Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6/f299d1f5-ba1b-3977-989a-27bfdd1a652c.roa
File:                     f299d1f5-ba1b-3977-989a-27bfdd1a652c.roa (raw, json)
Hash identifier:          ttzTk6ghHazZeIxFBDeJRA8W6DCs1h8jIUK8CtYoAYQ=
Subject key identifier:   F0:79:3C:73:CC:A9:7B:25:31:93:1D:A2:CA:79:73:C2:5B:C1:3C:23
Certificate issuer:       /CN=e6c7f8d7-4c06-4480-bbd8-71cf97b216b6
Certificate serial:       010D0C9F432858495EEEE27BA723BDCEAC88AA00
Authority key identifier: CF:13:24:EB:7E:8B:4E:D8:7D:25:7D:FB:0E:78:8D:71:59:0C:52:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6/f299d1f5-ba1b-3977-989a-27bfdd1a652c.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     54145
IP address blocks:        204.194.22.0/23 maxlen: 24
                          2620:95:8000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:e2:7b:a7:23:bd:ce:ac:88:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6c7f8d7-4c06-4480-bbd8-71cf97b216b6
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=752badc3-1603-4691-86bd-f29297e79c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:70:72:2c:c0:7a:95:d1:be:b2:4e:6f:f3:32:
                    d6:88:e9:8b:40:11:45:04:4c:c8:83:31:f8:75:d5:
                    89:82:fa:be:2f:1c:c9:e8:ee:f5:c3:12:0c:66:2b:
                    6a:e7:0c:b9:55:b8:f5:72:bc:3c:29:d4:84:54:58:
                    70:fa:22:41:a3:c2:7e:9b:23:8e:76:dd:51:e5:b5:
                    7d:28:a7:4c:e5:50:d1:8b:66:41:6e:04:96:40:3f:
                    5d:05:e6:60:f3:5e:82:a9:e8:6c:4c:81:6f:c2:55:
                    74:d4:f7:f4:66:dc:e7:54:63:1b:7b:cd:bd:ad:f3:
                    f5:fd:51:14:97:72:78:40:20:4a:24:45:56:7f:84:
                    57:71:d4:76:eb:b1:e7:d2:42:d9:13:ed:e0:1c:d9:
                    30:ca:ca:54:96:d5:f5:20:6e:87:2f:54:0b:27:d0:
                    5c:4a:69:12:68:6a:5a:45:97:44:55:42:d6:10:b9:
                    78:ce:56:17:78:ee:13:0a:8f:0b:a1:49:4e:37:b5:
                    78:c6:5b:a9:9b:2c:41:f7:41:16:b4:e1:3f:16:a2:
                    ad:a2:13:36:64:5a:ba:4f:ca:a5:01:91:53:f7:1e:
                    6a:e0:ca:99:9e:e0:7e:25:9c:d1:bb:af:14:5f:58:
                    70:73:09:90:1c:ed:e3:7b:e3:3d:1b:43:bd:02:db:
                    59:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:79:3C:73:CC:A9:7B:25:31:93:1D:A2:CA:79:73:C2:5B:C1:3C:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6/f299d1f5-ba1b-3977-989a-27bfdd1a652c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6.crl

            X509v3 Authority Key Identifier:
                keyid:CF:13:24:EB:7E:8B:4E:D8:7D:25:7D:FB:0E:78:8D:71:59:0C:52:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6c7f8d7-4c06-4480-bbd8-71cf97b216b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.194.22.0/23
                IPv6:
                  2620:95:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:fe:53:5a:c1:bb:b1:34:6f:d4:5b:74:d4:a8:a3:af:13:6e:
         22:a5:98:6f:d5:69:bd:fd:af:59:86:c7:bb:7f:3c:ca:6f:88:
         cc:76:ee:ad:ae:99:9d:ef:85:1d:7e:84:71:e3:fa:2d:94:42:
         fd:42:81:60:ff:3b:da:d7:56:a8:ab:78:e7:cc:f9:9a:a3:a6:
         ba:66:95:7f:4f:ba:91:85:5d:03:7b:7d:a1:53:fe:1b:38:ca:
         4c:9d:66:fe:a2:47:b4:39:07:50:19:f1:f6:0b:50:cb:a4:88:
         3a:e9:a2:0b:8f:02:2c:d6:0b:2d:60:58:c3:d3:0a:5b:b9:c4:
         5f:f9:ef:f0:1a:83:2b:4b:70:b5:0e:0c:6d:d8:b3:0a:ea:17:
         62:a5:82:35:1b:d4:f2:45:ac:98:02:33:51:ba:0a:03:3f:5e:
         78:b0:32:a0:be:e6:0e:c7:29:9d:0a:37:fd:3f:dc:29:47:03:
         89:9d:d5:1d:26:e9:2d:77:8a:2d:ba:10:86:db:00:00:d2:94:
         ff:48:c6:75:51:45:e2:98:d5:ae:6a:d5:f0:10:8b:7c:d1:21:
         7a:02:fe:63:2b:18:30:19:ac:fd:62:c6:17:ff:7a:dd:1f:d6:
         67:b9:05:71:b0:6b:51:f4:fa:48:fb:87:4a:c1:f6:cc:28:b4:
         3f:09:4d:01
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEle7uJ7pyO9zqyIqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTZjN2Y4ZDctNGMwNi00NDgwLWJiZDgtNzFjZjk3YjIx
NmI2MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk
NzUyYmFkYzMtMTYwMy00NjkxLTg2YmQtZjI5Mjk3ZTc5YzUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXByLMB6ldG+sk5v8zLWiOmLQBFFBEzIgzH4
ddWJgvq+LxzJ6O71wxIMZitq5wy5Vbj1crw8KdSEVFhw+iJBo8J+myOOdt1R5bV9
KKdM5VDRi2ZBbgSWQD9dBeZg816CqehsTIFvwlV01Pf0ZtznVGMbe829rfP1/VEU
l3J4QCBKJEVWf4RXcdR267Hn0kLZE+3gHNkwyspUltX1IG6HL1QLJ9BcSmkSaGpa
RZdEVULWELl4zlYXeO4TCo8LoUlON7V4xlupmyxB90EWtOE/FqKtohM2ZFq6T8ql
AZFT9x5q4MqZnuB+JZzRu68UX1hwcwmQHO3je+M9G0O9AttZowIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFPB5PHPMqXslMZMdosp5c8JbwTwjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNmM3
ZjhkNy00YzA2LTQ0ODAtYmJkOC03MWNmOTdiMjE2YjYvZjI5OWQxZjUtYmExYi0z
OTc3LTk4OWEtMjdiZmRkMWE2NTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTZjN2Y4ZDctNGMwNi00NDgwLWJi
ZDgtNzFjZjk3YjIxNmI2L2U2YzdmOGQ3LTRjMDYtNDQ4MC1iYmQ4LTcxY2Y5N2Iy
MTZiNi5jcmwwHwYDVR0jBBgwFoAUzxMk636LTth9JX37DniNcVkMUigwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNmM3ZjhkNy00YzA2LTQ0ODAtYmJkOC03MWNm
OTdiMjE2YjYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBzMIWMA8E
AgACMAkDBwAmIACVgAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAeP5TWsG7sTRv1Ft01KijrxNuIqWYb9Vp
vf2vWYbHu388ym+IzHbura6Zne+FHX6EceP6LZRC/UKBYP872tdWqKt458z5mqOm
umaVf0+6kYVdA3t9oVP+GzjKTJ1m/qJHtDkHUBnx9gtQy6SIOumiC48CLNYLLWBY
w9MKW7nEX/nv8BqDK0twtQ4MbdizCuoXYqWCNRvU8kWsmAIzUboKAz9eeLAyoL7m
DscpnQo3/T/cKUcDiZ3VHSbpLXeKLboQhtsAANKU/0jGdVFF4pjVrmrV8BCLfNEh
egL+YysYMBms/WLGF/963R/WZ7kFcbBrUfT6SPuHSsH2zCi0PwlNAQ==
-----END CERTIFICATE-----