Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/12afb9f1-e653-3840-aa8c-a6b6c6358412.roa
File:                     12afb9f1-e653-3840-aa8c-a6b6c6358412.roa (raw, json)
Hash identifier:          ZBrXydYoBNIz32kxph8wAhbI3u8T93/ry2U2bk4Xleg=
Subject key identifier:   28:68:45:F4:AF:17:46:1B:C2:37:46:59:AF:E6:ED:FA:D7:96:43:95
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848BFEBD1E4383245B4A36C4E40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/12afb9f1-e653-3840-aa8c-a6b6c6358412.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     15169
IP address blocks:        104.134.240.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:d1:e4:38:32:45:b4:a3:6c:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=41689f0a-c26d-4406-8436-ad7aa9d51924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e7:85:79:7d:0a:c5:65:f2:fd:b0:17:67:5a:
                    a1:75:57:02:78:50:2c:b6:eb:a9:5b:9b:d7:b1:d8:
                    38:f3:56:23:f9:e1:93:02:1d:88:93:a3:e9:90:57:
                    be:09:80:87:ae:5d:2d:70:8c:49:dc:61:ac:5a:6e:
                    99:b2:3a:24:4d:05:76:71:90:cc:2a:f9:20:81:61:
                    38:4a:2d:86:57:02:cf:11:71:c7:47:fc:53:4f:a5:
                    4e:4a:ae:2b:99:e8:fb:ed:91:39:a7:7e:56:32:3d:
                    86:81:f0:c1:ff:53:dd:ee:da:9b:b0:0a:dd:a5:4a:
                    3b:7a:b7:8e:3f:43:d1:ab:14:b4:fb:4a:d3:b7:e3:
                    09:96:f2:14:a1:9e:2e:28:30:0c:8c:49:f1:de:fc:
                    f1:7b:bf:ae:fe:eb:68:9c:5c:f4:db:36:7d:58:0e:
                    60:e4:20:21:81:9c:2f:18:2d:cd:2e:9f:28:d1:18:
                    f0:aa:29:55:73:6f:80:0b:29:40:13:9a:51:e5:bd:
                    70:a3:0e:83:48:db:4d:ca:07:d8:8f:8c:bf:9f:98:
                    06:73:cb:99:e7:7c:9f:9e:c1:96:84:38:51:4c:14:
                    ae:dc:97:15:b2:c7:61:06:bd:a6:ff:e4:2b:b8:15:
                    50:81:f4:c1:1b:37:ee:01:a4:fc:f4:8a:a2:b9:ba:
                    c3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:68:45:F4:AF:17:46:1B:C2:37:46:59:AF:E6:ED:FA:D7:96:43:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/12afb9f1-e653-3840-aa8c-a6b6c6358412.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:1c:a2:c8:21:c3:11:1b:85:a7:00:ad:73:ad:d2:df:1e:6b:
         0e:ea:87:b5:99:4f:ae:75:3b:82:16:eb:56:2d:ac:44:b3:f5:
         3c:a0:5c:6b:b1:0b:59:88:8c:ab:7a:d7:fa:f4:5c:e5:b8:7d:
         fe:8b:fd:88:b2:ac:2d:88:d5:bf:65:b2:73:ba:35:54:5c:95:
         23:46:5f:d6:24:0f:83:e1:7b:12:fa:77:56:a3:aa:a9:59:24:
         c7:4f:a5:95:b2:e8:68:21:ea:cb:2c:f5:4a:3d:ad:91:55:2e:
         77:09:58:10:5c:1f:f1:b1:68:4e:ca:7b:02:24:be:d1:19:b0:
         b3:ac:23:56:e4:ca:7f:6b:7c:89:6d:cf:2d:5b:b7:fa:67:c1:
         a0:21:fa:9c:c6:cb:74:4c:21:89:0e:ec:b3:e5:54:7b:f9:ae:
         6e:f2:5d:82:d9:42:cc:ae:77:dd:2e:ae:2a:c7:00:ce:6f:b9:
         11:a9:79:a1:ec:3b:b8:14:f4:46:e4:eb:e8:b3:c1:df:a5:17:
         96:d1:1a:cb:0c:0c:ef:69:ca:ef:2b:12:9b:b2:30:b9:31:d9:
         44:82:3c:c0:bc:55:6c:07:4d:a0:67:41:ef:26:f1:63:99:b3:
         ed:6a:d0:07:4a:61:46:91:7f:54:03:44:c9:ba:77:77:ad:10:
         ca:1f:df:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69HkODJFtKNsTkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
NDE2ODlmMGEtYzI2ZC00NDA2LTg0MzYtYWQ3YWE5ZDUxOTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOeFeX0KxWXy/bAXZ1qhdVcCeFAstuupW5vX
sdg481Yj+eGTAh2Ik6PpkFe+CYCHrl0tcIxJ3GGsWm6ZsjokTQV2cZDMKvkggWE4
Si2GVwLPEXHHR/xTT6VOSq4rmej77ZE5p35WMj2GgfDB/1Pd7tqbsArdpUo7ereO
P0PRqxS0+0rTt+MJlvIUoZ4uKDAMjEnx3vzxe7+u/utonFz02zZ9WA5g5CAhgZwv
GC3NLp8o0RjwqilVc2+ACylAE5pR5b1wow6DSNtNygfYj4y/n5gGc8uZ53yfnsGW
hDhRTBSu3JcVssdhBr2m/+QruBVQgfTBGzfuAaT89IqiubrDVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFChoRfSvF0YbwjdGWa/m7frXlkOVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTJhZmI5ZjEtZTY1My0z
ODQwLWFhOGMtYTZiNmM2MzU4NDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIbwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKocosghwxEbhacArXOt0t8eaw7qh7WZT651O4IW61YtrESz9TygXGux
C1mIjKt61/r0XOW4ff6L/YiyrC2I1b9lsnO6NVRclSNGX9YkD4PhexL6d1ajqqlZ
JMdPpZWy6Ggh6sss9Uo9rZFVLncJWBBcH/GxaE7KewIkvtEZsLOsI1bkyn9rfIlt
zy1bt/pnwaAh+pzGy3RMIYkO7LPlVHv5rm7yXYLZQsyud90urirHAM5vuRGpeaHs
O7gU9Ebk6+izwd+lF5bRGssMDO9pyu8rEpuyMLkx2USCPMC8VWwHTaBnQe8m8WOZ
s+1q0AdKYUaRf1QDRMm6d3etEMof39s=
-----END CERTIFICATE-----