Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60bc16e0-1d70-34ef-b623-5674cc63bb53.roa
File:                     60bc16e0-1d70-34ef-b623-5674cc63bb53.roa (raw, json)
Hash identifier:          Minsh+40WL0hr+9ppPukan1pXdJnWOgalAmAkP/iOqE=
Subject key identifier:   AB:90:33:E2:20:12:9E:3F:55:A1:5A:4E:A1:00:17:00:66:2F:9E:0E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA674F218510B9BD4CBD480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60bc16e0-1d70-34ef-b623-5674cc63bb53.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        24.118.172.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:74:f2:18:51:0b:9b:d4:cb:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=f5a7f52c-0f33-4c9f-8b9e-d960aa9903b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:18:87:a5:eb:e8:0a:6b:2a:ca:4d:52:61:7f:
                    21:0b:e0:4f:11:8a:a0:c6:60:b9:13:01:25:5e:d5:
                    76:d9:c2:dc:2d:36:2f:26:a9:6a:95:5c:db:62:27:
                    20:80:3c:6c:01:d2:c2:15:8d:16:9b:83:24:98:0d:
                    8d:af:c6:a0:58:91:80:17:2e:0d:f9:44:44:05:17:
                    7f:7a:b9:4b:bd:4b:0b:22:c9:9b:d6:9c:1d:bc:71:
                    d9:d0:45:36:f7:1b:83:05:2e:7b:99:c1:ed:79:32:
                    6b:b1:52:74:11:27:af:a6:05:76:72:d0:64:b9:23:
                    b3:8c:d8:dd:37:5e:b0:49:b6:1a:8f:c8:89:f4:a2:
                    9f:ba:92:87:c2:f2:86:ab:ea:9e:82:24:81:81:45:
                    a6:99:ec:7c:a3:a3:1c:10:44:6a:66:5f:76:f3:86:
                    66:2d:bf:18:b0:13:05:a2:c9:0e:68:5d:5d:c7:61:
                    b3:5b:88:a7:e9:8a:12:1a:b5:a3:9c:a4:23:e2:3c:
                    a9:7d:cf:16:84:67:fe:76:80:b5:32:39:9a:75:e0:
                    58:8a:68:97:ef:11:dd:76:5c:58:e9:62:78:ae:57:
                    01:f0:d1:3c:6e:4f:2c:9a:df:0c:87:b8:61:5f:19:
                    2b:be:98:12:db:c5:81:8e:ee:61:72:b1:96:1f:1a:
                    88:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:90:33:E2:20:12:9E:3F:55:A1:5A:4E:A1:00:17:00:66:2F:9E:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60bc16e0-1d70-34ef-b623-5674cc63bb53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.118.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:22:07:55:3e:a4:d9:2a:62:95:6e:14:0c:6c:af:43:a2:24:
         45:6d:56:ab:a2:9e:dd:34:7a:e4:e3:cd:9b:4e:90:45:56:1f:
         93:b5:59:0a:12:90:f3:b4:05:74:ad:53:a0:16:ec:2e:80:33:
         06:88:dd:c0:20:4e:62:ce:56:60:1b:0b:a1:38:ec:cb:e4:16:
         1a:43:db:a0:13:39:20:54:7c:ad:e5:5b:2d:6f:86:75:20:8c:
         06:6c:08:79:11:66:69:c2:2e:87:bf:96:b0:94:b6:52:22:5a:
         a0:98:b9:49:ce:82:06:2c:74:0c:cb:c7:bd:06:37:6b:c0:51:
         fe:81:b1:c7:b5:c2:82:62:8f:aa:d1:c9:6d:fe:a6:82:29:c2:
         7c:72:5b:72:dc:6a:05:ed:dd:15:c3:b0:14:b7:73:9e:ce:54:
         4b:d6:71:71:bd:ce:12:37:62:89:e7:2e:19:ef:3c:61:bd:27:
         07:86:3a:ca:0f:2a:87:f6:bb:12:cf:be:0d:b9:5f:8c:58:b2:
         a9:0c:cb:ea:e0:2a:86:9b:a8:7c:a2:fc:d0:75:d7:c8:4c:ad:
         a7:4d:d6:0e:90:da:e7:a3:89:8a:4d:c6:91:36:57:2b:55:87:
         b8:45:4b:62:a3:8a:d4:57:46:e4:61:77:bc:58:9d:a8:f9:60:
         00:41:c3:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pnTyGFELm9TL1IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
ZjVhN2Y1MmMtMGYzMy00YzlmLThiOWUtZDk2MGFhOTkwM2I4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhiHpevoCmsqyk1SYX8hC+BPEYqgxmC5EwEl
XtV22cLcLTYvJqlqlVzbYicggDxsAdLCFY0Wm4MkmA2Nr8agWJGAFy4N+UREBRd/
erlLvUsLIsmb1pwdvHHZ0EU29xuDBS57mcHteTJrsVJ0ESevpgV2ctBkuSOzjNjd
N16wSbYaj8iJ9KKfupKHwvKGq+qegiSBgUWmmex8o6McEERqZl9284ZmLb8YsBMF
oskOaF1dx2GzW4in6YoSGrWjnKQj4jypfc8WhGf+doC1MjmadeBYimiX7xHddlxY
6WJ4rlcB8NE8bk8smt8Mh7hhXxkrvpgS28WBju5hcrGWHxqIzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKuQM+IgEp4/VaFaTqEAFwBmL54OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjBiYzE2ZTAtMWQ3MC0z
NGVmLWI2MjMtNTY3NGNjNjNiYjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGHasMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANciB1U+pNkqYpVuFAxsr0OiJEVtVquint00euTjzZtOkEVWH5O1WQoS
kPO0BXStU6AW7C6AMwaI3cAgTmLOVmAbC6E47MvkFhpD26ATOSBUfK3lWy1vhnUg
jAZsCHkRZmnCLoe/lrCUtlIiWqCYuUnOggYsdAzLx70GN2vAUf6Bsce1woJij6rR
yW3+poIpwnxyW3LcagXt3RXDsBS3c57OVEvWcXG9zhI3YonnLhnvPGG9JweGOsoP
Kof2uxLPvg25X4xYsqkMy+rgKoabqHyi/NB118hMradN1g6Q2uejiYpNxpE2VytV
h7hFS2KjitRXRuRhd7xYnaj5YABBw1Q=
-----END CERTIFICATE-----