Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06856130-4f43-3497-94ec-d2a3797014cc.roa
File:                     06856130-4f43-3497-94ec-d2a3797014cc.roa (raw, json)
Hash identifier:          DqEXUohYZC09DoZgWjDUTHHC3HE+X81FBxgSoZFwEo0=
Subject key identifier:   5C:E6:A0:73:81:17:71:3E:67:BF:3C:CD:1B:CE:4F:1C:CA:4E:15:D0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA62A6E151A53F2EF10F2C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06856130-4f43-3497-94ec-d2a3797014cc.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33650
IP address blocks:        96.108.203.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:2a:6e:15:1a:53:f2:ef:10:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=0940e992-0385-4692-9a7c-53534c9f8bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ed:c2:9b:ca:a7:85:77:21:45:4a:a2:eb:29:
                    b1:8f:7a:76:9b:e5:26:18:d2:04:c9:5a:84:89:47:
                    00:97:87:63:fd:0e:76:5d:f5:01:3c:31:0a:21:49:
                    ff:b7:45:08:48:4e:26:d1:c8:ed:54:04:16:f6:b7:
                    61:d9:76:64:26:20:93:01:3d:35:2e:59:e9:a7:4b:
                    13:68:44:c9:08:4c:01:c7:0a:8d:d5:70:f7:38:4f:
                    b5:7f:66:a8:1f:a5:5d:c4:85:46:da:1e:9a:ab:ff:
                    fb:c2:8b:db:18:42:c9:62:cc:c1:89:00:aa:05:32:
                    28:e1:c4:38:2c:98:31:d3:f5:1a:8f:3c:86:91:41:
                    c5:c2:9d:28:f0:2d:48:53:14:98:43:c6:70:00:a7:
                    97:00:55:d4:c3:da:14:26:50:11:4b:9d:74:b9:c3:
                    a3:d2:d1:93:5a:d0:6b:10:41:ab:4c:8f:18:c3:19:
                    1e:9e:2f:0e:dc:84:ed:a3:c4:fc:ba:4c:ca:12:19:
                    70:a9:d0:98:84:ac:9d:60:02:11:10:56:f4:8d:fc:
                    e9:0b:a4:27:bb:11:2b:e8:71:dd:ec:c9:17:10:a2:
                    bc:95:c6:ab:1a:4b:3e:45:fc:99:c2:8c:83:c6:98:
                    87:84:a1:ce:06:55:d8:82:61:7c:6f:60:87:c7:7d:
                    24:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E6:A0:73:81:17:71:3E:67:BF:3C:CD:1B:CE:4F:1C:CA:4E:15:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06856130-4f43-3497-94ec-d2a3797014cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.108.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:8a:25:a6:62:ea:21:4f:ca:43:1b:a3:a9:54:46:42:8b:c9:
         1f:79:ab:92:81:3f:0d:88:54:e6:a4:de:1b:ec:41:62:a5:17:
         10:61:da:f7:ee:39:26:65:e6:fd:d5:dd:c8:b3:fb:13:d6:eb:
         d6:f8:71:3e:85:a8:e0:50:bb:b5:5f:61:f6:ac:ff:93:f0:1c:
         91:f9:e4:dc:33:09:0f:53:2e:1c:d9:65:94:ed:fb:61:7c:d4:
         fc:e8:7d:ea:30:d8:33:db:ba:d6:9c:8d:fa:84:d5:dd:33:67:
         01:4f:02:e2:45:a1:72:33:e4:19:71:28:4e:c9:61:a0:c0:b4:
         1f:6c:3e:9a:5f:e0:60:3b:55:3e:39:f7:26:d9:44:dc:16:e3:
         63:8a:f3:7c:5a:c8:83:9b:1b:23:fb:bc:c7:c5:a3:8e:e3:9b:
         ee:d2:17:c3:38:02:ef:1c:86:e4:d3:0f:59:41:cd:6e:91:b2:
         93:55:e6:74:d3:58:e6:7e:f2:e8:93:6c:9c:d6:5e:8a:6b:ee:
         1a:59:61:06:d3:71:0e:c4:0d:a2:74:03:14:6d:cf:4d:68:32:
         0b:cf:4a:a0:de:7c:e4:4e:b3:c3:2f:e4:b5:6b:ab:aa:cf:8a:
         de:0f:df:85:85:90:e4:91:6f:20:9e:08:9f:7b:d0:8d:1d:c4:
         b2:80:15:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pipuFRpT8u8Q8sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
MDk0MGU5OTItMDM4NS00NjkyLTlhN2MtNTM1MzRjOWY4YmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAme3Cm8qnhXchRUqi6ymxj3p2m+UmGNIEyVqE
iUcAl4dj/Q52XfUBPDEKIUn/t0UISE4m0cjtVAQW9rdh2XZkJiCTAT01Llnpp0sT
aETJCEwBxwqN1XD3OE+1f2aoH6VdxIVG2h6aq//7wovbGELJYszBiQCqBTIo4cQ4
LJgx0/UajzyGkUHFwp0o8C1IUxSYQ8ZwAKeXAFXUw9oUJlARS510ucOj0tGTWtBr
EEGrTI8Ywxkeni8O3ITto8T8ukzKEhlwqdCYhKydYAIREFb0jfzpC6QnuxEr6HHd
7MkXEKK8lcarGks+RfyZwoyDxpiHhKHOBlXYgmF8b2CHx30k7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFzmoHOBF3E+Z788zRvOTxzKThXQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDY4NTYxMzAtNGY0My0z
NDk3LTk0ZWMtZDJhMzc5NzAxNGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYGzLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHWKJaZi6iFPykMbo6lURkKLyR95q5KBPw2IVOak3hvsQWKlFxBh2vfu
OSZl5v3V3ciz+xPW69b4cT6FqOBQu7VfYfas/5PwHJH55NwzCQ9TLhzZZZTt+2F8
1Pzofeow2DPbutacjfqE1d0zZwFPAuJFoXIz5BlxKE7JYaDAtB9sPppf4GA7VT45
9ybZRNwW42OK83xayIObGyP7vMfFo47jm+7SF8M4Au8chuTTD1lBzW6RspNV5nTT
WOZ+8uiTbJzWXopr7hpZYQbTcQ7EDaJ0AxRtz01oMgvPSqDefOROs8Mv5LVrq6rP
it4P34WFkOSRbyCeCJ970I0dxLKAFbg=
-----END CERTIFICATE-----