Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d441aac-291e-3e0f-963a-e84d849dfeef.roa
File:                     4d441aac-291e-3e0f-963a-e84d849dfeef.roa (raw, json)
Hash identifier:          mZ5ITqSUh7pA6SKoXluFQ/9ggfgeddUEtHqeYg562+4=
Subject key identifier:   2B:71:17:BE:89:26:F2:5E:E2:63:6B:3B:8E:29:E7:41:DB:93:FB:44
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA483294BDAF4DB03494740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d441aac-291e-3e0f-963a-e84d849dfeef.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22909
IP address blocks:        68.53.224.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:83:29:4b:da:f4:db:03:49:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=3e2947e5-82eb-47ae-9252-3667e22174df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9d:70:4e:65:fe:10:76:7e:4b:a1:c0:96:7b:
                    5b:2c:e0:c0:36:6b:30:d0:96:db:8d:2c:2b:58:08:
                    42:80:6d:7b:34:c8:80:6c:30:41:5d:82:e4:7c:3d:
                    1a:57:93:9b:4f:e5:52:20:57:14:fe:8e:45:e3:4b:
                    cc:57:41:69:f7:e8:43:4a:7a:43:28:bc:1c:e8:f2:
                    a7:6e:15:71:0f:db:7b:dc:21:fb:34:17:b5:d3:6e:
                    77:ab:0c:c6:19:26:dd:bd:13:f5:6d:1f:ae:ac:9c:
                    df:ba:34:c5:7a:4a:45:fd:95:ae:95:5e:9a:9d:f7:
                    67:cb:fd:d6:e9:4d:55:08:47:d7:a7:54:17:40:53:
                    53:b8:bd:08:5e:e7:32:35:d6:7f:4d:2c:bc:03:7f:
                    18:73:05:fe:aa:b2:04:c9:20:ef:27:3d:8c:77:da:
                    c8:60:14:a3:3e:06:67:2b:c2:74:61:a2:39:75:d2:
                    cb:55:cd:d0:41:1d:26:69:93:d9:ac:8b:64:20:79:
                    9e:80:68:8c:77:4c:cf:13:c6:d8:de:aa:c3:a7:ec:
                    26:f9:9f:24:4f:f3:2c:80:4f:02:de:46:c6:0b:0d:
                    d6:e1:07:af:39:1d:ce:46:a9:7e:9b:4b:ee:c6:d7:
                    8d:01:a4:55:87:8e:4e:1f:6e:54:37:30:8a:7f:3f:
                    aa:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:71:17:BE:89:26:F2:5E:E2:63:6B:3B:8E:29:E7:41:DB:93:FB:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d441aac-291e-3e0f-963a-e84d849dfeef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.53.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:6e:b1:9a:26:c9:4e:e9:ec:8f:f7:5b:49:31:ef:26:cd:8b:
         db:ce:83:3d:ad:89:78:95:d7:db:4d:fe:78:4f:99:49:1c:a0:
         3d:a9:c0:73:b5:5b:b2:57:e0:a9:05:75:c2:8a:81:5d:3d:7e:
         9f:5e:78:00:64:66:0b:e5:dc:82:3a:ab:69:13:4f:11:c9:cb:
         01:33:9e:9f:91:1b:f9:3e:1c:b9:2e:cd:8e:7b:9c:35:e7:de:
         37:14:09:8d:bf:24:e1:3c:d2:be:9e:ba:f5:99:ad:68:d3:27:
         b0:97:2b:3e:f9:98:dc:5d:b0:94:54:df:30:34:1a:48:6e:7f:
         36:08:b9:72:49:18:75:7e:86:bb:66:0c:45:68:68:e0:f6:23:
         c3:83:70:3e:b6:71:43:9e:08:a5:b3:dc:9d:13:fe:5e:00:b9:
         e8:07:5a:fc:3a:0f:17:17:78:83:14:87:1f:07:d9:f6:00:5b:
         cc:b6:da:5b:a0:85:36:c9:01:b2:08:f8:b7:39:b9:16:36:cd:
         24:d7:92:d5:a1:6b:c3:ba:1f:b7:b2:d2:24:5c:14:a4:02:cc:
         c6:ee:11:07:7b:c4:d6:0b:70:bd:2d:46:b2:77:5c:fa:92:47:
         fc:65:ce:5e:db:e7:13:6a:75:17:5f:6f:dc:81:32:85:02:62:
         a8:86:99:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pIMpS9r02wNJR0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
M2UyOTQ3ZTUtODJlYi00N2FlLTkyNTItMzY2N2UyMjE3NGRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs51wTmX+EHZ+S6HAlntbLODANmsw0JbbjSwr
WAhCgG17NMiAbDBBXYLkfD0aV5ObT+VSIFcU/o5F40vMV0Fp9+hDSnpDKLwc6PKn
bhVxD9t73CH7NBe10253qwzGGSbdvRP1bR+urJzfujTFekpF/ZWulV6anfdny/3W
6U1VCEfXp1QXQFNTuL0IXucyNdZ/TSy8A38YcwX+qrIEySDvJz2Md9rIYBSjPgZn
K8J0YaI5ddLLVc3QQR0maZPZrItkIHmegGiMd0zPE8bY3qrDp+wm+Z8kT/MsgE8C
3kbGCw3W4QevOR3ORql+m0vuxteNAaRVh45OH25UNzCKfz+qPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCtxF76JJvJe4mNrO44p50Hbk/tEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGQ0NDFhYWMtMjkxZS0z
ZTBmLTk2M2EtZTg0ZDg0OWRmZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDXgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMVusZomyU7p7I/3W0kx7ybNi9vOgz2tiXiV19tN/nhPmUkcoD2pwHO1
W7JX4KkFdcKKgV09fp9eeABkZgvl3II6q2kTTxHJywEznp+RG/k+HLkuzY57nDXn
3jcUCY2/JOE80r6euvWZrWjTJ7CXKz75mNxdsJRU3zA0GkhufzYIuXJJGHV+hrtm
DEVoaOD2I8ODcD62cUOeCKWz3J0T/l4AuegHWvw6DxcXeIMUhx8H2fYAW8y22lug
hTbJAbII+Lc5uRY2zSTXktWha8O6H7ey0iRcFKQCzMbuEQd7xNYLcL0tRrJ3XPqS
R/xlzl7b5xNqdRdfb9yBMoUCYqiGmUA=
-----END CERTIFICATE-----