Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed7c6624-db80-3151-b7b4-b858a854448f.roa
File:                     ed7c6624-db80-3151-b7b4-b858a854448f.roa (raw, json)
Hash identifier:          S0hYmjiDaXfDja3zhJfSVUTFYgB8DBOjDyMJMRlPoCE=
Subject key identifier:   CA:FF:BC:EE:22:CA:BF:F7:C6:26:31:62:36:1E:5D:E9:92:62:49:3C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA4DF28D9CF5522A02C7DB0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed7c6624-db80-3151-b7b4-b858a854448f.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33490
IP address blocks:        96.216.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:df:28:d9:cf:55:22:a0:2c:7d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=a38c09e5-6222-4666-971c-f3d828104a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:22:67:b4:5a:60:8f:3f:21:99:ed:cb:14:40:
                    dc:a9:cb:ee:fa:8e:4f:ad:da:1c:7a:bd:0c:86:89:
                    0a:79:9d:06:ef:e4:91:16:0d:17:28:6f:97:7b:27:
                    a4:61:9e:75:d4:bc:f4:09:30:6c:8c:84:b6:7c:1f:
                    a7:2e:34:bf:68:5d:c7:4c:01:10:c4:59:70:62:90:
                    e2:43:1b:a6:3b:95:d0:e1:16:a4:e7:2b:6b:5a:02:
                    57:e9:21:3d:f0:7b:22:eb:f8:77:ed:38:56:43:0d:
                    c6:2c:14:de:28:4b:67:6d:5c:89:a8:82:44:f8:df:
                    07:e4:3c:16:bd:f6:05:fc:1a:26:c7:0d:7b:53:a0:
                    0b:6e:43:e5:3b:85:3f:b5:ae:f8:c5:0b:48:70:71:
                    a0:f4:08:3d:14:b5:e9:2d:1a:0c:2a:59:7f:9a:54:
                    5d:e8:0f:7e:93:e3:b6:ca:af:9d:94:a6:a6:c2:99:
                    62:44:06:cf:59:38:19:a0:10:2c:ed:fd:b8:64:6f:
                    ea:fb:49:ce:2b:b0:7a:3f:b3:2f:71:b7:40:c6:be:
                    43:84:8e:16:21:15:df:69:31:eb:4d:20:af:f4:91:
                    57:0a:ee:99:09:f8:4f:d6:fe:10:84:33:e1:e4:ff:
                    63:22:5e:65:8b:e2:55:ef:d3:a2:5d:b5:62:1f:fe:
                    0b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FF:BC:EE:22:CA:BF:F7:C6:26:31:62:36:1E:5D:E9:92:62:49:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed7c6624-db80-3151-b7b4-b858a854448f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.216.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:de:c3:03:4d:da:20:1f:26:89:89:8d:3b:94:64:e7:19:67:
         d9:9a:a2:17:12:59:4d:48:2e:e0:c6:12:cc:e7:ad:8f:6e:09:
         7e:96:75:ec:61:b5:23:aa:d7:c7:87:1b:6e:3a:fd:14:e4:12:
         41:c4:d6:ec:5c:03:6d:f4:4b:86:1c:4b:fd:56:7d:c1:69:24:
         3d:f0:fd:f9:c8:94:85:b9:aa:48:68:4c:eb:87:fe:73:d9:40:
         e0:ce:b6:76:5b:55:96:7e:fe:88:94:e2:b6:be:cd:c7:37:c9:
         86:96:40:80:5a:d4:f4:37:eb:2a:38:cc:fe:8c:a0:eb:99:63:
         29:b8:4a:66:ab:1f:e2:a4:b8:4c:0f:53:95:14:bb:92:82:c3:
         63:02:79:5e:8a:63:da:97:84:62:22:dd:ba:0a:e2:21:59:0f:
         00:dc:2f:91:98:c6:63:70:6a:45:a3:80:23:c8:3a:76:3a:6b:
         21:35:d1:80:c8:1c:7c:d9:8a:6a:f6:3b:82:38:e3:2f:98:fc:
         76:f7:d4:4c:a0:07:1e:de:55:13:5c:c4:4d:79:b4:8b:83:76:
         ae:9f:a1:96:5b:39:80:08:2b:76:0e:80:a4:86:7c:a7:2a:26:
         bf:7c:1d:d4:e6:bd:d6:be:47:75:4c:8f:29:dc:44:e7:17:9f:
         7b:7c:5e:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pN8o2c9VIqAsfbAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
YTM4YzA5ZTUtNjIyMi00NjY2LTk3MWMtZjNkODI4MTA0YTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyJntFpgjz8hme3LFEDcqcvu+o5Prdocer0M
hokKeZ0G7+SRFg0XKG+XeyekYZ511Lz0CTBsjIS2fB+nLjS/aF3HTAEQxFlwYpDi
QxumO5XQ4Rak5ytrWgJX6SE98Hsi6/h37ThWQw3GLBTeKEtnbVyJqIJE+N8H5DwW
vfYF/Bomxw17U6ALbkPlO4U/ta74xQtIcHGg9Ag9FLXpLRoMKll/mlRd6A9+k+O2
yq+dlKamwpliRAbPWTgZoBAs7f24ZG/q+0nOK7B6P7MvcbdAxr5DhI4WIRXfaTHr
TSCv9JFXCu6ZCfhP1v4QhDPh5P9jIl5li+JV79OiXbViH/4LKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMr/vO4iyr/3xiYxYjYeXemSYkk8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWQ3YzY2MjQtZGI4MC0z
MTUxLWI3YjQtYjg1OGE4NTQ0NDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYNg8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHewwNN2iAfJomJjTuUZOcZZ9maohcSWU1ILuDGEsznrY9uCX6Wdexh
tSOq18eHG246/RTkEkHE1uxcA230S4YcS/1WfcFpJD3w/fnIlIW5qkhoTOuH/nPZ
QODOtnZbVZZ+/oiU4ra+zcc3yYaWQIBa1PQ36yo4zP6MoOuZYym4SmarH+KkuEwP
U5UUu5KCw2MCeV6KY9qXhGIi3boK4iFZDwDcL5GYxmNwakWjgCPIOnY6ayE10YDI
HHzZimr2O4I44y+Y/Hb31EygBx7eVRNcxE15tIuDdq6foZZbOYAIK3YOgKSGfKcq
Jr98HdTmvda+R3VMjyncROcXn3t8Xuk=
-----END CERTIFICATE-----