Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28419c2e-97b1-38e9-a831-db02048173ec.roa
File:                     28419c2e-97b1-38e9-a831-db02048173ec.roa (raw, json)
Hash identifier:          xRCtHcQeDkB5G2k2a2X5XuDysonVOIbNKfzTvxA5N4w=
Subject key identifier:   1B:5F:8D:95:44:29:DD:6F:03:5B:75:DF:B6:BF:65:2F:71:74:04:B3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA69DFC9040A31577DDF300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28419c2e-97b1-38e9-a831-db02048173ec.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33287
IP address blocks:        96.112.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:9d:fc:90:40:a3:15:77:dd:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=9a621a2f-1cc5-4bd6-86a9-eb3017430f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:93:27:70:5c:07:42:e1:79:e4:cb:4b:b5:2c:
                    62:58:6a:9b:f7:9e:47:d4:9b:5a:1d:25:b7:03:5e:
                    09:c2:ec:5d:7e:df:72:a7:1e:9d:8d:4f:f7:bd:6e:
                    4a:55:eb:13:d7:46:92:9a:c7:4b:3e:eb:1b:3a:d6:
                    52:96:a9:68:b1:7d:62:39:65:d9:85:45:e8:e1:80:
                    19:0c:b1:83:13:9d:fa:78:c2:6c:7b:43:d9:7c:38:
                    e7:61:15:ec:32:4c:db:04:1f:7a:a5:5b:e3:33:2d:
                    86:04:3b:87:be:e7:72:6a:06:7a:69:69:bf:6f:bf:
                    b0:79:d9:ad:b0:c2:a0:0a:d3:d0:8b:cc:c8:5c:64:
                    ea:ca:01:16:00:8b:0a:6b:3d:11:e3:e4:88:70:db:
                    f1:50:76:11:bf:1b:cf:98:8e:4a:63:a0:fa:3f:ca:
                    31:3d:93:85:2b:72:e2:24:f4:30:65:aa:18:de:27:
                    d9:8b:b6:77:4b:7c:ab:5a:8c:8b:37:3b:ed:6f:47:
                    ca:79:34:51:fe:e9:63:b2:69:0e:6c:b9:9b:58:6a:
                    60:bd:89:8d:24:8a:b2:f1:f4:b8:42:95:d7:16:ec:
                    cb:62:18:53:27:a8:2b:42:c5:b7:03:01:67:7b:1a:
                    3f:28:d2:91:99:f7:59:a4:a2:fa:f5:4c:97:d7:7f:
                    81:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5F:8D:95:44:29:DD:6F:03:5B:75:DF:B6:BF:65:2F:71:74:04:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28419c2e-97b1-38e9-a831-db02048173ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.112.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:ae:35:28:f1:18:6d:88:a4:0d:af:35:63:a3:c2:41:bf:7e:
         14:c9:3a:f2:42:df:2b:c4:4f:42:e9:8c:ce:bb:db:5d:37:d2:
         52:2c:dc:4d:e1:5e:e3:74:7e:38:f8:a4:f3:72:2b:2b:25:d4:
         35:6a:5a:67:bf:39:97:e8:e5:2d:3f:d0:25:f3:39:41:a9:c6:
         1f:be:cb:12:73:7c:26:59:5a:d4:79:27:98:8f:74:d8:ef:d2:
         90:aa:78:c0:e9:96:a8:70:59:34:b0:98:7e:99:50:54:fa:31:
         5d:a6:88:1a:57:90:12:c8:fd:80:0b:bd:6c:07:6a:3f:dd:61:
         07:6b:fe:88:c5:70:e2:25:fc:1a:a2:ff:a4:7e:d8:62:ef:43:
         4a:a5:47:ae:52:c2:fb:6f:b2:69:a8:13:ed:4f:04:30:1d:4a:
         1f:97:11:34:b5:c8:45:69:76:f2:c3:82:5e:9a:b8:79:39:52:
         96:84:ec:f3:b4:ba:5d:6c:d6:f0:c2:58:c6:24:9c:ce:52:73:
         70:3d:c8:ab:1e:4e:7e:ca:2f:7d:08:8b:ed:31:d1:bb:8f:42:
         7e:56:25:9f:7e:20:ec:0d:5c:8e:06:bf:59:bc:cf:e2:2c:b3:
         00:c0:db:35:1d:83:0c:c5:88:49:34:a7:25:7c:a4:1f:cc:d7:
         9d:90:a3:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pp38kECjFXfd8wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
OWE2MjFhMmYtMWNjNS00YmQ2LTg2YTktZWIzMDE3NDMwZjAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZMncFwHQuF55MtLtSxiWGqb955H1JtaHSW3
A14Jwuxdft9ypx6djU/3vW5KVesT10aSmsdLPusbOtZSlqlosX1iOWXZhUXo4YAZ
DLGDE536eMJse0PZfDjnYRXsMkzbBB96pVvjMy2GBDuHvudyagZ6aWm/b7+wedmt
sMKgCtPQi8zIXGTqygEWAIsKaz0R4+SIcNvxUHYRvxvPmI5KY6D6P8oxPZOFK3Li
JPQwZaoY3ifZi7Z3S3yrWoyLNzvtb0fKeTRR/uljsmkObLmbWGpgvYmNJIqy8fS4
QpXXFuzLYhhTJ6grQsW3AwFnexo/KNKRmfdZpKL69UyX13+BgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBtfjZVEKd1vA1t137a/ZS9xdASzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjg0MTljMmUtOTdiMS0z
OGU5LWE4MzEtZGIwMjA0ODE3M2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYHClMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACeuNSjxGG2IpA2vNWOjwkG/fhTJOvJC3yvET0LpjM6721030lIs3E3h
XuN0fjj4pPNyKysl1DVqWme/OZfo5S0/0CXzOUGpxh++yxJzfCZZWtR5J5iPdNjv
0pCqeMDplqhwWTSwmH6ZUFT6MV2miBpXkBLI/YALvWwHaj/dYQdr/ojFcOIl/Bqi
/6R+2GLvQ0qlR65SwvtvsmmoE+1PBDAdSh+XETS1yEVpdvLDgl6auHk5UpaE7PO0
ul1s1vDCWMYknM5Sc3A9yKseTn7KL30Ii+0x0buPQn5WJZ9+IOwNXI4Gv1m8z+Is
swDA2zUdgwzFiEk0pyV8pB/M152Qo3w=
-----END CERTIFICATE-----