Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7bbcb60e-8a28-3ca6-b9d2-c677e7c931c4.roa
File:                     7bbcb60e-8a28-3ca6-b9d2-c677e7c931c4.roa (raw, json)
Hash identifier:          ljtVFCuJ/1fmynXseV0M+yUrztd5aHyMPz2f09KclIk=
Subject key identifier:   0C:13:F4:C4:A0:62:13:4B:00:4C:EE:73:3D:FE:5B:42:E3:F5:27:50
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848854B6B0DB1431CB5246BEB00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7bbcb60e-8a28-3ca6-b9d2-c677e7c931c4.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     6167
IP address blocks:        75.248.96.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:6b:0d:b1:43:1c:b5:24:6b:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=0f1cd255-916c-4322-9b7d-264e93677386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ec:5f:28:7e:bf:cd:c7:1f:16:c5:bd:c1:94:
                    94:50:cd:8e:07:9c:92:b4:ac:c9:e4:e6:10:1f:ab:
                    f1:f2:13:a0:0c:5c:66:97:cf:60:e5:b3:23:8e:b8:
                    24:cd:b4:7f:e6:de:46:9b:e5:ac:0c:a3:8c:60:4e:
                    02:66:b4:7d:e2:f1:b5:e1:3d:fe:fe:42:f5:8a:a4:
                    90:53:a1:f2:2e:5e:4f:8f:43:4a:5e:d8:27:20:22:
                    cc:4f:3a:aa:ac:98:75:26:d9:34:bf:8f:a3:b6:5f:
                    92:8d:93:8e:60:44:79:33:30:f7:c1:1b:d8:2b:c8:
                    8d:51:2b:10:3d:c9:59:04:9a:63:fc:50:95:c7:88:
                    41:b3:2a:83:85:56:b9:22:d3:d8:5f:e2:23:ca:3a:
                    7f:21:e7:55:b2:95:27:39:09:c5:8d:6f:b4:84:c1:
                    03:8d:18:17:cb:f0:78:33:e0:ff:26:65:fc:1c:eb:
                    1c:b3:91:b7:a9:6f:74:cb:d8:55:b5:c2:c9:5f:0a:
                    12:c2:6f:18:ea:8a:63:5d:db:b2:10:ee:38:b8:83:
                    ce:87:6c:e3:71:ee:1c:fd:51:8a:bd:6b:0e:a9:39:
                    17:5c:a0:95:1e:de:6a:47:26:cc:bd:69:13:99:8f:
                    21:f2:07:31:b9:15:d8:46:f0:8d:78:f1:0d:06:79:
                    07:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:13:F4:C4:A0:62:13:4B:00:4C:EE:73:3D:FE:5B:42:E3:F5:27:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7bbcb60e-8a28-3ca6-b9d2-c677e7c931c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.248.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:21:5b:6d:fa:e8:84:2a:38:ad:bf:4c:e3:94:ad:68:d7:d9:
         35:ae:48:2c:50:a5:49:bc:94:d6:33:ef:e0:f3:82:c0:79:1d:
         29:a9:5a:e1:40:34:5b:b0:fc:1f:84:7f:9f:ee:07:e5:d6:84:
         00:c8:87:9d:06:ed:3b:dd:ee:62:37:cf:8a:61:48:84:cd:b5:
         85:0e:4e:4d:27:af:68:ce:dc:82:5c:b2:fc:25:88:de:e4:e9:
         9e:fd:b8:b3:17:4b:a3:3d:70:b2:10:a1:c4:dd:f9:91:0e:e2:
         c7:53:52:4d:c8:94:ef:18:49:94:ff:d7:ac:a8:f3:af:a8:08:
         07:be:90:99:c8:59:d8:73:ae:9e:e8:fc:6f:30:0a:40:55:66:
         9e:76:f6:92:6d:68:9f:70:70:32:b0:c3:2a:aa:df:a8:42:df:
         0a:65:2c:b1:ef:56:b7:c2:3b:d1:0f:66:1b:0f:15:9b:dd:09:
         59:15:cc:b5:fd:74:99:e8:c0:67:3d:9f:7f:ae:c0:f2:8c:51:
         e2:93:da:7e:ed:25:06:9c:0e:83:38:fb:76:0a:cd:36:d6:4b:
         70:9e:e7:14:16:43:c7:fd:16:23:c2:ab:6e:ca:e5:eb:e1:74:
         de:64:a4:39:94:56:c5:9c:f0:7a:95:9d:9f:47:f9:62:f3:36:
         9c:89:b1:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFS2sNsUMctSRr6wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk
MGYxY2QyNTUtOTE2Yy00MzIyLTliN2QtMjY0ZTkzNjc3Mzg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuxfKH6/zccfFsW9wZSUUM2OB5yStKzJ5OYQ
H6vx8hOgDFxml89g5bMjjrgkzbR/5t5Gm+WsDKOMYE4CZrR94vG14T3+/kL1iqSQ
U6HyLl5Pj0NKXtgnICLMTzqqrJh1Jtk0v4+jtl+SjZOOYER5MzD3wRvYK8iNUSsQ
PclZBJpj/FCVx4hBsyqDhVa5ItPYX+Ijyjp/IedVspUnOQnFjW+0hMEDjRgXy/B4
M+D/JmX8HOscs5G3qW90y9hVtcLJXwoSwm8Y6opjXduyEO44uIPOh2zjce4c/VGK
vWsOqTkXXKCVHt5qRybMvWkTmY8h8gcxuRXYRvCNePENBnkHpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAwT9MSgYhNLAEzucz3+W0Lj9SdQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2JiY2I2MGUtOGEyOC0z
Y2E2LWI5ZDItYzY3N2U3YzkzMWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS/hgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC4hW2366IQqOK2/TOOUrWjX2TWuSCxQpUm8lNYz7+DzgsB5HSmpWuFA
NFuw/B+Ef5/uB+XWhADIh50G7Tvd7mI3z4phSITNtYUOTk0nr2jO3IJcsvwliN7k
6Z79uLMXS6M9cLIQocTd+ZEO4sdTUk3IlO8YSZT/16yo86+oCAe+kJnIWdhzrp7o
/G8wCkBVZp529pJtaJ9wcDKwwyqq36hC3wplLLHvVrfCO9EPZhsPFZvdCVkVzLX9
dJnowGc9n3+uwPKMUeKT2n7tJQacDoM4+3YKzTbWS3Ce5xQWQ8f9FiPCq27K5evh
dN5kpDmUVsWc8HqVnZ9H+WLzNpyJsR0=
-----END CERTIFICATE-----