Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44bf9b76-89d8-33ff-8c90-84c73f7d32f5.roa
File:                     44bf9b76-89d8-33ff-8c90-84c73f7d32f5.roa (raw, json)
Hash identifier:          Lngjb+fLtK4UNUy+f+TMsnR0aegITui4ESbbxcaggw0=
Subject key identifier:   1A:F4:64:6F:DB:6B:41:3E:E5:27:53:F9:6C:B5:B5:74:F6:5D:49:96
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAEFBB43E4888AAD9714240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44bf9b76-89d8-33ff-8c90-84c73f7d32f5.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33287
IP address blocks:        68.81.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:fb:b4:3e:48:88:aa:d9:71:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=6c751492-d87b-4e56-8855-4a2a4632261b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f4:37:d3:c1:83:28:86:49:c0:36:41:e9:45:
                    af:f3:b0:ed:89:85:3d:91:7c:ff:ff:d2:56:65:75:
                    3d:c8:10:90:10:85:85:29:9b:f5:34:25:5d:71:f2:
                    98:96:f1:d4:c0:07:fd:f9:3f:53:0b:9d:2e:b6:32:
                    76:6e:2f:b9:1e:c4:eb:be:0a:0c:9d:39:5f:77:09:
                    5e:3b:ed:6f:de:87:37:ad:6b:ff:56:50:b3:c7:dd:
                    34:5a:31:3d:a8:8d:18:0e:93:0f:80:ce:cc:d8:42:
                    d2:06:d7:b6:12:57:ae:bc:85:fd:0a:5e:67:c3:61:
                    be:4f:de:35:7f:56:b6:bf:80:9e:d5:42:93:25:41:
                    65:a8:8f:6e:ae:4d:ec:bf:9e:f8:47:77:f4:aa:28:
                    cd:5a:a6:ac:fc:3d:b1:64:99:33:ab:25:f9:d6:9e:
                    7c:06:93:00:b4:0d:79:71:a7:28:f3:86:2c:8e:fc:
                    89:08:98:e8:bf:db:a5:9a:65:bc:c6:17:b5:18:8c:
                    d6:c2:4d:31:6a:75:e6:17:6a:a9:0d:2c:04:50:5a:
                    84:3f:7d:2e:dd:43:54:f1:80:2a:54:ab:70:68:87:
                    92:0d:15:8e:9d:d2:f3:40:b1:09:fb:e2:41:cf:92:
                    d8:32:97:43:8c:e9:8d:c1:0a:6b:79:b7:f5:77:7d:
                    b0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F4:64:6F:DB:6B:41:3E:E5:27:53:F9:6C:B5:B5:74:F6:5D:49:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44bf9b76-89d8-33ff-8c90-84c73f7d32f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.81.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:7d:82:98:43:7b:f9:e2:5a:ac:bd:04:6d:a2:cc:75:d3:f3:
         02:f2:c9:8e:94:98:c2:c9:dd:47:2d:93:0e:c6:b1:4b:30:60:
         6f:5e:4f:c7:44:4f:9b:0c:7b:4a:7d:fa:82:76:e0:9c:d2:95:
         81:9f:6b:8a:37:98:e3:ab:0b:fb:9c:ab:77:02:06:33:43:e7:
         22:2c:2c:1d:35:ce:00:a4:ae:26:2a:e8:e8:28:ce:7d:cc:9f:
         f3:11:0e:75:64:2d:7f:91:2a:02:ff:32:19:9b:63:d5:94:85:
         81:70:5b:09:ee:81:77:ce:3f:75:fa:f0:8d:10:07:7f:3c:67:
         86:13:73:d6:31:d4:ba:07:98:58:bf:29:fd:32:13:42:12:55:
         3e:2e:3b:d8:fb:cf:92:94:d1:3c:f9:9e:8b:98:a9:40:bc:6e:
         44:21:c0:77:08:79:fb:24:d9:d9:1f:aa:2a:91:86:9c:a1:8d:
         b6:b1:b8:23:21:b2:e3:dc:55:18:c6:49:7c:13:0a:a5:76:a5:
         bb:af:c7:8b:20:6e:bb:2b:26:e5:64:0e:6f:58:11:ad:be:6c:
         2b:e1:b5:83:4a:69:c5:44:69:5a:37:62:7a:54:c3:b8:9c:ba:
         be:fc:a9:14:d8:51:ab:d3:d2:d5:6b:98:bd:83:09:b8:de:85:
         05:bc:65:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrvu0PkiIqtlxQkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NmM3NTE0OTItZDg3Yi00ZTU2LTg4NTUtNGEyYTQ2MzIyNjFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vQ308GDKIZJwDZB6UWv87DtiYU9kXz//9JW
ZXU9yBCQEIWFKZv1NCVdcfKYlvHUwAf9+T9TC50utjJ2bi+5HsTrvgoMnTlfdwle
O+1v3oc3rWv/VlCzx900WjE9qI0YDpMPgM7M2ELSBte2EleuvIX9Cl5nw2G+T941
f1a2v4Ce1UKTJUFlqI9urk3sv574R3f0qijNWqas/D2xZJkzqyX51p58BpMAtA15
caco84YsjvyJCJjov9ulmmW8xhe1GIzWwk0xanXmF2qpDSwEUFqEP30u3UNU8YAq
VKtwaIeSDRWOndLzQLEJ++JBz5LYMpdDjOmNwQprebf1d32wawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBr0ZG/ba0E+5SdT+Wy1tXT2XUmWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDRiZjliNzYtODlkOC0z
M2ZmLThjOTAtODRjNzNmN2QzMmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFE8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADV9gphDe/niWqy9BG2izHXT8wLyyY6UmMLJ3Uctkw7GsUswYG9eT8dE
T5sMe0p9+oJ24JzSlYGfa4o3mOOrC/ucq3cCBjND5yIsLB01zgCkriYq6Ogozn3M
n/MRDnVkLX+RKgL/MhmbY9WUhYFwWwnugXfOP3X68I0QB388Z4YTc9Yx1LoHmFi/
Kf0yE0ISVT4uO9j7z5KU0Tz5nouYqUC8bkQhwHcIefsk2dkfqiqRhpyhjbaxuCMh
suPcVRjGSXwTCqV2pbuvx4sgbrsrJuVkDm9YEa2+bCvhtYNKacVEaVo3YnpUw7ic
ur78qRTYUavT0tVrmL2DCbjehQW8ZU8=
-----END CERTIFICATE-----