Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0682da1-d80d-38a1-a1e3-1835c82800f3.roa
File:                     a0682da1-d80d-38a1-a1e3-1835c82800f3.roa (raw, json)
Hash identifier:          Ks4TyG0drvMQW7UUv8Yp9+rGpjk03B7b7tBNpI46srk=
Subject key identifier:   E7:B5:85:70:44:89:27:16:18:58:A5:D8:76:E9:1E:5C:1D:40:56:FC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA642FAAABF19109B908300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0682da1-d80d-38a1-a1e3-1835c82800f3.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33652
IP address blocks:        162.148.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:42:fa:aa:bf:19:10:9b:90:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=ac1a3906-2bcc-4c2e-9ed7-cfddf8861678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:06:d9:4c:e4:df:26:4e:11:36:95:f9:40:b3:
                    de:51:96:54:dc:03:fb:24:b5:28:a2:9d:24:80:aa:
                    fb:07:6e:ed:97:5b:d1:53:de:61:b3:8b:cd:76:ab:
                    5e:e8:10:4f:b8:a6:da:37:1b:fb:70:40:72:21:9b:
                    c1:ca:68:0a:7d:97:f9:0d:af:b1:35:56:0a:cc:76:
                    7c:d7:5b:b0:82:fe:e2:72:4b:48:d2:84:ad:2c:d3:
                    aa:f0:18:b8:0a:a0:fd:15:94:d4:6f:40:9d:85:cb:
                    51:c2:51:34:e4:fc:30:44:83:e5:1b:db:82:7c:f1:
                    1c:38:e5:5f:ef:52:51:50:82:46:d8:1d:a6:ef:59:
                    1e:0d:4c:44:7c:b3:f3:a5:7d:2e:f4:f8:ba:f1:49:
                    ca:83:dc:34:48:f6:55:fa:a4:b3:44:44:44:c2:a3:
                    6a:80:9a:20:3a:57:0a:7e:45:ad:7e:1f:da:a2:66:
                    c9:49:ce:82:08:ce:f4:b7:aa:0b:40:1c:37:fc:8c:
                    c3:0b:36:1c:d5:be:97:1b:74:3d:26:bd:0e:c4:b8:
                    a8:01:59:4c:b9:ef:7b:7e:ed:03:11:18:fb:5f:f4:
                    8b:59:d8:fe:76:03:03:e8:e1:e4:d6:87:f2:ce:61:
                    54:d7:2a:6e:3d:f0:3f:86:1c:0b:88:53:48:6a:23:
                    84:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B5:85:70:44:89:27:16:18:58:A5:D8:76:E9:1E:5C:1D:40:56:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0682da1-d80d-38a1-a1e3-1835c82800f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.148.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:c0:26:68:2a:44:39:47:ab:b4:d9:54:9d:2e:22:dc:c6:a2:
         0f:86:05:02:27:7b:3a:8c:f5:c0:af:04:e4:33:b4:bd:93:87:
         de:bb:b6:96:12:0a:3c:b0:69:fd:8b:2e:72:e0:f3:2f:19:af:
         7b:34:ce:47:e6:e1:d7:0e:8a:83:42:d7:88:ac:db:40:49:51:
         0f:29:c4:15:43:d9:f6:75:bd:a7:db:0c:b5:3d:91:96:bc:75:
         e1:96:eb:8e:ee:99:d0:a4:91:95:b8:65:88:96:9b:ed:e3:66:
         26:0b:e3:7d:d7:fc:8c:4c:cb:41:62:c7:f7:e4:e7:83:98:81:
         11:36:b2:90:e7:c9:cb:3a:44:b4:4d:9f:cc:da:f5:d1:b6:db:
         3a:9f:93:92:8c:bf:3d:4d:87:cc:e2:e4:99:32:8b:7b:fa:aa:
         b6:51:15:24:6d:b9:c7:ba:50:35:6f:ab:cd:d1:46:69:21:24:
         43:d6:7a:16:50:2a:90:3c:3a:3e:d8:b9:6d:5b:b0:24:f1:ac:
         e1:56:0d:ad:fa:8b:14:2a:96:32:67:47:26:06:1e:51:cb:a6:
         30:65:a1:0f:5d:45:f3:20:1e:3c:ae:51:72:df:81:f8:46:b1:
         5b:8a:8f:61:ec:c7:11:2b:95:7b:8e:76:71:05:64:47:09:1a:
         4b:2e:d2:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pkL6qr8ZEJuQgwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
YWMxYTM5MDYtMmJjYy00YzJlLTllZDctY2ZkZGY4ODYxNjc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQbZTOTfJk4RNpX5QLPeUZZU3AP7JLUoop0k
gKr7B27tl1vRU95hs4vNdqte6BBPuKbaNxv7cEByIZvBymgKfZf5Da+xNVYKzHZ8
11uwgv7icktI0oStLNOq8Bi4CqD9FZTUb0CdhctRwlE05PwwRIPlG9uCfPEcOOVf
71JRUIJG2B2m71keDUxEfLPzpX0u9Pi68UnKg9w0SPZV+qSzREREwqNqgJogOlcK
fkWtfh/aombJSc6CCM70t6oLQBw3/IzDCzYc1b6XG3Q9Jr0OxLioAVlMue97fu0D
ERj7X/SLWdj+dgMD6OHk1ofyzmFU1ypuPfA/hhwLiFNIaiOE2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOe1hXBEiScWGFil2HbpHlwdQFb8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTA2ODJkYTEtZDgwZC0z
OGExLWExZTMtMTgzNWM4MjgwMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCopSsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALfAJmgqRDlHq7TZVJ0uItzGog+GBQInezqM9cCvBOQztL2Th967tpYS
Cjywaf2LLnLg8y8Zr3s0zkfm4dcOioNC14is20BJUQ8pxBVD2fZ1vafbDLU9kZa8
deGW647umdCkkZW4ZYiWm+3jZiYL433X/IxMy0Fix/fk54OYgRE2spDnycs6RLRN
n8za9dG22zqfk5KMvz1Nh8zi5Jkyi3v6qrZRFSRtuce6UDVvq83RRmkhJEPWehZQ
KpA8Oj7YuW1bsCTxrOFWDa36ixQqljJnRyYGHlHLpjBloQ9dRfMgHjyuUXLfgfhG
sVuKj2HsxxErlXuOdnEFZEcJGksu0kw=
-----END CERTIFICATE-----