Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3740df2b-2167-33c6-81a3-51997dbac2a9.roa
File:                     3740df2b-2167-33c6-81a3-51997dbac2a9.roa (raw, json)
Hash identifier:          VxjhGeUqyqBCBQXvbPUfQAzy0vThorYVq1OMq9w0e+E=
Subject key identifier:   32:78:90:16:99:99:60:17:7D:79:06:C1:83:F4:49:54:41:D9:E4:44
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F6F0764B8393EFD9048F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3740df2b-2167-33c6-81a3-51997dbac2a9.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        24.34.216.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:f0:76:4b:83:93:ef:d9:04:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=06c78d7c-ffae-4854-8b6b-b79e7132267f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1a:6f:b5:bb:3e:1d:6b:1d:14:85:af:df:7e:
                    52:b7:95:dd:86:d3:c5:03:33:12:57:6f:b7:08:f3:
                    ae:8d:fc:2e:0c:10:af:74:b5:68:ed:b1:1f:8b:46:
                    59:fd:3e:a6:7a:31:65:10:4b:68:ee:99:a6:eb:c7:
                    81:92:4b:99:44:ea:c8:e0:37:87:2f:94:fe:2e:41:
                    ba:91:af:1c:7e:43:56:59:20:01:1e:2f:2b:36:0c:
                    7b:18:fb:86:b8:04:e5:48:05:9f:24:a8:bb:49:7b:
                    d5:42:27:bd:1e:dc:a5:2e:fc:63:3c:9b:07:67:9e:
                    16:dc:82:f3:5f:c5:6c:69:fa:80:2f:f7:ec:c9:f9:
                    77:20:46:16:aa:e6:b3:ce:40:16:61:11:d5:1b:ae:
                    22:af:e7:5b:ee:e3:4b:b6:e1:b5:d4:cc:4e:79:fd:
                    e5:a8:50:ad:08:51:39:b1:4f:8f:f9:8d:71:53:a7:
                    d5:d5:77:75:8b:23:3c:fe:d4:f4:f7:5f:7a:89:a8:
                    ba:f8:bb:f6:6b:56:48:c4:b3:ac:be:8b:f1:e2:cb:
                    38:17:7a:a4:18:a8:f3:47:d0:88:cb:54:aa:63:3f:
                    60:0c:47:8f:4e:4f:4c:22:d4:92:b0:76:42:45:47:
                    98:b0:24:5a:c7:16:ce:fa:8a:c7:bc:2c:5d:8c:57:
                    fb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:78:90:16:99:99:60:17:7D:79:06:C1:83:F4:49:54:41:D9:E4:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3740df2b-2167-33c6-81a3-51997dbac2a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.34.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:97:25:06:58:78:c7:b2:6f:64:93:be:d6:03:7a:fe:5f:2e:
         70:96:91:5b:48:bd:37:94:31:f7:97:fa:e1:5a:9e:4f:20:a6:
         63:11:5a:ab:7d:c3:0b:ac:04:8d:62:7e:de:3e:0b:86:86:0b:
         9e:b5:7e:b2:9f:58:aa:e0:4f:1b:e0:0d:17:9e:fb:d0:d8:63:
         89:88:6f:7f:db:01:3e:62:b8:2f:b4:87:16:12:25:42:d3:05:
         32:af:91:72:04:7c:f7:13:9c:9a:10:73:cc:e2:fe:87:a4:be:
         2f:0b:65:a9:65:63:47:f4:ca:b6:eb:98:62:9e:5a:81:02:1f:
         60:f4:e6:55:0c:22:c2:f9:55:73:a3:8a:ab:68:04:cf:fe:e7:
         1d:96:3b:07:8d:c3:32:b0:41:cd:ff:3d:73:7f:fa:3c:f2:0c:
         b5:b8:45:97:b3:a2:f7:cb:6b:71:68:0f:a8:2a:0c:dd:1f:5a:
         bd:0a:be:48:d9:c5:a0:96:5d:d4:d0:ce:bb:56:1d:2c:18:8b:
         78:ac:21:ef:45:0e:dc:08:b6:7e:91:25:b8:de:ed:5d:f6:2f:
         bb:2d:fd:e1:69:0d:db:5f:88:f3:3f:7d:5b:9c:ce:28:cd:04:
         71:41:67:6f:8a:6d:08:ff:aa:12:8c:35:a4:54:fc:0c:c0:1f:
         b1:0c:4b:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09vB2S4OT79kEj0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
MDZjNzhkN2MtZmZhZS00ODU0LThiNmItYjc5ZTcxMzIyNjdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhpvtbs+HWsdFIWv335St5XdhtPFAzMSV2+3
CPOujfwuDBCvdLVo7bEfi0ZZ/T6mejFlEEto7pmm68eBkkuZROrI4DeHL5T+LkG6
ka8cfkNWWSABHi8rNgx7GPuGuATlSAWfJKi7SXvVQie9HtylLvxjPJsHZ54W3ILz
X8VsafqAL/fsyfl3IEYWquazzkAWYRHVG64ir+db7uNLtuG11MxOef3lqFCtCFE5
sU+P+Y1xU6fV1Xd1iyM8/tT09196iai6+Lv2a1ZIxLOsvovx4ss4F3qkGKjzR9CI
y1SqYz9gDEePTk9MItSSsHZCRUeYsCRaxxbO+orHvCxdjFf7BwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDJ4kBaZmWAXfXkGwYP0SVRB2eREMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzc0MGRmMmItMjE2Ny0z
M2M2LTgxYTMtNTE5OTdkYmFjMmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGCLYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADiXJQZYeMeyb2STvtYDev5fLnCWkVtIvTeUMfeX+uFank8gpmMRWqt9
wwusBI1ift4+C4aGC561frKfWKrgTxvgDRee+9DYY4mIb3/bAT5iuC+0hxYSJULT
BTKvkXIEfPcTnJoQc8zi/oekvi8LZallY0f0yrbrmGKeWoECH2D05lUMIsL5VXOj
iqtoBM/+5x2WOweNwzKwQc3/PXN/+jzyDLW4RZezovfLa3FoD6gqDN0fWr0KvkjZ
xaCWXdTQzrtWHSwYi3isIe9FDtwItn6RJbje7V32L7st/eFpDdtfiPM/fVuczijN
BHFBZ2+KbQj/qhKMNaRU/AzAH7EMS6E=
-----END CERTIFICATE-----