Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ea556a40-a873-3ed9-aa90-580d0a9fa927.roa
File:                     ea556a40-a873-3ed9-aa90-580d0a9fa927.roa (raw, json)
Hash identifier:          AxfEHCuFV7estvND7AsD0K2U9ddXkbu4bdkjN2/DLws=
Subject key identifier:   F3:39:79:86:EB:6C:03:82:56:F8:02:BE:B9:0C:93:B6:35:16:BB:E4
Certificate issuer:       /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f
Certificate serial:       010D0C9F43285848E2D10FB3C93168E94AB80240
Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ea556a40-a873-3ed9-aa90-580d0a9fa927.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     395437
IP address blocks:        138.43.128.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:0f:b3:c9:31:68:e9:4a:b8:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=06a0b593-2877-4600-9c82-c9b84a80baff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:df:c6:07:b2:83:50:67:7b:c8:e8:2c:2f:64:
                    41:d6:74:f2:c9:5c:3f:51:68:aa:74:a1:60:8c:1e:
                    2a:32:60:7d:e5:95:23:db:27:f7:93:86:2d:8c:27:
                    b8:f0:14:4a:ec:b7:e1:a7:88:7c:e2:32:5f:31:ba:
                    86:9f:b2:1b:ec:ae:c0:27:64:68:66:85:dd:cd:0b:
                    19:52:63:cd:54:56:16:55:9c:a9:7a:e8:4b:b2:75:
                    c6:83:58:87:3c:77:45:8c:a8:f2:29:f2:ed:f7:fa:
                    f8:3e:10:fb:94:e7:7b:67:51:8c:0a:70:a5:61:78:
                    21:b8:73:4c:4b:eb:01:f6:6d:ee:0a:60:b3:37:df:
                    b1:95:7c:38:f6:9c:d8:dd:2b:51:9e:98:8e:ff:9d:
                    5e:94:07:8b:d1:16:f9:56:7e:e2:78:01:d0:88:fb:
                    ee:df:7d:ed:61:20:f2:e0:eb:d7:7d:de:94:2b:b0:
                    3d:a8:bd:42:ae:d6:9a:36:8a:15:74:e4:7f:29:4f:
                    9f:0b:1e:3f:54:d1:b0:0b:80:94:ff:d0:03:79:5d:
                    79:58:1a:da:61:4b:09:fe:38:19:c2:54:99:21:76:
                    6f:bb:5d:5c:b8:03:fd:1b:64:96:e7:59:ef:13:b5:
                    5d:aa:49:47:97:3e:d6:4c:42:1f:8a:af:68:d1:de:
                    6d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:39:79:86:EB:6C:03:82:56:F8:02:BE:B9:0C:93:B6:35:16:BB:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ea556a40-a873-3ed9-aa90-580d0a9fa927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.43.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:a1:16:42:e2:d2:01:19:5b:9f:02:bd:21:f6:6e:56:c6:8c:
         80:03:69:7e:fa:9c:52:72:05:c0:92:84:d7:84:a0:22:a1:82:
         65:0b:5e:f6:45:d9:ff:67:d4:2c:fa:9d:13:00:df:21:29:82:
         09:49:2e:28:5d:33:11:91:04:6c:84:bc:df:dc:1d:2e:79:45:
         df:2d:d4:60:44:fc:45:ca:2d:7a:de:82:39:eb:85:58:ab:9c:
         cb:5b:04:81:bf:8a:63:da:ef:ad:f9:6b:b7:c2:68:15:20:c1:
         77:06:1a:de:6d:d0:99:44:28:bb:fe:73:71:c1:97:2d:c3:b0:
         c3:0c:56:8f:23:6f:95:61:8f:53:4f:ca:ef:91:1f:41:41:c4:
         98:6a:03:e1:77:0c:e9:3f:7c:17:db:5d:0b:cc:8b:d0:b5:66:
         0c:34:f8:e9:6f:d9:68:df:e5:d0:50:ec:ee:00:39:0c:75:d3:
         72:de:c7:1d:5d:a0:0c:1c:ed:6f:a8:7c:35:41:ea:c1:b3:ad:
         a4:c0:23:ce:e9:3e:bb:a3:ea:b2:2f:dc:d3:9f:5b:88:51:5b:
         d4:dd:35:c2:22:87:e1:c3:3a:5b:6e:d7:cd:e2:76:e4:be:54:
         57:b2:ef:ee:e8:62:ed:d9:fb:8f:7e:80:57:b8:65:2f:54:88:
         e1:df:40:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0Q+zyTFo6Uq4AkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDBkMDMyMjUtYzViNi00N2M0LTlmNGUtN2RlMWQxNmQ1
NTRmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
MDZhMGI1OTMtMjg3Ny00NjAwLTljODItYzliODRhODBiYWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t/GB7KDUGd7yOgsL2RB1nTyyVw/UWiqdKFg
jB4qMmB95ZUj2yf3k4YtjCe48BRK7Lfhp4h84jJfMbqGn7Ib7K7AJ2RoZoXdzQsZ
UmPNVFYWVZypeuhLsnXGg1iHPHdFjKjyKfLt9/r4PhD7lOd7Z1GMCnClYXghuHNM
S+sB9m3uCmCzN9+xlXw49pzY3StRnpiO/51elAeL0Rb5Vn7ieAHQiPvu333tYSDy
4OvXfd6UK7A9qL1CrtaaNooVdOR/KU+fCx4/VNGwC4CU/9ADeV15WBraYUsJ/jgZ
wlSZIXZvu11cuAP9G2SW51nvE7VdqklHlz7WTEIfiq9o0d5t4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPM5eYbrbAOCVvgCvrkMk7Y1FrvkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQw
MzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUxZDE2ZDU1NGYvZWE1NTZhNDAtYTg3My0z
ZWQ5LWFhOTAtNTgwZDBhOWZhOTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDBkMDMyMjUtYzViNi00N2M0LTlm
NGUtN2RlMWQxNmQ1NTRmLzQwZDAzMjI1LWM1YjYtNDdjNC05ZjRlLTdkZTFkMTZk
NTU0Zi5jcmwwHwYDVR0jBBgwFoAU6DRhhWrT1VHbhGXdoM02Pj/ijxMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQwMzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUx
ZDE2ZDU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGiiuAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+hFkLi0gEZW58CvSH2blbGjIADaX76nFJyBcCShNeEoCKhgmULXvZF
2f9n1Cz6nRMA3yEpgglJLihdMxGRBGyEvN/cHS55Rd8t1GBE/EXKLXregjnrhVir
nMtbBIG/imPa7635a7fCaBUgwXcGGt5t0JlEKLv+c3HBly3DsMMMVo8jb5Vhj1NP
yu+RH0FBxJhqA+F3DOk/fBfbXQvMi9C1Zgw0+Olv2Wjf5dBQ7O4AOQx103Lexx1d
oAwc7W+ofDVB6sGzraTAI87pPruj6rIv3NOfW4hRW9TdNcIih+HDOltu183iduS+
VFey7+7oYu3Z+49+gFe4ZS9UiOHfQKM=
-----END CERTIFICATE-----