Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/95415267-358b-4201-ae23-70d872b2bc66/ed98e654-5f1e-3365-94c0-09fac6cf2ca7.roa
File:                     ed98e654-5f1e-3365-94c0-09fac6cf2ca7.roa (raw, json)
Hash identifier:          DhFectZV0fGee0JR8/iVZ2ytaVvSZxQshJfaG35gBWU=
Subject key identifier:   AE:C5:B6:7E:D4:23:65:0A:DA:B0:27:2B:D6:B8:BA:34:D6:51:06:B0
Certificate issuer:       /CN=95415267-358b-4201-ae23-70d872b2bc66
Certificate serial:       010D0C9F432858472F30786C4E83D14BCE591680
Authority key identifier: 83:7B:E5:B2:B5:6F:CC:F2:51:5B:B2:1E:E9:A0:DD:C3:5A:49:DB:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/95415267-358b-4201-ae23-70d872b2bc66.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/95415267-358b-4201-ae23-70d872b2bc66/ed98e654-5f1e-3365-94c0-09fac6cf2ca7.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     53428
IP address blocks:        162.248.24.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:78:6c:4e:83:d1:4b:ce:59:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95415267-358b-4201-ae23-70d872b2bc66
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=b4773ea2-2ab6-470c-ac63-e5ca5f7b8037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:45:7c:5f:19:e5:d7:b8:9c:78:4e:e5:18:21:
                    4e:94:1b:da:34:94:dd:fa:71:62:87:af:2c:50:4d:
                    83:25:de:51:0e:82:20:5c:22:ea:70:ea:19:50:26:
                    fa:17:de:50:05:1f:f9:1c:55:19:a3:4a:a0:bb:c3:
                    7e:7f:dd:ad:c3:d3:d4:25:fd:aa:18:fc:b0:5e:c7:
                    4d:2e:0d:32:49:6d:fb:95:84:0e:26:05:4d:7c:25:
                    0a:d3:d8:93:03:d6:85:5b:7e:8c:14:de:c4:40:c4:
                    8d:c5:c1:7e:9a:ef:06:e4:f6:01:06:65:aa:9c:22:
                    95:8e:2f:4c:cb:0a:75:77:3c:a8:e2:0c:ad:9e:75:
                    da:4f:6f:c1:61:ad:e9:ed:ec:f5:6c:d2:c2:58:64:
                    0d:1e:61:9a:f0:ef:53:5b:a6:2c:e2:51:de:7a:34:
                    e9:4b:03:dd:1f:f0:c2:0a:30:29:02:ec:c9:cd:82:
                    b4:40:e6:29:ee:d0:bd:74:56:87:80:f0:f7:a6:cd:
                    47:ea:77:9a:a2:1d:d6:48:c2:2d:0f:6d:70:58:90:
                    10:ef:af:67:2b:2a:3e:2e:12:cc:4d:c8:65:83:a6:
                    b7:f5:c0:10:d9:87:c7:3e:11:9c:d4:b3:2a:58:84:
                    23:af:3b:dc:77:11:db:14:6c:a6:82:b7:7a:93:95:
                    85:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C5:B6:7E:D4:23:65:0A:DA:B0:27:2B:D6:B8:BA:34:D6:51:06:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/95415267-358b-4201-ae23-70d872b2bc66/ed98e654-5f1e-3365-94c0-09fac6cf2ca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/95415267-358b-4201-ae23-70d872b2bc66/95415267-358b-4201-ae23-70d872b2bc66.crl

            X509v3 Authority Key Identifier:
                keyid:83:7B:E5:B2:B5:6F:CC:F2:51:5B:B2:1E:E9:A0:DD:C3:5A:49:DB:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/95415267-358b-4201-ae23-70d872b2bc66.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.248.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:06:df:68:4e:e0:d3:07:5e:e0:64:d9:58:29:cf:dd:2e:e8:
         22:2d:f4:6a:62:1c:76:55:77:e0:b2:bd:61:13:9e:ce:63:42:
         e7:b1:c6:a7:3f:43:bd:f2:e8:fb:78:46:41:5b:56:b0:8c:52:
         20:a1:4e:cb:ad:65:e1:47:93:2b:f0:69:c4:f5:ad:30:10:a9:
         0c:18:c4:82:0a:df:78:00:43:29:0c:67:e3:03:7e:95:ef:ae:
         ce:7a:95:16:2c:67:b1:18:77:b9:ae:7f:7a:bc:5a:05:73:1b:
         61:44:d5:ab:a3:a4:8f:f6:42:b8:e9:9e:4c:6b:22:37:e3:0c:
         61:ec:1f:8e:6a:0e:bc:af:83:77:1e:77:fe:40:c3:5f:65:09:
         e3:db:bb:e7:72:99:e6:c1:11:c2:18:47:e3:a4:4a:4a:8a:ce:
         94:b0:a6:0d:a4:1e:73:da:46:ba:2f:93:df:a9:5d:41:b3:a5:
         aa:53:e0:61:03:79:f2:8d:f8:fd:0e:c7:8e:1d:04:97:38:20:
         79:de:5f:e1:e9:5a:2f:19:63:b2:7b:7f:eb:e6:d1:c9:96:d0:
         20:a3:ed:98:6e:6c:c8:9f:1b:c2:74:2b:ef:72:31:16:7f:91:
         5f:5d:94:5c:48:73:22:11:ad:c4:e1:99:9f:5f:2f:b2:c0:da:
         5c:02:3b:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcvMHhsToPRS85ZFoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTU0MTUyNjctMzU4Yi00MjAxLWFlMjMtNzBkODcyYjJi
YzY2MB4XDTI0MDkxMjAxMDAzMVoXDTI0MTIxMTAyMDAzMVowLzEtMCsGA1UEAxMk
YjQ3NzNlYTItMmFiNi00NzBjLWFjNjMtZTVjYTVmN2I4MDM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50V8Xxnl17iceE7lGCFOlBvaNJTd+nFih68s
UE2DJd5RDoIgXCLqcOoZUCb6F95QBR/5HFUZo0qgu8N+f92tw9PUJf2qGPywXsdN
Lg0ySW37lYQOJgVNfCUK09iTA9aFW36MFN7EQMSNxcF+mu8G5PYBBmWqnCKVji9M
ywp1dzyo4gytnnXaT2/BYa3p7ez1bNLCWGQNHmGa8O9TW6Ys4lHeejTpSwPdH/DC
CjApAuzJzYK0QOYp7tC9dFaHgPD3ps1H6neaoh3WSMItD21wWJAQ769nKyo+LhLM
Tchlg6a39cAQ2YfHPhGc1LMqWIQjrzvcdxHbFGymgrd6k5WFxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK7Ftn7UI2UK2rAnK9a4ujTWUQawMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NTQx
NTI2Ny0zNThiLTQyMDEtYWUyMy03MGQ4NzJiMmJjNjYvZWQ5OGU2NTQtNWYxZS0z
MzY1LTk0YzAtMDlmYWM2Y2YyY2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTU0MTUyNjctMzU4Yi00MjAxLWFl
MjMtNzBkODcyYjJiYzY2Lzk1NDE1MjY3LTM1OGItNDIwMS1hZTIzLTcwZDg3MmIy
YmM2Ni5jcmwwHwYDVR0jBBgwFoAUg3vlsrVvzPJRW7Ie6aDdw1pJ20cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85NTQxNTI2Ny0zNThiLTQyMDEtYWUyMy03MGQ4
NzJiMmJjNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovgYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKgG32hO4NMHXuBk2Vgpz90u6CIt9GpiHHZVd+CyvWETns5jQuexxqc/
Q73y6Pt4RkFbVrCMUiChTsutZeFHkyvwacT1rTAQqQwYxIIK33gAQykMZ+MDfpXv
rs56lRYsZ7EYd7muf3q8WgVzG2FE1aujpI/2QrjpnkxrIjfjDGHsH45qDryvg3ce
d/5Aw19lCePbu+dymebBEcIYR+OkSkqKzpSwpg2kHnPaRrovk9+pXUGzpapT4GED
efKN+P0Ox44dBJc4IHneX+HpWi8ZY7J7f+vm0cmW0CCj7ZhubMifG8J0K+9yMRZ/
kV9dlFxIcyIRrcThmZ9fL7LA2lwCO3w=
-----END CERTIFICATE-----