Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/733dc9cb-8ef2-3e71-b3e7-65fad163b93e.roa
File:                     733dc9cb-8ef2-3e71-b3e7-65fad163b93e.roa (raw, json)
Hash identifier:          Iz5FAaHmRkUIm1xj67lpJegzN5U5qNS0MWxbykPherU=
Subject key identifier:   51:5B:3E:FF:E0:79:B0:BC:FF:26:93:41:D5:9B:25:72:D4:50:BA:0A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA526F193300CD472B85A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/733dc9cb-8ef2-3e71-b3e7-65fad163b93e.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        24.118.4.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:26:f1:93:30:0c:d4:72:b8:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=4d2b8e2f-da41-466e-8d81-bc023bffbbda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:02:65:b3:9c:77:45:e3:78:bf:84:07:53:42:
                    3f:1a:31:7f:00:ef:e5:8c:4b:dd:c7:c3:09:4b:5c:
                    d8:a2:e5:55:89:3b:11:5a:71:18:a0:7d:55:fc:5f:
                    5b:e1:17:a4:5a:eb:21:c6:f8:ef:34:e9:b5:17:59:
                    39:7e:c0:6b:b2:ec:16:a4:b2:78:97:2a:bf:06:02:
                    83:05:a2:75:ce:d1:1f:18:72:a6:27:d9:85:4b:e1:
                    8a:41:8c:58:4e:75:12:85:72:c8:28:a9:89:64:90:
                    99:03:2d:a4:02:f6:a2:98:5e:c9:6e:fd:cf:e7:56:
                    9a:06:2d:b4:b0:a1:6e:56:e9:7b:57:a8:a7:95:47:
                    bb:9c:ff:60:9b:f4:69:c2:6b:a8:ac:43:c9:11:9a:
                    54:a9:d6:1a:e1:ed:2d:3c:e9:eb:bb:44:8c:7a:99:
                    bf:ee:9e:e7:62:a9:b5:d9:3c:de:ef:bf:66:8f:50:
                    8c:a8:13:ca:8d:39:37:8a:03:12:01:7b:6e:4f:b9:
                    5f:ee:2b:b5:ee:b4:54:60:25:44:46:ff:cb:7a:b1:
                    10:73:58:49:4a:fb:c2:60:f4:02:de:05:aa:49:d3:
                    28:03:2b:44:16:5c:17:5a:e1:ea:8b:62:c9:e8:33:
                    1d:d9:22:2b:49:f7:b9:b9:ca:d3:76:a2:3d:72:27:
                    47:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5B:3E:FF:E0:79:B0:BC:FF:26:93:41:D5:9B:25:72:D4:50:BA:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/733dc9cb-8ef2-3e71-b3e7-65fad163b93e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.118.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:3e:d9:94:60:97:90:61:8d:9e:ba:09:77:28:2b:d0:e4:6c:
         78:ed:63:9f:bd:25:54:62:67:95:26:60:79:78:e3:83:65:a4:
         45:cc:db:ef:fd:01:a5:93:da:54:87:ca:5d:e8:25:ef:11:3e:
         0d:18:d9:18:e9:15:8d:a5:5d:53:0c:30:e7:b0:8f:05:a1:04:
         e6:8a:c9:19:f6:1b:fc:7a:85:0d:86:b6:dc:d2:1f:f7:c4:e3:
         87:d3:6b:b1:6b:d9:f0:a4:d0:22:d1:18:ff:4b:28:63:ee:44:
         8e:50:db:12:b8:09:f8:54:70:2c:f5:a2:c2:d5:01:19:cb:54:
         71:3a:72:dc:f8:1f:f2:02:0d:3a:2d:52:4a:9a:a4:1f:ec:d3:
         74:ac:10:19:07:17:7f:1b:7c:f6:37:ae:46:77:f0:81:24:99:
         42:37:96:8a:d9:ab:e5:8d:39:d7:52:47:34:2d:bd:5b:1b:66:
         51:05:4f:92:dc:6b:f5:9c:95:7e:3c:8e:32:95:95:05:ef:98:
         05:2a:a6:f9:f4:d3:dc:9b:69:de:04:77:86:be:14:39:97:d8:
         8f:0a:a3:46:bf:9b:38:be:47:cc:08:75:92:54:eb:a9:29:b7:
         51:9b:45:1b:d5:aa:0f:14:66:ff:dd:a0:0a:3c:0c:d0:cc:f0:
         71:43:19:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pSbxkzAM1HK4WoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
NGQyYjhlMmYtZGE0MS00NjZlLThkODEtYmMwMjNiZmZiYmRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAJls5x3ReN4v4QHU0I/GjF/AO/ljEvdx8MJ
S1zYouVViTsRWnEYoH1V/F9b4RekWushxvjvNOm1F1k5fsBrsuwWpLJ4lyq/BgKD
BaJ1ztEfGHKmJ9mFS+GKQYxYTnUShXLIKKmJZJCZAy2kAvaimF7Jbv3P51aaBi20
sKFuVul7V6inlUe7nP9gm/RpwmuorEPJEZpUqdYa4e0tPOnru0SMepm/7p7nYqm1
2Tze779mj1CMqBPKjTk3igMSAXtuT7lf7iu17rRUYCVERv/LerEQc1hJSvvCYPQC
3gWqSdMoAytEFlwXWuHqi2LJ6DMd2SIrSfe5ucrTdqI9cidHvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFFbPv/gebC8/yaTQdWbJXLUULoKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzMzZGM5Y2ItOGVmMi0z
ZTcxLWIzZTctNjVmYWQxNjNiOTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGHYEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFs+2ZRgl5BhjZ66CXcoK9DkbHjtY5+9JVRiZ5UmYHl444NlpEXM2+/9
AaWT2lSHyl3oJe8RPg0Y2RjpFY2lXVMMMOewjwWhBOaKyRn2G/x6hQ2GttzSH/fE
44fTa7Fr2fCk0CLRGP9LKGPuRI5Q2xK4CfhUcCz1osLVARnLVHE6ctz4H/ICDTot
UkqapB/s03SsEBkHF38bfPY3rkZ38IEkmUI3lorZq+WNOddSRzQtvVsbZlEFT5Lc
a/WclX48jjKVlQXvmAUqpvn009ybad4Ed4a+FDmX2I8Ko0a/mzi+R8wIdZJU66kp
t1GbRRvVqg8UZv/doAo8DNDM8HFDGXI=
-----END CERTIFICATE-----