Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/600c55ce-e2e1-3c2b-9a78-d93465b509e9.roa
File:                     600c55ce-e2e1-3c2b-9a78-d93465b509e9.roa (raw, json)
Hash identifier:          UUY50C2WrSBHfT2sybEzBTm7h2zXx1d6kq+3uasuvDE=
Subject key identifier:   5A:3B:89:20:D8:10:30:39:D6:04:56:81:94:E5:95:00:FC:35:78:8E
Certificate issuer:       /CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c
Certificate serial:       010D0C9F432858493B543F0AA9D3D53ED47E7600
Authority key identifier: AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/600c55ce-e2e1-3c2b-9a78-d93465b509e9.roa
Signing time:             Tue 18 Mar 2025 18:56:16 +0000
ROA not before:           Tue 18 Mar 2025 18:56:16 +0000
ROA not after:            Mon 16 Jun 2025 18:56:16 +0000
asID:                     23294
IP address blocks:        76.165.44.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3b:54:3f:0a:a9:d3:d5:3e:d4:7e:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c
        Validity
            Not Before: Mar 18 18:56:16 2025 GMT
            Not After : Jun 16 18:56:16 2025 GMT
        Subject: CN=f9017dc0-1f7b-4ae5-9adb-ba119b1a4930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f2:a6:6e:71:ca:5f:7c:47:32:e9:89:d9:5e:
                    4b:d0:e0:1c:a1:40:62:c9:df:76:0a:a6:f4:32:6d:
                    b6:07:0e:1c:1c:83:34:5e:43:01:35:72:4f:35:ec:
                    f0:1b:a2:ba:8e:c0:bb:9a:c4:80:29:7e:11:24:f8:
                    a3:ca:03:55:10:77:c4:bd:ec:0b:33:f4:fe:b5:c2:
                    a7:73:d1:0f:f5:3a:bd:fb:45:f7:bd:a0:9e:c4:37:
                    58:84:36:48:29:61:df:77:34:bd:ba:cd:bf:09:c9:
                    38:ea:61:ed:8b:e8:e0:d7:fe:ac:cb:54:8c:5f:3b:
                    73:d9:9f:00:01:81:57:d5:dd:e0:00:87:99:c4:d4:
                    b0:65:47:a1:2a:8b:2c:c8:28:2c:25:d8:80:40:f5:
                    02:cf:26:52:ba:43:6d:da:fa:54:2b:19:29:f6:da:
                    68:9e:d8:4e:e5:78:27:3b:37:3f:fe:60:00:1c:47:
                    44:1d:65:ff:73:ce:c9:e3:92:3a:64:fc:09:66:1f:
                    7e:13:35:4c:df:54:9e:1e:ec:d0:8c:20:cb:e0:6d:
                    e2:3a:73:93:cd:86:74:5a:47:db:dc:c0:66:53:3d:
                    9d:9f:f2:4f:e7:de:86:4e:31:93:09:e2:d3:be:9c:
                    71:4e:a2:6b:d2:48:08:f7:42:3d:80:75:f3:ac:38:
                    99:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3B:89:20:D8:10:30:39:D6:04:56:81:94:E5:95:00:FC:35:78:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/600c55ce-e2e1-3c2b-9a78-d93465b509e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.crl

            X509v3 Authority Key Identifier:
                keyid:AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.165.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:3a:be:b2:21:2a:89:ba:c7:27:38:0a:d1:d0:30:71:01:64:
         f4:d6:18:0e:be:d6:ca:cf:67:3b:0d:29:fb:13:ae:45:60:88:
         57:14:fe:ee:75:0f:b6:be:91:9a:0f:70:36:29:90:0f:de:01:
         a6:c1:ca:10:92:44:e4:16:81:02:1f:07:2d:36:36:96:66:8d:
         68:2a:e8:0d:d2:6f:bd:9c:75:51:f8:55:18:0b:b2:d0:c8:62:
         1f:f2:c7:ef:c1:51:43:1c:e0:73:88:c8:10:65:5b:13:c4:fe:
         2a:14:f9:a4:39:4f:da:36:9f:0d:65:71:83:42:8b:e2:7b:fa:
         0e:b1:ed:47:5e:0d:1e:37:84:db:95:ec:e8:2d:bb:fe:06:4f:
         52:d4:d7:2d:19:1a:38:aa:7f:76:0f:16:1a:df:d8:0c:45:0d:
         ec:02:e0:20:cb:5b:f5:eb:0e:f2:2f:d5:67:84:fa:a0:5b:40:
         eb:f0:86:f6:90:d8:87:56:18:8b:82:16:f2:d3:e9:69:84:ce:
         99:43:15:ad:58:c6:1b:ae:07:51:a5:4d:84:f1:2b:78:38:d6:
         c5:89:e0:53:13:cd:1e:b0:60:dc:6c:2c:ca:79:5a:47:2e:3b:
         a6:f5:b4:12:0c:b6:32:c1:ab:78:1a:d5:54:6e:f7:75:e4:da:
         3f:19:dd:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk7VD8KqdPVPtR+dgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFiNTMwNjctNDQ5My00N2FiLWJjZjItN2ZhOWFkNDY1
NzljMB4XDTI1MDMxODE4NTYxNloXDTI1MDYxNjE4NTYxNlowLzEtMCsGA1UEAxMk
ZjkwMTdkYzAtMWY3Yi00YWU1LTlhZGItYmExMTliMWE0OTMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/KmbnHKX3xHMumJ2V5L0OAcoUBiyd92Cqb0
Mm22Bw4cHIM0XkMBNXJPNezwG6K6jsC7msSAKX4RJPijygNVEHfEvewLM/T+tcKn
c9EP9Tq9+0X3vaCexDdYhDZIKWHfdzS9us2/Cck46mHti+jg1/6sy1SMXztz2Z8A
AYFX1d3gAIeZxNSwZUehKossyCgsJdiAQPUCzyZSukNt2vpUKxkp9tponthO5Xgn
Ozc//mAAHEdEHWX/c87J45I6ZPwJZh9+EzVM31SeHuzQjCDL4G3iOnOTzYZ0Wkfb
3MBmUz2dn/JP596GTjGTCeLTvpxxTqJr0kgI90I9gHXzrDiZ7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFo7iSDYEDA51gRWgZTllQD8NXiOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80YWI1
MzA2Ny00NDkzLTQ3YWItYmNmMi03ZmE5YWQ0NjU3OWMvNjAwYzU1Y2UtZTJlMS0z
YzJiLTlhNzgtZDkzNDY1YjUwOWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGFiNTMwNjctNDQ5My00N2FiLWJj
ZjItN2ZhOWFkNDY1NzljLzRhYjUzMDY3LTQ0OTMtNDdhYi1iY2YyLTdmYTlhZDQ2
NTc5Yy5jcmwwHwYDVR0jBBgwFoAUrv1uP9auMbIMbnvGOKUvOihTS8MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS80YWI1MzA2Ny00NDkzLTQ3YWItYmNmMi03ZmE5
YWQ0NjU3OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTKUsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEY6vrIhKom6xyc4CtHQMHEBZPTWGA6+1srPZzsNKfsTrkVgiFcU/u51
D7a+kZoPcDYpkA/eAabByhCSROQWgQIfBy02NpZmjWgq6A3Sb72cdVH4VRgLstDI
Yh/yx+/BUUMc4HOIyBBlWxPE/ioU+aQ5T9o2nw1lcYNCi+J7+g6x7UdeDR43hNuV
7Ogtu/4GT1LU1y0ZGjiqf3YPFhrf2AxFDewC4CDLW/XrDvIv1WeE+qBbQOvwhvaQ
2IdWGIuCFvLT6WmEzplDFa1YxhuuB1GlTYTxK3g41sWJ4FMTzR6wYNxsLMp5Wkcu
O6b1tBIMtjLBq3ga1VRu93Xk2j8Z3Rg=
-----END CERTIFICATE-----