Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41e2bd32-0a68-3173-b1ad-7d1f1ca53f77.roa
File:                     41e2bd32-0a68-3173-b1ad-7d1f1ca53f77.roa (raw, json)
Hash identifier:          kMK2ZBWatGNasdy00D1z3wET00OWEn2FdDGVMozBSuQ=
Subject key identifier:   23:64:8C:C2:CA:31:A8:78:ED:B6:68:E7:37:3D:6F:63:1E:89:10:A9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF3A9568EAFDB168A4D780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41e2bd32-0a68-3173-b1ad-7d1f1ca53f77.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        67.173.136.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:3a:95:68:ea:fd:b1:68:a4:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=a82c77b7-fae5-458a-8389-412a6edc6bec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d5:dc:63:19:e3:41:84:ac:a4:90:bf:94:ad:
                    52:30:77:dc:1c:53:cf:19:b0:86:6d:8d:f1:a2:f5:
                    38:cd:25:c7:b3:c6:a3:b4:f8:a8:13:c9:1d:c5:6e:
                    92:4a:f8:cf:9c:22:00:47:46:b1:00:b7:ca:6a:ad:
                    6c:89:72:36:63:f5:76:87:0c:05:93:34:f8:ba:1a:
                    c8:c8:bf:27:03:ad:f7:27:bd:4e:6d:f2:5d:c7:84:
                    f1:c4:3c:18:e1:90:15:5b:99:2b:ec:4c:5e:f3:fb:
                    1f:1a:64:89:4d:c6:b1:59:af:13:67:54:7e:1f:12:
                    4f:47:71:78:ef:e6:9b:6d:ee:26:9a:3d:58:ae:30:
                    c3:00:9c:e3:ab:46:9e:e9:64:cb:52:4e:c4:79:40:
                    0b:eb:fa:1f:dc:bf:d5:88:11:7b:66:d0:c4:0e:5f:
                    d1:ab:e7:99:af:8f:f0:6a:40:e7:ec:56:6a:14:fd:
                    3d:f9:ce:cc:3c:78:3a:bc:85:d6:a3:c8:58:e8:dc:
                    ea:08:af:c9:cb:6c:75:68:ec:c2:4c:7a:12:57:37:
                    fb:27:16:9f:ff:a8:c5:82:39:cc:19:b9:fb:80:d9:
                    3a:a6:f2:75:76:5d:80:6a:35:01:7b:35:d9:b5:46:
                    60:03:25:c6:9c:82:51:ca:4c:d9:d2:b9:8e:86:09:
                    be:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:64:8C:C2:CA:31:A8:78:ED:B6:68:E7:37:3D:6F:63:1E:89:10:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41e2bd32-0a68-3173-b1ad-7d1f1ca53f77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.173.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:cf:29:f3:d3:74:26:86:9b:e2:43:9c:90:a8:4a:44:b5:f9:
         ab:63:3e:82:f3:75:b5:c1:58:a3:4a:7b:13:61:0b:68:ab:54:
         78:b9:12:41:85:82:b4:56:63:2d:0e:3c:f9:82:a5:e1:41:e7:
         02:ec:17:6f:ff:cc:ef:04:cc:9b:1e:26:ce:3a:e2:6e:d5:a0:
         fd:64:5b:ec:28:c9:fd:6f:81:92:30:e1:b9:70:2f:8c:92:1d:
         96:58:be:8a:b7:ed:cb:e8:a3:b2:c0:43:bb:a4:df:63:36:ea:
         4e:86:ed:78:f5:29:85:8c:49:f2:52:c9:9c:5c:0f:67:c7:07:
         63:7b:27:57:18:f4:f2:80:0d:56:8a:c4:cd:ec:24:8b:de:18:
         23:98:01:3c:e0:c9:a0:65:6a:85:c5:e9:b0:d2:55:28:53:59:
         b0:f4:c7:40:fa:cb:2e:a7:3f:d9:cb:95:6b:d9:d2:6d:2e:f8:
         f4:09:05:9e:78:8b:60:8d:c5:0c:04:ed:69:c4:f6:38:e8:f0:
         bd:cb:6a:d6:68:ef:e6:a7:a6:c1:ff:b1:ce:07:2e:4e:b6:3d:
         4f:ab:51:0f:c2:9c:e7:7f:39:34:04:c7:7c:63:37:30:38:a1:
         0e:e6:7f:05:5f:5e:46:16:19:51:c8:45:46:ef:90:80:99:46:
         0d:a6:cd:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrzqVaOr9sWik14AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
YTgyYzc3YjctZmFlNS00NThhLTgzODktNDEyYTZlZGM2YmVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19XcYxnjQYSspJC/lK1SMHfcHFPPGbCGbY3x
ovU4zSXHs8ajtPioE8kdxW6SSvjPnCIAR0axALfKaq1siXI2Y/V2hwwFkzT4uhrI
yL8nA633J71ObfJdx4TxxDwY4ZAVW5kr7Exe8/sfGmSJTcaxWa8TZ1R+HxJPR3F4
7+abbe4mmj1YrjDDAJzjq0ae6WTLUk7EeUAL6/of3L/ViBF7ZtDEDl/Rq+eZr4/w
akDn7FZqFP09+c7MPHg6vIXWo8hY6NzqCK/Jy2x1aOzCTHoSVzf7Jxaf/6jFgjnM
Gbn7gNk6pvJ1dl2AajUBezXZtUZgAyXGnIJRykzZ0rmOhgm+pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCNkjMLKMah47bZo5zc9b2MeiRCpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDFlMmJkMzItMGE2OC0z
MTczLWIxYWQtN2QxZjFjYTUzZjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ62IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ7PKfPTdCaGm+JDnJCoSkS1+atjPoLzdbXBWKNKexNhC2irVHi5EkGF
grRWYy0OPPmCpeFB5wLsF2//zO8EzJseJs464m7VoP1kW+woyf1vgZIw4blwL4yS
HZZYvoq37cvoo7LAQ7uk32M26k6G7Xj1KYWMSfJSyZxcD2fHB2N7J1cY9PKADVaK
xM3sJIveGCOYATzgyaBlaoXF6bDSVShTWbD0x0D6yy6nP9nLlWvZ0m0u+PQJBZ54
i2CNxQwE7WnE9jjo8L3LatZo7+anpsH/sc4HLk62PU+rUQ/CnOd/OTQEx3xjNzA4
oQ7mfwVfXkYWGVHIRUbvkICZRg2mzZo=
-----END CERTIFICATE-----