Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f534c7fa-4778-3907-81bb-3549d4841e74.roa
File:                     f534c7fa-4778-3907-81bb-3549d4841e74.roa (raw, json)
Hash identifier:          5mx4Nidt/WrmcSBeyiWby8yOVFe/CKzy2pNL5YPanM0=
Subject key identifier:   5E:E1:23:40:B3:0E:06:1B:C4:85:A8:DF:2E:9F:06:BD:CD:49:48:AC
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0FD34D043CC1684DE2F80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f534c7fa-4778-3907-81bb-3549d4841e74.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     41264
IP address blocks:        104.133.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:fd:34:d0:43:cc:16:84:de:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=9ecaf188-4409-4bbd-b0f5-0dfe96f226ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:59:ce:3e:d8:24:be:66:77:2e:ca:7f:06:e9:
                    f5:98:ed:b4:1c:fb:67:83:e5:ed:d0:30:65:63:9f:
                    d3:f0:30:b8:a5:8e:a5:70:74:87:75:59:91:a0:10:
                    cf:e1:a5:8c:d0:c8:63:11:6c:36:e2:df:4e:6c:0a:
                    35:72:36:53:0c:83:ed:84:a4:71:61:22:ce:46:05:
                    dc:5c:56:7e:a4:3b:1f:34:67:97:60:ca:4c:b0:46:
                    5f:78:c9:8a:df:f6:1a:32:25:68:d7:a6:9d:6e:6a:
                    3e:05:68:e1:7c:82:c8:51:d0:3d:c2:46:17:69:7b:
                    46:f6:e6:01:be:9f:1c:3d:5c:e3:f6:f6:8a:cb:60:
                    89:b6:62:40:40:f1:ad:a2:89:02:7b:cd:26:b5:75:
                    6b:ce:8e:f7:61:c3:10:77:32:8e:a3:75:b3:3d:f1:
                    bd:8c:3a:6d:6a:53:4b:53:b7:cf:62:3a:a3:b9:80:
                    db:7d:a5:fb:2f:da:51:c9:07:16:5f:5a:d9:58:60:
                    7c:e7:50:b0:53:ce:63:ef:9a:d7:04:0f:a2:76:5d:
                    80:63:c3:d0:52:fc:66:6d:6c:18:b8:38:16:31:07:
                    ad:93:a5:bf:12:d9:e5:25:ec:37:25:bf:13:ab:24:
                    84:ae:a3:48:00:d3:56:8b:3a:e4:03:1c:5e:a5:3e:
                    37:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E1:23:40:B3:0E:06:1B:C4:85:A8:DF:2E:9F:06:BD:CD:49:48:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f534c7fa-4778-3907-81bb-3549d4841e74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:9b:4b:a3:87:9c:59:5a:a5:8e:62:dc:90:01:8a:15:f7:73:
         22:96:4a:a2:ff:33:56:ed:73:80:fd:7e:5b:cd:06:11:4c:55:
         62:8d:ab:2b:77:f9:00:58:83:50:2b:cc:68:23:a3:ab:6c:14:
         c5:28:fe:61:f2:81:8c:c4:64:c9:72:4a:66:7a:1a:ad:b5:93:
         7d:09:90:8a:45:f7:a3:36:3a:5c:ca:47:d7:e8:eb:90:32:d9:
         3a:a7:c5:97:ea:e7:8b:a7:08:03:df:90:61:11:77:10:47:a0:
         be:27:48:c2:6f:b9:5e:18:37:45:e5:3d:16:6f:86:39:bb:1b:
         4b:4f:76:07:06:db:e3:65:33:5f:eb:27:43:d4:99:54:ad:39:
         ca:20:d1:7b:5c:08:ee:7e:34:1b:82:95:29:92:5f:21:f5:20:
         51:69:ba:e2:05:07:db:bd:46:48:e8:e0:6b:bd:f0:e7:51:68:
         12:a0:cb:6f:eb:cd:11:85:88:0c:48:f6:cc:92:87:5a:f6:79:
         ed:d6:a0:cd:05:a7:f9:40:40:2b:e0:6e:b5:ca:7e:51:7e:96:
         39:9e:64:2a:0c:82:61:e2:49:0c:c0:77:57:bc:0d:05:38:90:
         ab:3c:fe:0d:bf:c6:5c:7e:d5:28:69:ad:6f:e8:f0:cb:94:38:
         d4:22:ea:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wP000EPMFoTeL4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk
OWVjYWYxODgtNDQwOS00YmJkLWIwZjUtMGRmZTk2ZjIyNmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslnOPtgkvmZ3Lsp/Bun1mO20HPtng+Xt0DBl
Y5/T8DC4pY6lcHSHdVmRoBDP4aWM0MhjEWw24t9ObAo1cjZTDIPthKRxYSLORgXc
XFZ+pDsfNGeXYMpMsEZfeMmK3/YaMiVo16adbmo+BWjhfILIUdA9wkYXaXtG9uYB
vp8cPVzj9vaKy2CJtmJAQPGtookCe80mtXVrzo73YcMQdzKOo3WzPfG9jDptalNL
U7fPYjqjuYDbfaX7L9pRyQcWX1rZWGB851CwU85j75rXBA+idl2AY8PQUvxmbWwY
uDgWMQetk6W/EtnlJew3Jb8TqySErqNIANNWizrkAxxepT43UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF7hI0CzDgYbxIWo3y6fBr3NSUisMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZjUzNGM3ZmEtNDc3OC0z
OTA3LTgxYmItMzU0OWQ0ODQxZTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHibS6OHnFlapY5i3JABihX3cyKWSqL/M1btc4D9flvNBhFMVWKNqyt3
+QBYg1ArzGgjo6tsFMUo/mHygYzEZMlySmZ6Gq21k30JkIpF96M2OlzKR9fo65Ay
2TqnxZfq54unCAPfkGERdxBHoL4nSMJvuV4YN0XlPRZvhjm7G0tPdgcG2+NlM1/r
J0PUmVStOcog0XtcCO5+NBuClSmSXyH1IFFpuuIFB9u9Rkjo4Gu98OdRaBKgy2/r
zRGFiAxI9sySh1r2ee3WoM0Fp/lAQCvgbrXKflF+ljmeZCoMgmHiSQzAd1e8DQU4
kKs8/g2/xlx+1ShprW/o8MuUONQi6rI=
-----END CERTIFICATE-----