Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17fc77d8-3b8c-30ad-b26f-98f1e4df75ef.roa
File:                     17fc77d8-3b8c-30ad-b26f-98f1e4df75ef.roa (raw, json)
Hash identifier:          GpwHyyd+7vo6slPUrlOlCbOhWv0Yym20lA6gnzIgIT8=
Subject key identifier:   3E:B2:EC:23:E6:8F:4F:99:2A:E6:03:02:E8:6A:37:F9:58:46:31:DC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA4F374EDE6B37A7EB53E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17fc77d8-3b8c-30ad-b26f-98f1e4df75ef.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33652
IP address blocks:        96.110.194.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:f3:74:ed:e6:b3:7a:7e:b5:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=d00dcc63-6542-42fa-b9bc-ff242f23ef56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6a:5c:22:e8:6d:f4:46:e3:86:e0:28:90:29:
                    c3:1c:41:41:38:7d:65:fe:2b:d0:30:42:d7:84:0c:
                    1d:7a:d8:dd:9b:b5:47:35:82:06:8e:fc:82:20:6f:
                    f6:1e:09:fd:86:35:55:13:d7:c6:78:06:96:0d:e4:
                    07:f0:b0:f4:16:35:77:3a:b7:d7:2c:f4:77:c5:8b:
                    f5:d6:dc:4a:cf:88:27:e6:a7:e6:ff:f7:e1:91:fe:
                    6f:82:d3:85:67:46:94:d1:72:f3:cb:5e:f2:25:07:
                    e8:99:63:34:a2:18:6d:5e:cc:d4:ff:5e:12:b5:89:
                    c9:d8:54:40:1d:b7:e6:a1:b2:0b:65:3e:40:61:6c:
                    d6:1a:89:38:1e:ef:2a:ce:10:61:e6:34:31:75:a1:
                    25:ca:f5:a4:2a:0e:22:e0:81:9f:54:52:64:3d:d5:
                    87:69:a8:17:ab:9c:5f:77:63:d4:1b:ae:62:46:f3:
                    6d:18:7e:88:a2:ba:4f:1d:06:a4:25:1a:d1:7c:eb:
                    cb:cb:05:01:7f:fc:31:1c:1d:0c:60:5d:bc:0f:09:
                    cd:c5:a2:71:db:5e:c2:9d:da:41:bc:8f:d0:24:7f:
                    e2:b1:b7:10:05:dc:54:e5:57:56:fb:69:d9:43:c6:
                    6f:a9:c2:76:9f:13:a9:aa:70:b7:43:95:c1:de:0d:
                    e8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B2:EC:23:E6:8F:4F:99:2A:E6:03:02:E8:6A:37:F9:58:46:31:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17fc77d8-3b8c-30ad-b26f-98f1e4df75ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.110.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:68:94:17:4e:1d:9f:a8:1c:98:e4:63:c2:49:97:95:7a:ff:
         b5:76:0f:3f:d7:07:3b:15:29:9b:50:13:85:ba:2e:9b:d8:8e:
         1c:48:a1:b7:9d:43:72:2b:40:13:87:22:9b:eb:71:9b:81:fc:
         e7:fd:a6:4e:5d:39:1a:d2:1e:79:a6:b9:47:12:56:d9:0b:aa:
         98:3e:52:5b:e3:8a:50:f2:11:47:a1:62:d3:4b:74:5d:56:61:
         5a:39:20:d0:cd:20:b3:87:bf:01:49:20:c4:10:48:d1:eb:de:
         27:88:1d:69:72:10:10:17:37:84:7e:56:87:82:a2:6e:36:7a:
         41:bd:7b:6f:29:3d:30:b3:ff:43:d8:62:48:0c:60:8f:64:81:
         a7:19:89:d3:6e:39:fb:a2:26:30:45:46:da:9c:3c:42:da:d2:
         48:f7:5b:1a:a4:84:11:dc:cf:2b:7d:b6:7f:57:25:eb:99:6c:
         33:d8:44:53:72:fd:19:8a:5b:4d:de:ff:a4:6f:9a:26:b9:3f:
         05:1e:c1:f8:92:e7:86:7f:66:6b:3e:0b:7d:b8:48:78:23:f6:
         f8:3a:84:d5:ef:b6:57:7e:91:fc:c3:c0:f4:47:6e:0e:2e:96:
         c5:cc:02:e4:f6:a7:c1:30:22:6f:b3:3a:d3:90:f3:4e:55:9f:
         90:61:6a:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pPN07eazen61PoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
ZDAwZGNjNjMtNjU0Mi00MmZhLWI5YmMtZmYyNDJmMjNlZjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2pcIuht9EbjhuAokCnDHEFBOH1l/ivQMELX
hAwdetjdm7VHNYIGjvyCIG/2Hgn9hjVVE9fGeAaWDeQH8LD0FjV3OrfXLPR3xYv1
1txKz4gn5qfm//fhkf5vgtOFZ0aU0XLzy17yJQfomWM0ohhtXszU/14StYnJ2FRA
HbfmobILZT5AYWzWGok4Hu8qzhBh5jQxdaElyvWkKg4i4IGfVFJkPdWHaagXq5xf
d2PUG65iRvNtGH6IorpPHQakJRrRfOvLywUBf/wxHB0MYF28DwnNxaJx217CndpB
vI/QJH/isbcQBdxU5VdW+2nZQ8ZvqcJ2nxOpqnC3Q5XB3g3oKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD6y7CPmj0+ZKuYDAuhqN/lYRjHcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTdmYzc3ZDgtM2I4Yy0z
MGFkLWIyNmYtOThmMWU0ZGY3NWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYG7CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACFolBdOHZ+oHJjkY8JJl5V6/7V2Dz/XBzsVKZtQE4W6LpvYjhxIobed
Q3IrQBOHIpvrcZuB/Of9pk5dORrSHnmmuUcSVtkLqpg+UlvjilDyEUehYtNLdF1W
YVo5INDNILOHvwFJIMQQSNHr3ieIHWlyEBAXN4R+VoeCom42ekG9e28pPTCz/0PY
YkgMYI9kgacZidNuOfuiJjBFRtqcPELa0kj3WxqkhBHczyt9tn9XJeuZbDPYRFNy
/RmKW03e/6Rvmia5PwUewfiS54Z/Zms+C324SHgj9vg6hNXvtld+kfzDwPRHbg4u
lsXMAuT2p8EwIm+zOtOQ805Vn5Bhah4=
-----END CERTIFICATE-----