Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/9b83721d-a4fc-3b3a-b8e7-67a844bc0a3c.roa
File:                     9b83721d-a4fc-3b3a-b8e7-67a844bc0a3c.roa (raw, json)
Hash identifier:          r0vrXYm99hzFL+dDGlBHOWL8Me8x9lTQXpbza6nHXFA=
Subject key identifier:   FC:69:0D:4A:DA:F6:68:AE:F1:6B:BB:F8:39:15:16:48:0A:EC:CF:48
Certificate issuer:       /CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c
Certificate serial:       010D0C9F4328584981D45A186166E5A011667E10
Authority key identifier: AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/9b83721d-a4fc-3b3a-b8e7-67a844bc0a3c.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     32440
IP address blocks:        104.141.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:5a:18:61:66:e5:a0:11:66:7e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=8cf21cd0-055b-4202-b657-1dcfe0da6192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:19:14:1c:a5:d3:a1:14:f1:0f:a8:d3:42:
                    f3:d1:a5:71:3f:25:5b:a1:5c:59:1f:11:4c:22:40:
                    70:03:9d:47:93:0f:6d:b3:94:9f:c9:32:26:c8:25:
                    e4:41:53:49:a5:92:48:e3:59:eb:fc:fd:84:1e:5a:
                    c3:8d:38:12:f4:95:70:19:40:88:67:97:b6:6c:aa:
                    3a:89:08:d5:97:33:37:ed:8d:59:32:9e:cb:41:7c:
                    6a:92:e9:55:fe:25:3c:a0:dd:f7:14:b2:07:c4:f1:
                    77:4a:d2:92:37:c9:45:2f:d1:3d:fb:8d:d0:fd:6e:
                    aa:09:21:fe:55:6d:8d:02:c2:be:70:ac:3c:ff:93:
                    13:09:36:f4:f5:bd:2b:81:b3:75:01:98:52:71:1c:
                    0a:88:0b:38:a3:94:fb:cb:1e:3a:56:4a:41:81:79:
                    a2:9e:c7:74:7a:0e:85:7a:99:cd:6f:21:1d:4c:5f:
                    05:6e:b0:d9:c7:46:ca:ac:5b:12:99:30:d6:bf:8d:
                    90:02:7a:11:e1:55:20:7a:fa:71:c9:2d:fd:08:85:
                    45:c2:fe:8a:ad:71:10:84:da:c3:46:86:5a:7d:d0:
                    f0:f2:71:a0:a3:3a:fa:3c:31:91:68:69:2f:ff:da:
                    91:12:18:d6:3a:58:3e:00:73:8e:6f:7f:ff:9e:39:
                    1e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:69:0D:4A:DA:F6:68:AE:F1:6B:BB:F8:39:15:16:48:0A:EC:CF:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/9b83721d-a4fc-3b3a-b8e7-67a844bc0a3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.crl

            X509v3 Authority Key Identifier:
                keyid:AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.141.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:ad:7b:aa:8d:be:55:57:57:d2:dc:f2:73:a6:e9:0b:69:4b:
         e7:0d:d3:e5:ba:9f:56:f1:d0:4f:59:6c:2e:1d:9a:f7:c9:10:
         d5:97:e1:fa:42:78:a6:de:1f:e6:40:2a:d6:9d:87:7a:cc:61:
         23:2d:f6:fe:ad:28:32:ad:3a:dc:ce:be:47:70:d0:b4:8c:d2:
         88:91:b5:34:6e:4d:be:8e:4b:30:0e:1a:81:91:93:44:ef:bd:
         bb:9d:1b:ab:4d:94:42:f5:12:6a:95:7a:a4:b4:cb:0a:be:94:
         31:09:79:94:02:10:08:d9:56:91:6c:13:69:02:1c:44:17:39:
         e3:24:6e:43:28:70:57:30:e5:51:ed:15:1c:e7:64:08:ec:0d:
         3e:60:fa:1f:39:4d:5d:fd:08:91:13:c1:8b:63:e6:01:c5:8d:
         7a:4c:8c:6e:9c:9b:67:0e:5e:d3:0b:ef:49:d2:13:c1:45:24:
         67:de:de:2e:5d:7a:03:c8:46:80:02:03:7b:7a:8a:35:aa:74:
         43:d9:46:21:fc:17:4b:38:7e:df:39:1f:c8:c2:ac:73:59:43:
         51:c4:30:da:64:06:fe:2d:79:ec:30:75:5d:e1:a2:58:5e:41:
         a4:53:cf:24:32:ae:89:53:c4:c1:41:db:dd:a4:3b:f9:5f:14:
         52:48:c6:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmB1FoYYWbloBFmfhAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFiNTMwNjctNDQ5My00N2FiLWJjZjItN2ZhOWFkNDY1
NzljMB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk
OGNmMjFjZDAtMDU1Yi00MjAyLWI2NTctMWRjZmUwZGE2MTkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRgZFByl06EU8Q+o00Lz0aVxPyVboVxZHxFM
IkBwA51Hkw9ts5SfyTImyCXkQVNJpZJI41nr/P2EHlrDjTgS9JVwGUCIZ5e2bKo6
iQjVlzM37Y1ZMp7LQXxqkulV/iU8oN33FLIHxPF3StKSN8lFL9E9+43Q/W6qCSH+
VW2NAsK+cKw8/5MTCTb09b0rgbN1AZhScRwKiAs4o5T7yx46VkpBgXminsd0eg6F
epnNbyEdTF8FbrDZx0bKrFsSmTDWv42QAnoR4VUgevpxyS39CIVFwv6KrXEQhNrD
RoZafdDw8nGgozr6PDGRaGkv/9qREhjWOlg+AHOOb3//njkeLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPxpDUra9miu8Wu7+DkVFkgK7M9IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80YWI1
MzA2Ny00NDkzLTQ3YWItYmNmMi03ZmE5YWQ0NjU3OWMvOWI4MzcyMWQtYTRmYy0z
YjNhLWI4ZTctNjdhODQ0YmMwYTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGFiNTMwNjctNDQ5My00N2FiLWJj
ZjItN2ZhOWFkNDY1NzljLzRhYjUzMDY3LTQ0OTMtNDdhYi1iY2YyLTdmYTlhZDQ2
NTc5Yy5jcmwwHwYDVR0jBBgwFoAUrv1uP9auMbIMbnvGOKUvOihTS8MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS80YWI1MzA2Ny00NDkzLTQ3YWItYmNmMi03ZmE5
YWQ0NjU3OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaI0OMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADyte6qNvlVXV9Lc8nOm6QtpS+cN0+W6n1bx0E9ZbC4dmvfJENWX4fpC
eKbeH+ZAKtadh3rMYSMt9v6tKDKtOtzOvkdw0LSM0oiRtTRuTb6OSzAOGoGRk0Tv
vbudG6tNlEL1EmqVeqS0ywq+lDEJeZQCEAjZVpFsE2kCHEQXOeMkbkMocFcw5VHt
FRznZAjsDT5g+h85TV39CJETwYtj5gHFjXpMjG6cm2cOXtML70nSE8FFJGfe3i5d
egPIRoACA3t6ijWqdEPZRiH8F0s4ft85H8jCrHNZQ1HEMNpkBv4teewwdV3holhe
QaRTzyQyrolTxMFB292kO/lfFFJIxio=
-----END CERTIFICATE-----