Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66aef909-25fc-3604-be02-3b58ec134d45.roa
File:                     66aef909-25fc-3604-be02-3b58ec134d45.roa (raw, json)
Hash identifier:          hntiaYThSVdT1bcOo3LrPa1ezJ9fe+tMWr/Y+wMhIfA=
Subject key identifier:   7B:FC:13:16:87:96:EA:AD:CE:9C:5B:C6:58:C8:78:91:00:95:FF:6E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858493C0945BA694ACC1B4EE83A80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66aef909-25fc-3604-be02-3b58ec134d45.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     62240
IP address blocks:        23.26.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:45:ba:69:4a:cc:1b:4e:e8:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=2025a27d-d6dd-465b-a2db-8d355aa8acea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5d:e8:41:71:f5:74:f6:d5:19:b6:b5:05:24:
                    7b:35:3c:c1:d9:43:4c:38:4a:79:0d:ad:12:e0:6f:
                    f7:39:ed:b4:61:c4:d5:73:48:ce:f7:a0:ad:9e:45:
                    23:e4:b2:51:05:dc:94:5c:89:9c:d2:14:2f:4b:56:
                    17:24:01:a2:e4:6e:00:7f:91:18:4d:d7:04:69:f9:
                    0c:2f:fe:77:c8:e1:00:9d:1e:30:50:75:f6:8d:5d:
                    01:24:90:1a:de:7b:3a:62:3d:51:42:bb:84:7d:cb:
                    47:71:5e:57:ed:6f:2e:81:a1:54:5e:16:a8:e9:c7:
                    66:6c:84:27:5b:78:77:8d:0e:ab:8a:65:12:50:fe:
                    bd:d4:d1:56:4a:9e:f6:c8:9b:b2:6b:33:4a:86:94:
                    f5:2e:4f:f7:f2:af:11:af:c9:d5:7c:f3:ba:6b:1e:
                    b4:60:91:a3:dc:32:21:0a:19:03:3e:75:ca:7f:89:
                    dc:49:11:7d:f1:a1:d5:88:a4:6c:b5:64:cd:43:92:
                    a9:72:e9:95:68:96:8f:3d:10:58:0f:4e:12:c4:2c:
                    8a:62:b8:b0:4f:66:6b:77:73:ee:47:c4:db:c1:d2:
                    bd:85:cc:08:6a:96:82:ab:b0:c0:90:34:9f:b3:43:
                    0e:40:00:07:dc:41:b9:68:db:b8:49:d3:f6:27:7b:
                    66:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FC:13:16:87:96:EA:AD:CE:9C:5B:C6:58:C8:78:91:00:95:FF:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66aef909-25fc-3604-be02-3b58ec134d45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:0a:cd:ad:43:b5:ef:19:c1:ff:e3:7c:b2:29:d0:b8:a1:67:
         c5:0f:10:90:eb:2a:4b:0d:35:da:ff:87:86:cc:5c:99:b1:58:
         3b:7f:3f:69:dc:fd:18:a5:16:92:60:6b:55:53:6b:bc:c0:2e:
         8b:39:8f:0e:a9:71:00:e6:2a:cf:49:78:7f:bd:11:b1:21:0b:
         da:d4:f8:2f:7f:a1:d7:bd:66:d8:cc:20:13:cf:b1:6c:ad:37:
         2c:70:35:6d:e3:70:5f:25:b6:f7:af:22:33:52:7d:6b:9e:a3:
         76:80:37:b0:f4:e8:f0:e1:cd:c5:84:c2:3e:b5:4b:3a:68:98:
         80:2f:d1:6a:39:77:08:31:0a:fb:77:e6:b2:7a:07:16:91:4a:
         93:24:8d:4b:e6:7c:c7:e3:8f:6f:ec:1f:b7:32:a6:ca:80:be:
         2a:1d:2a:4c:40:02:24:dd:67:4c:74:be:0e:25:17:9a:8e:4b:
         e4:98:64:75:5e:0b:ee:aa:dd:cc:17:c0:83:13:0b:37:04:46:
         63:81:a9:41:66:68:23:6c:96:e1:d2:b6:70:65:49:9b:2e:c1:
         48:01:72:72:f6:78:e4:22:c4:63:dc:d3:19:d7:8d:d4:fe:30:
         2b:d0:64:12:ae:87:65:6e:ca:7c:6b:6e:de:9c:ba:c1:17:5d:
         10:9b:d8:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CUW6aUrMG07oOoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk
MjAyNWEyN2QtZDZkZC00NjViLWEyZGItOGQzNTVhYThhY2VhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll3oQXH1dPbVGba1BSR7NTzB2UNMOEp5Da0S
4G/3Oe20YcTVc0jO96CtnkUj5LJRBdyUXImc0hQvS1YXJAGi5G4Af5EYTdcEafkM
L/53yOEAnR4wUHX2jV0BJJAa3ns6Yj1RQruEfctHcV5X7W8ugaFUXhao6cdmbIQn
W3h3jQ6rimUSUP691NFWSp72yJuyazNKhpT1Lk/38q8Rr8nVfPO6ax60YJGj3DIh
ChkDPnXKf4ncSRF98aHViKRstWTNQ5KpcumVaJaPPRBYD04SxCyKYriwT2Zrd3Pu
R8TbwdK9hcwIapaCq7DAkDSfs0MOQAAH3EG5aNu4SdP2J3tmSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHv8ExaHluqtzpxbxljIeJEAlf9uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjZhZWY5MDktMjVmYy0z
NjA0LWJlMDItM2I1OGVjMTM0ZDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxriMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGwKza1Dte8Zwf/jfLIp0LihZ8UPEJDrKksNNdr/h4bMXJmxWDt/P2nc
/RilFpJga1VTa7zALos5jw6pcQDmKs9JeH+9EbEhC9rU+C9/ode9ZtjMIBPPsWyt
NyxwNW3jcF8ltvevIjNSfWueo3aAN7D06PDhzcWEwj61SzpomIAv0Wo5dwgxCvt3
5rJ6BxaRSpMkjUvmfMfjj2/sH7cypsqAviodKkxAAiTdZ0x0vg4lF5qOS+SYZHVe
C+6q3cwXwIMTCzcERmOBqUFmaCNsluHStnBlSZsuwUgBcnL2eOQixGPc0xnXjdT+
MCvQZBKuh2Vuynxrbt6cusEXXRCb2NQ=
-----END CERTIFICATE-----