Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/33322e3230382e302e302f31322d3132203d3e203436363930.roa
File:                     33322e3230382e302e302f31322d3132203d3e203436363930.roa (raw, json)
Hash identifier:          g35TvzxzUhvH4NcBmykN4seZcQEx00SvvdshOy0Xc2w=
Subject key identifier:   05:4D:C5:6C:80:F9:E9:0F:02:BD:04:B0:06:D4:08:D9:C4:3E:20:8E
Certificate issuer:       /CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
Certificate serial:       2784AAD292869C6489E47E006BC92342DD737552
Authority key identifier: E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/33322e3230382e302e302f31322d3132203d3e203436363930.roa
Signing time:             Thu 27 Feb 2025 05:08:51 +0000
ROA not before:           Thu 27 Feb 2025 05:03:51 +0000
ROA not after:            Thu 26 Feb 2026 05:08:51 +0000
asID:                     46690
IP address blocks:        32.208.0.0/12 maxlen: 12

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:84:aa:d2:92:86:9c:64:89:e4:7e:00:6b:c9:23:42:dd:73:75:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
        Validity
            Not Before: Feb 27 05:03:51 2025 GMT
            Not After : Feb 26 05:08:51 2026 GMT
        Subject: CN=054DC56C80F9E90F02BD04B006D408D9C43E208E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:73:10:c6:75:a9:ed:04:74:72:67:b8:ee:89:
                    ad:4e:f8:b2:07:7b:25:e7:1d:8e:10:6d:5d:b9:90:
                    b5:9c:6b:c3:e2:1c:c7:7a:1d:f2:bc:e4:fe:a1:f1:
                    d9:5e:c5:ae:1b:35:18:74:ea:53:db:e8:eb:04:e7:
                    e0:19:4e:40:b0:4e:89:de:04:fe:78:57:fa:00:40:
                    10:ef:98:66:d6:95:e7:4f:3b:39:a9:02:a6:fe:dd:
                    a1:7e:52:51:7a:d1:d3:aa:46:21:d3:57:79:e8:ee:
                    7a:89:fc:f3:d8:7f:31:53:1a:b7:ed:d0:1e:b6:a5:
                    07:cb:a6:c4:8a:8e:20:4c:7a:c3:ca:9c:6c:89:09:
                    0f:80:21:1f:24:34:7a:c8:2e:fc:98:47:c1:63:e8:
                    c1:20:71:8c:b3:58:0d:20:3c:28:78:d2:07:ed:61:
                    33:54:18:f3:5d:a7:a3:fd:ae:be:9c:cc:d8:9f:43:
                    c6:69:3f:a9:ec:15:42:c0:1b:59:ba:d2:5f:3b:8f:
                    12:28:58:0c:8c:43:d9:49:a5:aa:34:c1:09:1f:22:
                    7d:1d:68:c0:7c:a9:6f:fc:5b:03:bd:ba:c8:9b:26:
                    44:dc:78:25:77:1a:8a:18:6a:73:2e:33:12:ad:37:
                    25:c6:ba:ce:50:fc:d7:57:78:9f:a6:97:01:56:50:
                    fd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:4D:C5:6C:80:F9:E9:0F:02:BD:04:B0:06:D4:08:D9:C4:3E:20:8E
            X509v3 Authority Key Identifier:
                keyid:E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/33322e3230382e302e302f31322d3132203d3e203436363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  32.208.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         c8:1f:45:21:40:c6:1a:13:b7:2a:57:e2:dd:e3:d1:f6:23:b1:
         34:31:33:59:31:c6:e2:e8:df:74:06:07:ab:04:bf:71:8e:4c:
         ce:6c:d1:34:d4:0b:32:3d:ad:e4:60:f3:9e:88:0d:24:6c:8f:
         a5:e2:97:7d:17:64:3c:c3:b3:e4:c7:f3:9e:13:a6:02:c8:85:
         1f:3e:34:d4:46:a2:80:b5:5b:b6:a0:ad:86:4e:1b:a4:dc:cd:
         6d:6e:67:d6:7d:da:c9:d2:08:26:8a:65:91:aa:ca:a5:6f:7f:
         e8:26:dd:ff:f7:46:4d:d4:e9:2d:42:c8:29:6a:04:53:a9:da:
         05:83:c9:55:32:51:a8:c9:7b:20:71:cf:20:5a:15:91:f2:fb:
         5d:d2:2d:46:14:bc:b7:d2:71:dd:0a:a1:fc:0a:e2:1d:57:9c:
         aa:93:6e:2f:99:c7:2f:99:8d:9c:19:8f:41:da:19:ae:d5:db:
         b8:11:42:ea:d5:6c:23:6b:33:6a:f8:73:f9:87:5e:65:b0:a5:
         4a:51:d3:12:50:e1:fe:86:6f:b1:e6:4a:cc:67:20:f1:8e:9a:
         8b:a2:19:5f:c8:28:63:6a:65:a0:bd:36:8b:9e:ce:fc:62:64:
         02:27:50:8c:12:7a:ae:93:be:fe:0c:8a:04:9f:c8:a9:ec:81:
         24:20:50:74
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgIUJ4Sq0pKGnGSJ5H4Aa8kjQt1zdVIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWJmNzM5ZjYzYzY5NDM1MzVjZmU0ZWQyODEzZjgzOGVk
NTYwYjcwNzZmM2E0NTJlYjgwHhcNMjUwMjI3MDUwMzUxWhcNMjYwMjI2MDUwODUx
WjAzMTEwLwYDVQQDEygwNTREQzU2QzgwRjlFOTBGMDJCRDA0QjAwNkQ0MDhEOUM0
M0UyMDhFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHMQxnWp7QR0
cme47omtTviyB3sl5x2OEG1duZC1nGvD4hzHeh3yvOT+ofHZXsWuGzUYdOpT2+jr
BOfgGU5AsE6J3gT+eFf6AEAQ75hm1pXnTzs5qQKm/t2hflJRetHTqkYh01d56O56
ifzz2H8xUxq37dAetqUHy6bEio4gTHrDypxsiQkPgCEfJDR6yC78mEfBY+jBIHGM
s1gNIDwoeNIH7WEzVBjzXaej/a6+nMzYn0PGaT+p7BVCwBtZutJfO48SKFgMjEPZ
SaWqNMEJHyJ9HWjAfKlv/FsDvbrImyZE3HgldxqKGGpzLjMSrTclxrrOUPzXV3if
ppcBVlD9oQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFAVNxWyA+ekPAr0EsAbUCNnE
PiCOMB8GA1UdIwQYMBaAFOIMIy9SScttgY2J97K9muOjaXV8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzEv
RTIwQzIzMkY1MjQ5Q0I2RDgxOEQ4OUY3QjJCRDlBRTNBMzY5NzU3Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1Lzg3ZmQ5MzU1LWZmZGMtNDk4Ni05MzI5LTRkMTkwOWUwMWEyZi8xYmY3
MzlmNjNjNjk0MzUzNWNmZTRlZDI4MTNmODM4ZWQ1NjBiNzA3NmYzYTQ1MmViOC5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzEvMzMzMjJlMzIzMDM4MmUzMDJlMzAyZjMxMzIyZDMxMzIyMDNk
M2UyMDM0MzYzNjM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwQg0DANBgkqhkiG9w0BAQsFAAOCAQEA
yB9FIUDGGhO3Klfi3ePR9iOxNDEzWTHG4ujfdAYHqwS/cY5MzmzRNNQLMj2t5GDz
nogNJGyPpeKXfRdkPMOz5MfznhOmAsiFHz401EaigLVbtqCthk4bpNzNbW5n1n3a
ydIIJoplkarKpW9/6Cbd//dGTdTpLULIKWoEU6naBYPJVTJRqMl7IHHPIFoVkfL7
XdItRhS8t9Jx3Qqh/AriHVecqpNuL5nHL5mNnBmPQdoZrtXbuBFC6tVsI2szavhz
+YdeZbClSlHTElDh/oZvseZKzGcg8Y6ai6IZX8goY2ploL02i57O/GJkAidQjBJ6
rpO+/gyKBJ/IqeyBJCBQdA==
-----END CERTIFICATE-----