OeTpdun6zzItGpkP7OfSIDrBj
7mgd/IkZoutoNxG28uJDcMGwLsy1G5wLnlN6KRlEA6dn0xLOTAoEorNJG8a/vwCy
ufMuFQPeJTrZdM1Rh7Fw5nDPUUl6HJFJq7v77kIHr9tLXakImwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHfqjh0Rtu4RmxaqbvqH8SN78mJ8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1
YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvYzg2MjkwMTMtOGI2Yy0z
NWUyLWI1MTctYzkwODVkZGQ4ZDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5
NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl
ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi
OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEeQk7w3kyEjQqMJxIzFMAEDYfxky9dKfzR4MT46Z9nQt+7qgYhzz7qS
jowOogMPKoyGmJFcFnRxCceleIjOlLQfTrH4dnPENS1ENXrryPWURqTGdGEDfecl
9r2OcmigPNxs60Moa/8wo2rxP18H6Xgq7lfGUCZX/WbiaD2TNJCeA+6sotavzXV+
d6v3lUnkM5gojkXmpFe7OODz0BwJRYzJfe0vWEWCA0XOwp5oTgenO6WJIrgw9cbn
qKkNs3BXp877Kithv0GELpmP8Q2TCpFhlHGhahD1BACqdAkRh1izELiu+OGs5smz
iNIK52Rp3zdPhrtK47MA89xQVrgK3H0=
-----END CERTIFICATE-----