Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5cee7666-127a-30d1-ae5d-80205a021929.roa
File:                     5cee7666-127a-30d1-ae5d-80205a021929.roa (raw, json)
Hash identifier:          CnI1I3mWH783rI7v5ToZ4JtQ2S+p+vx546OkBqZtC4Y=
Subject key identifier:   53:AD:BA:EB:AD:F5:05:1E:BA:AF:13:90:08:BA:3C:69:A3:60:8F:66
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5D1E92EDE3D6E62474080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5cee7666-127a-30d1-ae5d-80205a021929.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22909
IP address blocks:        71.203.240.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:d1:e9:2e:de:3d:6e:62:47:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=5912f885-fb03-4009-b172-a5b46d17c734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d0:c2:a4:68:fb:b5:1b:d0:33:2a:9d:37:50:
                    c5:1b:0c:04:34:c3:da:e2:5f:36:e7:0f:26:90:d6:
                    a2:90:b9:ab:f0:37:d1:72:ca:a0:79:ab:ff:cb:e4:
                    8f:83:ab:f9:1b:f8:cd:8a:60:30:d7:22:0e:ac:45:
                    9f:1b:17:65:f1:92:c4:95:99:63:bd:38:47:3f:26:
                    4b:27:eb:d1:be:1c:c3:1b:03:58:e8:06:9d:c4:75:
                    b3:8d:92:e8:10:dc:96:6d:6b:ae:a1:41:3c:c4:d8:
                    1a:1b:93:de:44:78:2f:27:e8:39:86:de:f2:c1:1d:
                    03:15:17:a7:2d:dd:d5:74:c4:6b:a1:9d:6b:7d:e4:
                    b0:96:de:c7:4f:86:cc:f4:bb:02:90:9c:16:8f:43:
                    46:ba:d3:8a:2e:f5:f5:57:d4:6a:8b:77:0a:9a:43:
                    d1:fe:67:69:2a:cd:78:50:7b:d2:65:fb:b8:c0:79:
                    d7:7a:7c:82:a0:50:fc:8f:7b:6b:90:3c:b8:8f:39:
                    61:96:c4:71:5a:a0:68:fa:a9:79:67:b8:f7:72:d7:
                    41:59:41:ac:11:5a:b3:4e:3a:7d:48:3c:45:9e:df:
                    7a:47:34:b0:b4:a1:95:62:60:3f:62:df:f9:25:cd:
                    56:82:d2:bd:bd:a5:ee:71:fe:81:d1:1c:00:13:24:
                    65:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AD:BA:EB:AD:F5:05:1E:BA:AF:13:90:08:BA:3C:69:A3:60:8F:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5cee7666-127a-30d1-ae5d-80205a021929.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.203.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:2a:bb:72:49:f8:97:25:cf:54:92:f3:75:c9:67:79:61:8b:
         c4:48:68:ac:81:23:66:e3:10:a9:15:bd:a6:5f:85:f8:b1:f5:
         1f:10:f0:d7:83:db:c5:a9:8c:e3:7e:aa:b9:24:bb:ed:3c:be:
         9d:38:b7:0a:9e:2f:06:f6:2d:82:cb:04:f3:44:9e:27:41:5f:
         df:08:80:48:f2:0b:b3:2f:94:57:19:21:c7:9f:53:43:04:ab:
         8d:aa:64:2b:84:e1:a9:fc:59:33:2e:3a:ad:a2:77:cc:64:6c:
         5f:1d:75:a2:2e:0b:17:73:02:49:80:83:b2:66:6d:96:21:ad:
         36:04:00:0d:14:26:61:29:e3:bb:70:b7:d1:db:bb:76:70:ee:
         61:ed:71:d4:55:5e:19:0d:0e:15:0f:d8:ec:4d:10:97:fa:af:
         f9:88:5c:bc:68:9f:23:4c:9c:35:e0:23:a2:6e:8e:f6:be:d8:
         66:29:48:46:dd:23:d4:d6:39:90:df:3b:16:3c:eb:cd:a7:22:
         e6:62:17:99:33:4a:35:42:8d:fb:15:c2:2e:bc:d4:9b:79:96:
         c5:c9:ca:28:00:b3:df:2a:07:fe:85:4d:af:ba:32:1c:89:b2:
         c4:9b:b2:54:57:4e:9c:24:58:81:05:11:47:39:e7:a6:da:83:
         c4:73:df:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pdHpLt49bmJHQIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
NTkxMmY4ODUtZmIwMy00MDA5LWIxNzItYTViNDZkMTdjNzM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tDCpGj7tRvQMyqdN1DFGwwENMPa4l825w8m
kNaikLmr8DfRcsqgeav/y+SPg6v5G/jNimAw1yIOrEWfGxdl8ZLElZljvThHPyZL
J+vRvhzDGwNY6AadxHWzjZLoENyWbWuuoUE8xNgaG5PeRHgvJ+g5ht7ywR0DFRen
Ld3VdMRroZ1rfeSwlt7HT4bM9LsCkJwWj0NGutOKLvX1V9Rqi3cKmkPR/mdpKs14
UHvSZfu4wHnXenyCoFD8j3trkDy4jzlhlsRxWqBo+ql5Z7j3ctdBWUGsEVqzTjp9
SDxFnt96RzSwtKGVYmA/Yt/5Jc1WgtK9vaXucf6B0RwAEyRlrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFOtuuut9QUeuq8TkAi6PGmjYI9mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWNlZTc2NjYtMTI3YS0z
MGQxLWFlNWQtODAyMDVhMDIxOTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR8vwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFIqu3JJ+Jclz1SS83XJZ3lhi8RIaKyBI2bjEKkVvaZfhfix9R8Q8NeD
28WpjON+qrkku+08vp04twqeLwb2LYLLBPNEnidBX98IgEjyC7MvlFcZIcefU0ME
q42qZCuE4an8WTMuOq2id8xkbF8ddaIuCxdzAkmAg7JmbZYhrTYEAA0UJmEp47tw
t9Hbu3Zw7mHtcdRVXhkNDhUP2OxNEJf6r/mIXLxonyNMnDXgI6Jujva+2GYpSEbd
I9TWOZDfOxY8682nIuZiF5kzSjVCjfsVwi681Jt5lsXJyigAs98qB/6FTa+6MhyJ
ssSbslRXTpwkWIEFEUc556bag8Rz37Q=
-----END CERTIFICATE-----