Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/39d05664-addf-360b-a99c-36ec6279d45b.roa
File:                     39d05664-addf-360b-a99c-36ec6279d45b.roa (raw, json)
Hash identifier:          1SmOR9cusPf0Rr2cZRwM11CZ8aw51nOtqPS3VC2S9IQ=
Subject key identifier:   16:9D:87:27:9C:E4:B0:3D:23:1F:7E:C6:95:9F:5A:B4:42:8D:68:EA
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0F5AF496E926A5794B680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/39d05664-addf-360b-a99c-36ec6279d45b.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     41264
IP address blocks:        104.133.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:f5:af:49:6e:92:6a:57:94:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=27cbbaab-2424-46a6-9649-933d53bb30bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:39:59:6b:36:9d:f3:24:2a:12:d2:94:b4:
                    94:37:4a:c4:43:b5:05:db:fb:8a:ad:28:96:8c:bf:
                    0c:26:8d:8d:4a:59:c0:ed:9c:c9:ec:0e:a7:07:1e:
                    d2:1a:b8:df:17:fe:3b:da:c1:bb:cc:86:8b:5f:bb:
                    01:22:4b:bc:a6:36:12:aa:cf:98:a3:67:02:a3:28:
                    22:d9:f9:f3:30:a6:76:84:51:7d:2a:b0:05:f5:8c:
                    70:39:37:75:15:bf:af:c0:82:47:9e:33:ab:9b:04:
                    db:0a:76:45:32:2c:d1:08:8d:b0:c1:3f:0f:27:0e:
                    19:99:32:8c:48:b8:4f:a4:39:6c:66:9f:ca:12:42:
                    7d:9a:88:df:12:e9:07:f5:e6:f9:be:f2:af:08:18:
                    37:f0:61:bd:13:a4:74:18:2c:b0:15:8b:4e:31:36:
                    99:81:0f:31:80:df:5a:54:5d:a7:c5:1c:d2:8f:a3:
                    7d:0e:91:7e:ec:0f:95:e4:3d:25:56:2e:8c:f0:e9:
                    ad:c7:c9:af:43:12:77:e7:d9:c4:ff:74:2a:88:9c:
                    44:49:54:dd:7f:fe:55:b2:b7:1b:41:d9:77:f9:2e:
                    ca:6c:71:93:e6:e4:35:ff:92:08:55:60:eb:89:e2:
                    24:a4:50:26:02:36:fb:cb:5f:6f:38:0c:fe:29:72:
                    8c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9D:87:27:9C:E4:B0:3D:23:1F:7E:C6:95:9F:5A:B4:42:8D:68:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/39d05664-addf-360b-a99c-36ec6279d45b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:14:9b:4a:ab:eb:b3:f1:b3:96:55:6b:29:7a:10:26:91:af:
         57:7c:b2:44:0e:7a:b5:ac:20:fa:19:a4:54:db:ee:dc:04:cc:
         b3:f5:48:b3:e4:07:95:8c:3d:de:c2:cd:89:1d:a4:23:be:54:
         76:a2:c8:2a:7a:15:8b:dc:5c:2b:4b:81:21:8a:33:ac:c4:69:
         a5:f5:12:45:7d:bb:c4:f3:a8:55:98:1e:cf:70:a7:2d:37:49:
         8a:dc:39:23:4a:b3:f5:f5:f1:bc:58:1b:ae:47:72:42:02:2b:
         14:a4:ea:7e:22:82:2f:2d:df:54:bf:3c:52:e3:cf:87:61:12:
         f2:e0:8b:0e:78:9b:fe:c4:2f:db:e1:64:c6:ed:55:7e:9e:f7:
         69:ee:c8:d0:2a:4d:4d:fc:18:56:e1:be:ee:e2:af:55:81:e5:
         1b:76:58:3c:48:af:92:1b:49:0b:29:55:5f:4d:8f:75:93:cd:
         4d:51:16:08:43:7d:a5:74:5d:fe:24:26:ba:42:82:81:a7:e7:
         93:59:f8:ab:23:02:d8:f5:bc:6a:88:7b:fa:2f:fa:1a:85:68:
         0c:3d:f3:80:e4:af:03:50:45:5e:a0:f4:72:67:d2:32:0e:c6:
         ae:13:fd:e5:ae:ff:fb:ad:69:70:16:04:56:8d:ee:1c:43:36:
         c6:3d:d6:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wPWvSW6SaleUtoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk
MjdjYmJhYWItMjQyNC00NmE2LTk2NDktOTMzZDUzYmIzMGJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0Y5WWs2nfMkKhLSlLSUN0rEQ7UF2/uKrSiW
jL8MJo2NSlnA7ZzJ7A6nBx7SGrjfF/472sG7zIaLX7sBIku8pjYSqs+Yo2cCoygi
2fnzMKZ2hFF9KrAF9YxwOTd1Fb+vwIJHnjOrmwTbCnZFMizRCI2wwT8PJw4ZmTKM
SLhPpDlsZp/KEkJ9mojfEukH9eb5vvKvCBg38GG9E6R0GCywFYtOMTaZgQ8xgN9a
VF2nxRzSj6N9DpF+7A+V5D0lVi6M8Omtx8mvQxJ359nE/3QqiJxESVTdf/5Vsrcb
Qdl3+S7KbHGT5uQ1/5IIVWDrieIkpFAmAjb7y19vOAz+KXKMqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBadhyec5LA9Ix9+xpWfWrRCjWjqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzlkMDU2NjQtYWRkZi0z
NjBiLWE5OWMtMzZlYzYyNzlkNDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEsUm0qr67Pxs5ZVayl6ECaRr1d8skQOerWsIPoZpFTb7twEzLP1SLPk
B5WMPd7CzYkdpCO+VHaiyCp6FYvcXCtLgSGKM6zEaaX1EkV9u8TzqFWYHs9wpy03
SYrcOSNKs/X18bxYG65HckICKxSk6n4igi8t31S/PFLjz4dhEvLgiw54m/7EL9vh
ZMbtVX6e92nuyNAqTU38GFbhvu7ir1WB5Rt2WDxIr5IbSQspVV9Nj3WTzU1RFghD
faV0Xf4kJrpCgoGn55NZ+KsjAtj1vGqIe/ov+hqFaAw984DkrwNQRV6g9HJn0jIO
xq4T/eWu//utaXAWBFaN7hxDNsY91jU=
-----END CERTIFICATE-----