Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15c54fcf-af25-3a8c-bb87-6f7291d043cd.roa
File:                     15c54fcf-af25-3a8c-bb87-6f7291d043cd.roa (raw, json)
Hash identifier:          sNqMzUAhyyIWnGEc4UkDI2rQSN+SMg/rtSFFUuhMCHA=
Subject key identifier:   B9:44:12:C6:7C:A4:1D:F5:3B:DF:26:AD:99:B9:59:C7:40:0B:DA:A3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F7FFBB119328F98A155A40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15c54fcf-af25-3a8c-bb87-6f7291d043cd.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        76.143.240.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:ff:bb:11:93:28:f9:8a:15:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=4442db80-2cff-4746-bfbd-652390182253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:20:51:b6:25:ca:79:6e:d0:e2:45:d3:7b:e0:
                    2c:d0:ac:80:69:78:29:a2:fc:ac:4e:1b:d1:e2:66:
                    95:e9:e1:87:1a:c5:54:b1:73:96:5a:a5:fe:54:56:
                    cb:20:b4:82:39:52:26:eb:b7:20:de:23:d7:a8:20:
                    52:2f:b2:e7:9c:dd:18:10:6d:19:1c:b3:c1:2d:38:
                    7d:fb:6c:ce:93:76:45:89:37:99:56:24:24:e7:6f:
                    e7:e4:d7:b9:a9:d2:3e:c0:05:da:28:48:00:f1:d5:
                    0a:96:0f:fa:f4:c8:58:08:bd:2e:30:0f:07:fb:3c:
                    b8:96:71:0d:9a:e4:9e:9b:96:8e:4c:96:43:32:cb:
                    cd:f1:77:9a:2e:6f:fc:15:32:9f:40:8f:7b:87:1a:
                    93:03:20:5a:ce:24:13:e9:04:d7:34:e8:55:a9:40:
                    cd:7a:ae:a7:df:6a:db:6a:d3:d5:18:fe:bf:66:dc:
                    33:63:a1:bf:b2:83:5c:e9:f8:b4:c2:1d:e0:0e:3d:
                    86:6b:cf:1e:d5:46:b7:25:69:cc:f1:94:00:b5:4b:
                    4b:83:21:fa:2a:84:97:50:de:25:4c:c3:9f:66:04:
                    fb:f0:fa:48:91:a4:0d:6b:47:ca:43:18:94:d8:17:
                    b9:dd:d6:2e:86:3a:2a:a4:b1:ad:57:bd:a1:c5:9d:
                    59:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:44:12:C6:7C:A4:1D:F5:3B:DF:26:AD:99:B9:59:C7:40:0B:DA:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15c54fcf-af25-3a8c-bb87-6f7291d043cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.143.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:fe:cc:e3:ee:d8:26:d6:ca:bf:6c:9e:46:32:de:6c:ac:87:
         ac:3c:52:7e:17:db:9f:3f:04:ad:03:3c:78:f0:7f:53:a8:02:
         ea:f2:c4:94:d1:70:67:01:59:77:35:ad:97:4a:74:22:36:f7:
         00:6b:68:1f:62:4b:1b:08:9a:a7:19:54:c7:c5:6a:8a:24:7c:
         bd:6f:60:86:5c:3b:d1:09:fe:17:57:7d:fc:88:14:93:c7:08:
         fb:da:7f:79:3f:90:2c:5d:67:85:3d:36:f1:5e:b1:5f:80:23:
         6f:97:56:13:e1:9f:e4:67:2d:31:44:e0:ed:53:76:59:20:c1:
         41:14:e4:9c:d9:fc:86:ac:fb:38:fe:c9:34:1b:35:aa:45:9c:
         ef:11:38:36:ff:1f:29:69:de:f3:83:d2:27:90:95:03:3f:e1:
         fd:95:a7:88:83:04:74:b0:c0:ab:e1:8b:c0:66:3f:aa:fb:60:
         0b:81:d7:39:3a:64:b4:1e:03:64:7a:fd:65:12:cc:14:1c:ce:
         2e:0b:2b:80:be:12:8c:4e:6b:34:f4:01:78:e9:b1:e3:7a:ca:
         88:16:b7:79:35:77:52:2b:87:da:de:ee:c7:d9:8e:94:62:7d:
         7a:92:48:f1:43:16:a9:8e:19:e1:43:b4:58:f5:ae:16:97:b7:
         ae:2b:61:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09/+7EZMo+YoVWkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
NDQ0MmRiODAtMmNmZi00NzQ2LWJmYmQtNjUyMzkwMTgyMjUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyBRtiXKeW7Q4kXTe+As0KyAaXgpovysThvR
4maV6eGHGsVUsXOWWqX+VFbLILSCOVIm67cg3iPXqCBSL7LnnN0YEG0ZHLPBLTh9
+2zOk3ZFiTeZViQk52/n5Ne5qdI+wAXaKEgA8dUKlg/69MhYCL0uMA8H+zy4lnEN
muSem5aOTJZDMsvN8XeaLm/8FTKfQI97hxqTAyBaziQT6QTXNOhVqUDNeq6n32rb
atPVGP6/ZtwzY6G/soNc6fi0wh3gDj2Ga88e1Ua3JWnM8ZQAtUtLgyH6KoSXUN4l
TMOfZgT78PpIkaQNa0fKQxiU2Be53dYuhjoqpLGtV72hxZ1Z6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLlEEsZ8pB31O98mrZm5WcdAC9qjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTVjNTRmY2YtYWYyNS0z
YThjLWJiODctNmY3MjkxZDA0M2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTI/wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALX+zOPu2CbWyr9snkYy3mysh6w8Un4X258/BK0DPHjwf1OoAuryxJTR
cGcBWXc1rZdKdCI29wBraB9iSxsImqcZVMfFaookfL1vYIZcO9EJ/hdXffyIFJPH
CPvaf3k/kCxdZ4U9NvFesV+AI2+XVhPhn+RnLTFE4O1TdlkgwUEU5JzZ/Ias+zj+
yTQbNapFnO8RODb/Hylp3vOD0ieQlQM/4f2Vp4iDBHSwwKvhi8BmP6r7YAuB1zk6
ZLQeA2R6/WUSzBQczi4LK4C+EoxOazT0AXjpseN6yogWt3k1d1Irh9re7sfZjpRi
fXqSSPFDFqmOGeFDtFj1rhaXt64rYUk=
-----END CERTIFICATE-----