Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/d182af8f-f865-3799-883e-ff117bfac6cd.roa
File:                     d182af8f-f865-3799-883e-ff117bfac6cd.roa (raw, json)
Hash identifier:          C+yNIRi+LsKF1E2tn2BJjxUsbI0AF4bfLCCaoua9pFA=
Subject key identifier:   F8:63:B9:36:53:6E:73:AA:A3:F4:F8:94:7C:00:31:7B:A2:EE:52:E0
Certificate issuer:       /CN=39b2626e-a40d-46fc-b3c3-ff5a12195939
Certificate serial:       010D0C9F432858495C242939AC8A7A6BCE267800
Authority key identifier: 16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/d182af8f-f865-3799-883e-ff117bfac6cd.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     46172
IP address blocks:        104.232.11.0/24 maxlen: 24
                          2602:f899:fe::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:29:39:ac:8a:7a:6b:ce:26:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b2626e-a40d-46fc-b3c3-ff5a12195939
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=8477ad15-a644-4356-b011-dc7c7a105322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:08:66:a3:84:20:7e:01:d2:de:dc:a7:e6:db:
                    d6:98:5a:53:37:4a:b5:05:43:2f:9d:2b:8f:e1:de:
                    28:ad:e0:3d:c8:a6:12:54:8d:fc:83:41:f0:36:93:
                    d0:6f:3b:34:16:0e:2a:6c:23:38:84:be:ed:3f:5c:
                    5c:54:5f:93:e3:f8:7d:05:5e:52:07:5a:da:bf:5c:
                    8d:da:d5:49:4d:b0:4b:d7:3f:33:5e:97:3d:e1:ee:
                    4c:6e:12:82:44:b8:69:1a:16:3c:c4:a9:85:2d:64:
                    9b:98:7a:03:99:70:1a:fc:c5:64:cb:01:09:37:59:
                    f5:15:58:c4:9c:a5:a3:38:5c:a3:b2:1a:fb:7b:3b:
                    e1:95:9a:e4:b4:b2:1c:ff:a3:66:73:83:bc:79:93:
                    ca:e9:ac:b0:05:1b:13:3c:99:b5:0b:f2:70:8c:83:
                    d7:ba:15:56:9c:dc:32:98:ab:cd:91:83:2e:ae:19:
                    48:d6:ff:90:95:18:7d:a4:ad:35:be:e3:95:40:34:
                    ac:66:3f:75:63:e8:56:37:9a:e1:e7:77:36:df:4f:
                    28:17:cd:36:dd:e7:ab:ef:76:ea:56:14:51:65:02:
                    51:d8:27:3a:eb:d6:32:cc:3b:fa:83:2d:77:43:ef:
                    45:64:7e:28:ff:11:25:52:76:9d:69:71:67:28:2c:
                    b4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:63:B9:36:53:6E:73:AA:A3:F4:F8:94:7C:00:31:7B:A2:EE:52:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/d182af8f-f865-3799-883e-ff117bfac6cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.crl

            X509v3 Authority Key Identifier:
                keyid:16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.232.11.0/24
                IPv6:
                  2602:f899:fe::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:f0:05:45:e3:2c:71:53:92:24:a1:02:b6:73:48:2d:f7:ae:
         1d:db:cc:45:13:3a:5d:0b:60:da:99:91:c0:3a:7f:e3:6f:48:
         2b:90:1d:94:37:74:15:45:1b:72:ec:e0:d5:34:2b:bc:b7:47:
         7c:25:6b:2f:f4:ce:5f:56:f3:f8:7b:03:f5:4f:b8:2d:6b:fd:
         b4:62:2b:49:77:26:0a:19:ad:5f:ec:e4:75:8d:75:c5:53:5f:
         0d:5c:f8:d1:6f:73:e4:65:3f:c2:79:98:e5:f4:48:aa:4a:ab:
         26:4b:22:d0:b1:09:30:7e:69:f4:17:e8:93:02:34:5e:b4:a1:
         25:c1:b1:c0:da:d3:f3:90:8c:12:8e:ec:8d:a3:67:1c:78:ea:
         39:1d:80:97:27:2a:1a:3a:99:a8:a4:dc:02:c2:29:1c:20:ba:
         f6:4a:24:0f:4c:eb:a2:5e:b8:8a:dc:f0:30:11:ef:14:8d:88:
         77:53:4f:62:c0:39:30:ef:26:09:81:e2:1a:57:91:ba:4f:10:
         62:f4:f1:02:48:c8:b1:4b:bf:b7:a4:84:9a:5c:4c:88:26:fa:
         20:37:99:5a:bb:49:5f:37:6c:68:05:d6:68:11:7c:0c:61:c4:
         3d:d9:2a:26:fc:4a:89:28:44:7a:f8:65:5a:b0:9d:13:fc:4e:
         75:b0:0b:11
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWElcJCk5rIp6a84meAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzliMjYyNmUtYTQwZC00NmZjLWIzYzMtZmY1YTEyMTk1
OTM5MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
ODQ3N2FkMTUtYTY0NC00MzU2LWIwMTEtZGM3YzdhMTA1MzIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQhmo4QgfgHS3tyn5tvWmFpTN0q1BUMvnSuP
4d4oreA9yKYSVI38g0HwNpPQbzs0Fg4qbCM4hL7tP1xcVF+T4/h9BV5SB1rav1yN
2tVJTbBL1z8zXpc94e5MbhKCRLhpGhY8xKmFLWSbmHoDmXAa/MVkywEJN1n1FVjE
nKWjOFyjshr7ezvhlZrktLIc/6Nmc4O8eZPK6aywBRsTPJm1C/JwjIPXuhVWnNwy
mKvNkYMurhlI1v+QlRh9pK01vuOVQDSsZj91Y+hWN5rh53c2308oF8023eer73bq
VhRRZQJR2Cc669YyzDv6gy13Q+9FZH4o/xElUnadaXFnKCy0NQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFPhjuTZTbnOqo/T4lHwAMXui7lLgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOWIy
NjI2ZS1hNDBkLTQ2ZmMtYjNjMy1mZjVhMTIxOTU5MzkvZDE4MmFmOGYtZjg2NS0z
Nzk5LTg4M2UtZmYxMTdiZmFjNmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzliMjYyNmUtYTQwZC00NmZjLWIz
YzMtZmY1YTEyMTk1OTM5LzM5YjI2MjZlLWE0MGQtNDZmYy1iM2MzLWZmNWExMjE5
NTkzOS5jcmwwHwYDVR0jBBgwFoAUFlk2LKpBOBxjTu4FUkfAgNzA2YAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zOWIyNjI2ZS1hNDBkLTQ2ZmMtYjNjMy1mZjVh
MTIxOTU5MzkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAaOgLMA8E
AgACMAkDBwEmAviZAP4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjfAFReMscVOSJKECtnNILfeuHdvMRRM6
XQtg2pmRwDp/429IK5AdlDd0FUUbcuzg1TQrvLdHfCVrL/TOX1bz+HsD9U+4LWv9
tGIrSXcmChmtX+zkdY11xVNfDVz40W9z5GU/wnmY5fRIqkqrJksi0LEJMH5p9Bfo
kwI0XrShJcGxwNrT85CMEo7sjaNnHHjqOR2AlycqGjqZqKTcAsIpHCC69kokD0zr
ol64itzwMBHvFI2Id1NPYsA5MO8mCYHiGleRuk8QYvTxAkjIsUu/t6SEmlxMiCb6
IDeZWrtJXzdsaAXWaBF8DGHEPdkqJvxKiShEevhlWrCdE/xOdbALEQ==
-----END CERTIFICATE-----