Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6f0c809a-d35e-304e-a1ea-c59893c159c6.roa
File:                     6f0c809a-d35e-304e-a1ea-c59893c159c6.roa (raw, json)
Hash identifier:          H0YTOXXSU5oqDoXpzcMV7b5Z89iwSWlWTCUeNFR008o=
Subject key identifier:   E6:4C:A7:DE:E5:71:3B:08:2E:89:4D:95:FB:F0:13:75:3E:91:D9:F0
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858496FAEF29F4475B730BB0F0E40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6f0c809a-d35e-304e-a1ea-c59893c159c6.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        104.134.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:ae:f2:9f:44:75:b7:30:bb:0f:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=39098fb8-dd41-4930-a2a3-561a2ebc82db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:36:c7:7e:c9:a0:28:5a:5d:83:5e:db:a7:3b:
                    19:e4:27:79:bf:ca:09:a8:47:14:c8:1d:7b:2c:89:
                    df:4e:9d:18:16:5c:32:a5:09:58:92:a3:b0:f4:23:
                    f5:d9:3b:bb:55:e4:0b:7d:e6:92:de:41:fc:75:4d:
                    e1:fa:fc:26:91:53:4c:9c:d3:15:c2:56:60:99:c8:
                    47:e5:b6:c7:33:78:0a:60:3e:28:88:38:10:24:9d:
                    26:e1:36:87:a7:20:b1:7c:e0:89:1d:67:9a:50:af:
                    29:1d:9f:59:8c:78:3a:75:b2:f2:d4:9f:37:9a:33:
                    b3:d2:2a:33:f3:41:b9:03:2a:f2:8f:6c:ca:fd:70:
                    c0:a5:58:a2:24:80:55:ee:39:e2:01:5a:25:a7:18:
                    19:bb:08:d5:b4:bf:1a:cf:bb:45:99:16:e1:89:e5:
                    8d:47:1e:33:19:83:17:4d:a8:70:6f:fe:7a:04:0e:
                    4f:f4:d0:31:a6:1f:7b:a5:b9:40:78:51:34:bc:50:
                    6e:f5:b4:06:45:30:c1:a6:7c:ed:93:18:5e:49:4d:
                    25:f8:36:81:b5:56:84:63:42:c1:b9:95:22:5f:b3:
                    22:79:80:f3:28:b7:2a:2c:a3:7d:8e:ee:e4:63:42:
                    98:2e:63:51:e9:ae:6f:20:6e:0b:fb:a2:c2:92:11:
                    36:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4C:A7:DE:E5:71:3B:08:2E:89:4D:95:FB:F0:13:75:3E:91:D9:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6f0c809a-d35e-304e-a1ea-c59893c159c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:6a:18:e7:55:73:b3:1d:c6:c1:78:da:64:9e:5d:1f:48:b4:
         b3:b3:23:c0:be:c7:2c:ec:a4:39:d5:56:20:70:e2:d7:e9:c5:
         b8:d6:fe:87:e7:53:d9:5d:c1:3b:cc:0d:22:a2:28:8b:85:1d:
         af:01:ec:9f:58:a8:cd:1a:35:b3:08:12:b5:0a:71:35:d1:e5:
         22:57:a5:da:3e:9e:da:19:e1:b1:ed:7e:77:b8:f4:1d:31:08:
         f8:97:22:a3:c5:8f:14:46:c8:35:bb:8a:89:09:fe:70:76:7f:
         7b:8e:28:21:f0:63:c8:fd:27:7b:01:d4:79:ff:1e:4f:bc:14:
         2c:f4:6d:fa:91:bc:01:3d:a0:b0:94:af:14:16:b0:82:38:15:
         31:1a:9d:57:2c:dc:a6:ad:29:a5:a5:aa:f2:0b:c6:9c:77:35:
         68:93:cc:9b:e9:75:1c:64:96:ba:9d:a3:4c:71:c5:0d:fe:86:
         04:46:61:0a:85:e6:fa:47:99:d9:37:2c:f8:01:12:c2:11:0d:
         42:8b:4c:f0:37:a1:f0:1e:94:53:fa:32:1e:e4:f3:47:47:b8:
         5a:33:6a:14:d4:d6:19:4d:73:3e:98:01:dc:e0:a1:b3:da:a9:
         6f:2b:8b:26:05:8c:d5:6d:fe:59:25:79:2c:a4:83:77:4f:9c:
         40:55:2f:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrvKfRHW3MLsPDkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk
MzkwOThmYjgtZGQ0MS00OTMwLWEyYTMtNTYxYTJlYmM4MmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzbHfsmgKFpdg17bpzsZ5Cd5v8oJqEcUyB17
LInfTp0YFlwypQlYkqOw9CP12Tu7VeQLfeaS3kH8dU3h+vwmkVNMnNMVwlZgmchH
5bbHM3gKYD4oiDgQJJ0m4TaHpyCxfOCJHWeaUK8pHZ9ZjHg6dbLy1J83mjOz0ioz
80G5Ayryj2zK/XDApViiJIBV7jniAVolpxgZuwjVtL8az7tFmRbhieWNRx4zGYMX
Tahwb/56BA5P9NAxph97pblAeFE0vFBu9bQGRTDBpnztkxheSU0l+DaBtVaEY0LB
uZUiX7MieYDzKLcqLKN9ju7kY0KYLmNR6a5vIG4L+6LCkhE2TwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOZMp97lcTsILolNlfvwE3U+kdnwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNmYwYzgwOWEtZDM1ZS0z
MDRlLWExZWEtYzU5ODkzYzE1OWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIYjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACZqGOdVc7MdxsF42mSeXR9ItLOzI8C+xyzspDnVViBw4tfpxbjW/ofn
U9ldwTvMDSKiKIuFHa8B7J9YqM0aNbMIErUKcTXR5SJXpdo+ntoZ4bHtfne49B0x
CPiXIqPFjxRGyDW7iokJ/nB2f3uOKCHwY8j9J3sB1Hn/Hk+8FCz0bfqRvAE9oLCU
rxQWsII4FTEanVcs3KatKaWlqvILxpx3NWiTzJvpdRxklrqdo0xxxQ3+hgRGYQqF
5vpHmdk3LPgBEsIRDUKLTPA3ofAelFP6Mh7k80dHuFozahTU1hlNcz6YAdzgobPa
qW8riyYFjNVt/lkleSykg3dPnEBVL+c=
-----END CERTIFICATE-----