Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cf55d8f-bacc-3ea8-9391-d493603eca79.roa
File:                     4cf55d8f-bacc-3ea8-9391-d493603eca79.roa (raw, json)
Hash identifier:          n3NDLgljJolz6Vl3FbBr8vpaqi9gbGGrFDtz0nLuO6M=
Subject key identifier:   3E:51:BF:63:76:43:F5:B5:95:37:3A:30:5D:69:F5:73:B4:AC:C8:F1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA627839F8913C5F94C8A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cf55d8f-bacc-3ea8-9391-d493603eca79.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33650
IP address blocks:        67.165.112.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:27:83:9f:89:13:c5:f9:4c:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=41850eb0-2806-4626-9cae-22f2f686aaed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5e:04:70:d5:97:46:83:e3:f0:ac:d9:0f:a1:
                    29:f4:5e:c4:d3:6a:c1:c1:54:04:57:5e:06:e9:b0:
                    d6:a8:ea:7f:77:f4:51:fa:77:07:d8:2f:5c:fd:fa:
                    4c:b3:d2:1a:2b:41:60:b5:4d:13:e9:e9:6b:a4:7e:
                    94:1c:8d:88:8d:ab:48:d0:f0:58:97:f2:01:c4:97:
                    45:ad:b0:85:84:60:7f:88:93:9e:a5:6f:8e:9f:f9:
                    17:16:95:64:5a:2f:48:01:a1:d7:da:0e:02:82:71:
                    01:0e:a8:9a:2e:2c:f2:b3:39:5e:99:ec:f2:18:cb:
                    d7:e5:9a:45:ad:9c:70:ec:51:cf:16:7f:c1:7d:44:
                    fe:37:aa:5b:af:1d:9e:88:82:55:7b:0b:6d:2f:1a:
                    b1:f5:c1:4c:87:dc:aa:c6:7f:e1:cf:c1:13:ab:84:
                    3c:fc:34:c1:cf:ec:3e:b2:34:b0:43:9e:7a:44:de:
                    8a:c2:38:05:7c:7e:b4:c6:bb:f7:74:28:a6:32:65:
                    94:01:65:71:97:ba:49:ef:f8:74:75:b5:8b:ca:dd:
                    6b:07:b2:cc:6e:9f:1c:03:de:c6:45:0c:1f:41:05:
                    93:7b:5e:33:b8:19:64:f5:50:e9:c5:04:e8:7a:3e:
                    2a:b7:44:bb:96:96:bd:ce:c5:ec:77:12:41:fe:03:
                    02:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:51:BF:63:76:43:F5:B5:95:37:3A:30:5D:69:F5:73:B4:AC:C8:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cf55d8f-bacc-3ea8-9391-d493603eca79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.165.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:3d:2f:08:44:be:dd:10:3f:73:94:bf:f4:a1:19:aa:f4:a0:
         ea:18:92:2e:bc:43:a4:0c:54:b7:23:e3:c8:93:5b:9b:59:69:
         2e:ee:94:a4:84:64:98:26:f1:4f:5a:30:24:63:34:60:70:96:
         c5:e8:31:25:ad:86:0a:75:f2:ca:76:e4:1d:e5:de:39:39:f8:
         44:47:99:26:63:1c:00:5a:9d:ab:bb:8e:32:6c:a2:7a:fc:d8:
         b7:f8:55:e0:f9:00:dd:70:34:1b:e9:78:b5:39:61:5d:d6:3a:
         5d:87:5d:68:25:93:41:b7:d4:f0:d8:f9:66:01:b2:d5:31:8a:
         7a:3e:5b:cb:f4:20:b5:4d:31:4c:45:48:73:82:4b:55:e1:71:
         cd:26:60:5f:40:eb:dd:1c:1b:97:ba:6a:54:58:35:82:77:91:
         4c:68:7e:0b:25:92:a8:4f:87:d9:17:e1:93:a8:58:25:fc:66:
         9f:16:0c:06:e2:30:cc:37:0b:51:a4:09:cc:43:22:81:d9:a9:
         65:6a:56:c0:a6:a0:77:04:cc:63:cc:da:80:cd:3a:f2:3d:b5:
         33:c5:ee:af:ca:18:c7:b1:6f:ec:07:29:69:5e:c1:26:92:81:
         bf:8a:34:dc:bd:db:dc:4e:f0:85:f0:a2:5d:7c:81:2a:15:34:
         f2:29:77:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pieDn4kTxflMigAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
NDE4NTBlYjAtMjgwNi00NjI2LTljYWUtMjJmMmY2ODZhYWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl4EcNWXRoPj8KzZD6Ep9F7E02rBwVQEV14G
6bDWqOp/d/RR+ncH2C9c/fpMs9IaK0FgtU0T6elrpH6UHI2IjatI0PBYl/IBxJdF
rbCFhGB/iJOepW+On/kXFpVkWi9IAaHX2g4CgnEBDqiaLizyszlemezyGMvX5ZpF
rZxw7FHPFn/BfUT+N6pbrx2eiIJVewttLxqx9cFMh9yqxn/hz8ETq4Q8/DTBz+w+
sjSwQ556RN6KwjgFfH60xrv3dCimMmWUAWVxl7pJ7/h0dbWLyt1rB7LMbp8cA97G
RQwfQQWTe14zuBlk9VDpxQToej4qt0S7lpa9zsXsdxJB/gMCfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD5Rv2N2Q/W1lTc6MF1p9XO0rMjxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGNmNTVkOGYtYmFjYy0z
ZWE4LTkzOTEtZDQ5MzYwM2VjYTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ6VwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADw9LwhEvt0QP3OUv/ShGar0oOoYki68Q6QMVLcj48iTW5tZaS7ulKSE
ZJgm8U9aMCRjNGBwlsXoMSWthgp18sp25B3l3jk5+ERHmSZjHABanau7jjJsonr8
2Lf4VeD5AN1wNBvpeLU5YV3WOl2HXWglk0G31PDY+WYBstUxino+W8v0ILVNMUxF
SHOCS1Xhcc0mYF9A690cG5e6alRYNYJ3kUxofgslkqhPh9kX4ZOoWCX8Zp8WDAbi
MMw3C1GkCcxDIoHZqWVqVsCmoHcEzGPM2oDNOvI9tTPF7q/KGMexb+wHKWlewSaS
gb+KNNy929xO8IXwol18gSoVNPIpd0U=
-----END CERTIFICATE-----