Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/0395e48a-e337-3165-b134-5c62b28818bd.roa
File:                     0395e48a-e337-3165-b134-5c62b28818bd.roa (raw, json)
Hash identifier:          d9NnvWqm1SftsSA2m9A7hqzM+fWPaXu9xv/1UC9SCw4=
Subject key identifier:   47:2F:B5:5D:61:72:FC:11:B2:66:56:44:00:D0:24:A3:F8:F9:7F:1C
Certificate issuer:       /CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5
Certificate serial:       010D0C9F4328584891479A2393A85758E65E31C0
Authority key identifier: B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/0395e48a-e337-3165-b134-5c62b28818bd.roa
Signing time:             Thu 16 Jan 2025 21:03:22 +0000
ROA not before:           Thu 16 Jan 2025 21:03:22 +0000
ROA not after:            Wed 16 Apr 2025 20:03:22 +0000
asID:                     14618
IP address blocks:        161.223.187.0/24 maxlen: 24
                          161.223.188.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:91:47:9a:23:93:a8:57:58:e6:5e:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5
        Validity
            Not Before: Jan 16 21:03:22 2025 GMT
            Not After : Apr 16 20:03:22 2025 GMT
        Subject: CN=dbac368d-d895-4157-aa21-28d5e4b38526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2f:60:52:bb:cb:23:0b:16:c1:81:ee:8c:2c:
                    9c:b9:a5:8b:2b:0a:d5:41:37:38:9b:da:a1:18:ed:
                    62:73:fe:55:d7:0a:01:92:ff:ea:5d:56:1f:02:a7:
                    10:35:46:fe:82:36:cd:fd:a3:61:0d:66:36:31:2e:
                    1e:90:f9:83:5f:54:f4:ae:d5:9c:c4:0e:94:8d:77:
                    dc:4b:5a:ef:9b:47:4b:c5:71:e7:a7:06:e7:df:1e:
                    18:4f:d2:13:8f:4b:a5:2b:4c:69:69:a8:2d:09:48:
                    69:85:e9:49:e1:25:bc:7c:18:5e:82:06:40:72:43:
                    60:5d:8d:2f:e9:f1:8d:2f:b3:4c:c2:3f:2d:14:ed:
                    1a:bf:f0:7a:b5:6b:ab:d7:02:35:c7:2c:2c:c2:e9:
                    ab:10:08:03:82:71:e2:71:e0:c8:22:7e:45:dc:b2:
                    e0:60:1c:6f:b1:1a:2f:c7:5a:94:dc:9d:2d:64:b9:
                    da:ee:f3:f5:bf:4c:ad:3a:d3:22:81:44:56:84:07:
                    57:73:5d:7a:0d:b5:dc:6c:f4:65:1d:2a:95:75:ad:
                    81:60:93:0c:d6:5f:df:ac:d2:7e:61:9f:c8:8a:89:
                    c4:d9:60:2a:b5:32:da:bc:32:e4:2a:7a:a8:32:db:
                    ba:8c:86:c2:ce:d4:01:70:d5:bc:06:20:bd:74:74:
                    3c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2F:B5:5D:61:72:FC:11:B2:66:56:44:00:D0:24:A3:F8:F9:7F:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/0395e48a-e337-3165-b134-5c62b28818bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl

            X509v3 Authority Key Identifier:
                keyid:B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.223.187.0-161.223.188.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:4d:8b:f7:50:24:98:a2:6f:a8:d7:96:ad:92:32:f0:85:5c:
         34:2a:1c:6d:35:8c:73:39:97:47:7e:16:c0:6b:27:18:0a:5c:
         e9:da:ee:36:e8:ba:5a:cb:b3:1e:fa:ec:60:68:be:92:56:51:
         df:24:06:f8:77:7d:78:27:49:51:80:00:72:80:ae:a0:6a:83:
         da:a4:0b:b1:5e:60:61:ab:52:94:1e:c7:31:ba:eb:0e:c1:37:
         28:e6:eb:ae:f6:ee:4e:ba:a5:44:de:14:03:63:c0:27:1e:87:
         d5:89:60:64:96:b4:a9:66:17:b5:94:6b:29:a3:23:1e:6f:4a:
         da:0b:ed:b7:ad:d4:cf:36:0c:b3:1c:95:9b:cb:d8:ef:9a:c4:
         1c:db:2b:a5:71:d3:f2:05:1f:3a:f1:57:bb:b9:2f:a3:14:e7:
         d3:c7:10:8f:41:77:e5:0c:39:90:c5:5c:8d:65:b4:0e:db:86:
         b5:25:6d:3f:7a:c2:e9:ca:56:e8:1a:a4:0d:bc:2a:c4:e4:1f:
         30:be:d2:13:c7:08:d2:9e:a3:52:4f:fe:87:3a:be:c4:4e:14:
         63:a7:53:c6:d7:06:f1:cd:c9:07:b7:5f:64:f6:19:e7:c8:25:
         12:4e:26:b4:f1:50:4b:e7:cb:33:46:00:39:2c:6b:7c:c6:84:
         10:95:c3:80
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEiRR5ojk6hXWOZeMcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODM4N2Q4OTQtZDJiYS00ZTMzLThlODQtNDRiOWQ5ZDZl
M2Q1MB4XDTI1MDExNjIxMDMyMloXDTI1MDQxNjIwMDMyMlowLzEtMCsGA1UEAxMk
ZGJhYzM2OGQtZDg5NS00MTU3LWFhMjEtMjhkNWU0YjM4NTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC9gUrvLIwsWwYHujCycuaWLKwrVQTc4m9qh
GO1ic/5V1woBkv/qXVYfAqcQNUb+gjbN/aNhDWY2MS4ekPmDX1T0rtWcxA6UjXfc
S1rvm0dLxXHnpwbn3x4YT9ITj0ulK0xpaagtCUhphelJ4SW8fBheggZAckNgXY0v
6fGNL7NMwj8tFO0av/B6tWur1wI1xywswumrEAgDgnHiceDIIn5F3LLgYBxvsRov
x1qU3J0tZLna7vP1v0ytOtMigURWhAdXc116DbXcbPRlHSqVda2BYJMM1l/frNJ+
YZ/IionE2WAqtTLavDLkKnqoMtu6jIbCztQBcNW8BiC9dHQ8TwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFEcvtV1hcvwRsmZWRADQJKP4+X8cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Mzg3
ZDg5NC1kMmJhLTRlMzMtOGU4NC00NGI5ZDlkNmUzZDUvMDM5NWU0OGEtZTMzNy0z
MTY1LWIxMzQtNWM2MmIyODgxOGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODM4N2Q4OTQtZDJiYS00ZTMzLThl
ODQtNDRiOWQ5ZDZlM2Q1LzgzODdkODk0LWQyYmEtNGUzMy04ZTg0LTQ0YjlkOWQ2
ZTNkNS5jcmwwHwYDVR0jBBgwFoAUtn9XhLpAdF7cT+Sx8GS3mXk4aDwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi84Mzg3ZDg5NC1kMmJhLTRlMzMtOGU4NC00NGI5
ZDlkNmUzZDUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACh37sD
BACh37wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEADU2L91AkmKJvqNeWrZIy8IVcNCocbTWMczmXR34WwGsn
GApc6druNui6WsuzHvrsYGi+klZR3yQG+Hd9eCdJUYAAcoCuoGqD2qQLsV5gYatS
lB7HMbrrDsE3KObrrvbuTrqlRN4UA2PAJx6H1YlgZJa0qWYXtZRrKaMjHm9K2gvt
t63UzzYMsxyVm8vY75rEHNsrpXHT8gUfOvFXu7kvoxTn08cQj0F35Qw5kMVcjWW0
DtuGtSVtP3rC6cpW6BqkDbwqxOQfML7SE8cI0p6jUk/+hzq+xE4UY6dTxtcG8c3J
B7dfZPYZ58glEk4mtPFQS+fLM0YAOSxrfMaEEJXDgA==
-----END CERTIFICATE-----