Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9eae02e2-43e2-3334-88c1-7150bc8e6f71.roa
File:                     9eae02e2-43e2-3334-88c1-7150bc8e6f71.roa (raw, json)
Hash identifier:          Iz7Wen+J29U8njNtHt5sk/qDMxKzmaJKPejg+QQOiWE=
Subject key identifier:   12:08:71:BF:02:A8:1C:04:EE:AD:48:D8:CB:45:4E:FC:56:89:F6:BD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA61ADF4AA99F28280C7C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9eae02e2-43e2-3334-88c1-7150bc8e6f71.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22258
IP address blocks:        96.108.28.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:1a:df:4a:a9:9f:28:28:0c:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=7a19ed96-d08d-4686-915e-4fc21e9087fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:96:3b:cd:87:ea:9b:84:9c:ca:34:ec:7c:59:
                    84:10:3d:ce:04:b7:84:d7:70:17:2c:97:af:65:fe:
                    45:42:a4:fd:a2:e3:e3:0e:10:25:6f:35:7b:96:e1:
                    b1:11:4b:59:f0:40:10:26:a1:6a:98:f7:19:31:25:
                    1d:5b:89:11:e7:29:39:91:d9:d5:be:69:7c:19:64:
                    e2:b5:37:ab:4d:c9:41:e5:76:81:63:71:cb:76:9e:
                    d1:0d:b2:63:e4:be:08:67:2b:e7:5f:70:71:ea:e5:
                    78:73:cb:9f:d2:a3:d9:35:10:58:75:a7:5d:0c:da:
                    e7:c2:9f:18:28:2c:fa:20:b1:4a:25:c8:32:62:74:
                    2f:69:33:0f:1e:99:ef:9f:cb:dd:79:de:1d:2d:65:
                    72:9f:af:43:74:12:5d:60:67:2c:c8:df:18:a4:18:
                    10:57:0f:1f:1e:b1:be:bd:99:47:a1:3c:ed:62:6f:
                    89:01:ad:31:ee:fe:97:20:d5:c9:d3:4a:6e:42:e7:
                    49:13:3a:b8:11:ac:86:98:ed:70:a5:35:05:44:60:
                    8f:53:22:a9:3a:bb:a8:d7:a9:64:6b:79:97:f1:98:
                    9c:19:e2:d2:ab:d0:49:0f:d4:6f:5e:c0:f9:65:87:
                    15:d2:21:28:53:02:63:0b:9c:47:1c:fc:bf:b5:b9:
                    2b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:08:71:BF:02:A8:1C:04:EE:AD:48:D8:CB:45:4E:FC:56:89:F6:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9eae02e2-43e2-3334-88c1-7150bc8e6f71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.108.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:fc:80:6e:34:e0:df:34:ed:04:4c:77:9b:95:8a:9a:ce:ff:
         21:f1:40:ae:3f:ae:69:5f:a4:f5:a5:e5:b7:98:d2:e4:75:b8:
         bb:59:cb:fa:f9:c0:c0:25:a7:3f:4a:fa:b3:63:a9:c5:85:17:
         a7:e3:1c:ff:3a:cd:12:4e:80:73:14:17:8b:de:8f:6a:06:8b:
         75:99:63:5c:75:bb:1f:e5:9a:dc:33:3b:64:8a:63:b3:4e:a0:
         e9:a5:cb:61:22:a1:71:43:f0:db:9a:60:cd:18:12:56:64:5a:
         db:73:49:ce:4c:6b:4c:29:4e:4e:f5:9b:70:58:d5:8c:af:e8:
         74:3a:5e:eb:ca:92:20:92:38:28:04:34:4b:c5:d9:0b:f3:6a:
         3f:fd:68:d0:aa:f2:ea:43:78:d9:e0:30:cd:90:a4:2f:f8:e5:
         f6:a1:4f:88:5c:20:1b:78:91:37:f4:d4:db:13:12:dd:7a:fc:
         bb:ec:de:cc:8e:1c:3c:d5:74:4b:17:c9:58:85:05:0e:64:e6:
         a1:2c:ba:61:85:ec:22:57:e9:be:b0:86:21:30:62:36:d4:08:
         03:73:92:df:36:ca:58:0e:7c:56:1d:6d:08:38:af:fb:97:42:
         cf:96:ce:1a:06:0d:10:e0:21:a6:2c:75:44:57:e4:83:eb:ea:
         38:8d:63:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9phrfSqmfKCgMfIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
N2ExOWVkOTYtZDA4ZC00Njg2LTkxNWUtNGZjMjFlOTA4N2ZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZY7zYfqm4ScyjTsfFmEED3OBLeE13AXLJev
Zf5FQqT9ouPjDhAlbzV7luGxEUtZ8EAQJqFqmPcZMSUdW4kR5yk5kdnVvml8GWTi
tTerTclB5XaBY3HLdp7RDbJj5L4IZyvnX3Bx6uV4c8uf0qPZNRBYdaddDNrnwp8Y
KCz6ILFKJcgyYnQvaTMPHpnvn8vded4dLWVyn69DdBJdYGcsyN8YpBgQVw8fHrG+
vZlHoTztYm+JAa0x7v6XINXJ00puQudJEzq4EayGmO1wpTUFRGCPUyKpOruo16lk
a3mX8ZicGeLSq9BJD9RvXsD5ZYcV0iEoUwJjC5xHHPy/tbkrdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBIIcb8CqBwE7q1I2MtFTvxWifa9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWVhZTAyZTItNDNlMi0z
MzM0LTg4YzEtNzE1MGJjOGU2ZjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYGwcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKb8gG404N807QRMd5uViprO/yHxQK4/rmlfpPWl5beY0uR1uLtZy/r5
wMAlpz9K+rNjqcWFF6fjHP86zRJOgHMUF4vej2oGi3WZY1x1ux/lmtwzO2SKY7NO
oOmly2EioXFD8NuaYM0YElZkWttzSc5Ma0wpTk71m3BY1Yyv6HQ6XuvKkiCSOCgE
NEvF2Qvzaj/9aNCq8upDeNngMM2QpC/45fahT4hcIBt4kTf01NsTEt16/Lvs3syO
HDzVdEsXyViFBQ5k5qEsumGF7CJX6b6whiEwYjbUCANzkt82ylgOfFYdbQg4r/uX
Qs+WzhoGDRDgIaYsdURX5IPr6jiNY/w=
-----END CERTIFICATE-----