Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/37b7f150-dd9a-3112-8f02-caa523aa0831.roa
File:                     37b7f150-dd9a-3112-8f02-caa523aa0831.roa (raw, json)
Hash identifier:          MR6tRh1jWeruldQZHxZk2ywrGDszUNARouRF5jr8En0=
Subject key identifier:   5A:E0:99:84:CD:DC:77:A7:C3:1E:E2:C5:EA:7E:40:3B:6D:AF:87:04
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F432858497C3EF0C6CBF6F3B352B67E00
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/37b7f150-dd9a-3112-8f02-caa523aa0831.roa
Signing time:             Fri 11 Apr 2025 01:00:48 +0000
ROA not before:           Fri 11 Apr 2025 01:00:48 +0000
ROA not after:            Thu 10 Jul 2025 01:00:48 +0000
asID:                     396998
IP address blocks:        206.71.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7c:3e:f0:c6:cb:f6:f3:b3:52:b6:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Apr 11 01:00:48 2025 GMT
            Not After : Jul 10 01:00:48 2025 GMT
        Subject: CN=64e87301-459c-4d18-9d83-99f32360a8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:54:90:ba:1e:73:29:1f:9a:c0:0a:62:0c:23:
                    23:1a:34:ae:94:3b:d1:9d:bd:67:1c:2f:aa:fd:76:
                    4a:21:22:37:60:13:ff:75:12:f5:d9:e8:27:98:4b:
                    7f:c9:36:19:5f:f1:54:ab:7f:99:b5:02:26:11:55:
                    58:f4:a2:da:c1:2d:12:3b:b0:3c:2d:b6:cb:15:c3:
                    7d:e3:72:08:36:dc:72:36:98:a2:f5:ae:cf:2a:20:
                    e4:de:7c:c2:6c:5d:8d:d7:ef:69:48:0e:68:11:90:
                    32:a2:c0:40:73:f3:d3:78:58:e4:ce:4a:82:0b:70:
                    fc:f8:c5:53:98:56:56:ab:41:45:60:2a:12:e3:b5:
                    75:7d:f9:3e:d9:ac:7e:1e:c6:28:ca:42:bc:af:c5:
                    3a:97:a3:0a:6c:f8:cc:e4:ad:fc:70:ab:45:87:3a:
                    58:11:95:e0:8c:a4:ac:67:b1:ce:8e:4e:7a:82:7e:
                    3c:16:ad:9f:5a:5f:8e:13:62:f3:85:0c:af:78:2a:
                    e0:52:73:91:b6:4e:96:f5:97:22:d9:8b:57:9f:f4:
                    f9:e8:e8:f1:38:7b:f5:db:b8:f2:05:8d:ca:6c:e4:
                    37:eb:85:49:0a:2b:3a:8d:1a:0c:8e:6a:54:7a:91:
                    c7:50:7d:51:72:d3:3f:84:80:20:f2:0f:e6:ee:a7:
                    0e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E0:99:84:CD:DC:77:A7:C3:1E:E2:C5:EA:7E:40:3B:6D:AF:87:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/37b7f150-dd9a-3112-8f02-caa523aa0831.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.71.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:3d:4e:56:35:a1:05:3a:25:80:6f:c9:a7:14:5e:75:f2:c8:
         1f:68:61:03:d8:21:33:d9:46:4c:51:90:9b:f8:46:0a:e9:d1:
         86:60:c4:21:8b:a9:7d:4d:d7:27:07:4a:b1:71:56:dd:7d:21:
         c4:6e:17:f6:cb:0f:9e:7a:75:03:0e:28:5a:ab:43:42:cc:8f:
         a4:21:d9:c1:aa:c2:95:a5:5f:8a:1e:df:83:50:35:cd:3b:3e:
         da:a7:ee:e0:c8:c3:d7:b4:ec:77:ac:cb:b6:7a:56:93:0f:4d:
         5a:76:4c:11:5b:c5:70:c8:72:1f:b1:e3:73:90:0e:bc:d4:f5:
         44:e2:ff:03:86:08:4d:f5:89:f5:a6:63:0a:fc:16:09:da:45:
         f7:80:8a:9d:bc:92:cf:ab:36:52:c1:da:6d:b8:67:09:86:bb:
         a2:f1:a8:71:15:fc:f9:b7:a4:f0:14:e1:53:be:42:54:f9:31:
         07:4f:4c:7d:cd:1f:32:86:be:66:f9:62:9c:9d:3b:c9:54:0b:
         f7:87:13:63:f7:40:f5:b8:0d:ef:50:d2:b1:16:3f:b2:78:09:
         4a:8a:ea:d0:6d:ef:47:05:44:ae:b0:d6:82:91:ea:3e:e7:1f:
         a1:42:a3:5d:6a:c0:1c:6b:4f:b2:ea:04:42:76:0e:a6:d1:50:
         95:0b:37:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8PvDGy/bzs1K2fgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk2YjI0YzQtYjY5Mi00Yjk0LTgzZjUtMWRhNTQ5MGI4
ZjNjMB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk
NjRlODczMDEtNDU5Yy00ZDE4LTlkODMtOTlmMzIzNjBhOGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21SQuh5zKR+awApiDCMjGjSulDvRnb1nHC+q
/XZKISI3YBP/dRL12egnmEt/yTYZX/FUq3+ZtQImEVVY9KLawS0SO7A8LbbLFcN9
43IINtxyNpii9a7PKiDk3nzCbF2N1+9pSA5oEZAyosBAc/PTeFjkzkqCC3D8+MVT
mFZWq0FFYCoS47V1ffk+2ax+HsYoykK8r8U6l6MKbPjM5K38cKtFhzpYEZXgjKSs
Z7HOjk56gn48Fq2fWl+OE2LzhQyveCrgUnORtk6W9Zci2YtXn/T56OjxOHv127jy
BY3KbOQ364VJCis6jRoMjmpUepHHUH1RctM/hIAg8g/m7qcObQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFrgmYTN3Henwx7ixep+QDttr4cEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZi
MjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1NDkwYjhmM2MvMzdiN2YxNTAtZGQ5YS0z
MTEyLThmMDItY2FhNTIzYWEwODMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk2YjI0YzQtYjY5Mi00Yjk0LTgz
ZjUtMWRhNTQ5MGI4ZjNjL2U5NmIyNGM0LWI2OTItNGI5NC04M2Y1LTFkYTU0OTBi
OGYzYy5jcmwwHwYDVR0jBBgwFoAUq7bjkDZGS9ALmtUiWl6jYHyd1XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZiMjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1
NDkwYjhmM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzkefMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEs9TlY1oQU6JYBvyacUXnXyyB9oYQPYITPZRkxRkJv4Rgrp0YZgxCGL
qX1N1ycHSrFxVt19IcRuF/bLD556dQMOKFqrQ0LMj6Qh2cGqwpWlX4oe34NQNc07
Ptqn7uDIw9e07Hesy7Z6VpMPTVp2TBFbxXDIch+x43OQDrzU9UTi/wOGCE31ifWm
Ywr8FgnaRfeAip28ks+rNlLB2m24ZwmGu6LxqHEV/Pm3pPAU4VO+QlT5MQdPTH3N
HzKGvmb5YpydO8lUC/eHE2P3QPW4De9Q0rEWP7J4CUqK6tBt70cFRK6w1oKR6j7n
H6FCo11qwBxrT7LqBEJ2DqbRUJULN+4=
-----END CERTIFICATE-----