Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/969905e0-1e6f-3ad5-a022-3588cc2beaa4.roa
File:                     969905e0-1e6f-3ad5-a022-3588cc2beaa4.roa (raw, json)
Hash identifier:          KBnmorNqkv8tCsc05G0HJ1T/7Aoe7PD/o0FkzDWNuPw=
Subject key identifier:   D5:9E:2B:A4:69:8A:DC:10:55:C5:6B:5B:50:E7:D2:D7:EC:D8:57:9D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1AF03AC1A2DF13F391820
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/969905e0-1e6f-3ad5-a022-3588cc2beaa4.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10796
IP address blocks:        184.58.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:af:03:ac:1a:2d:f1:3f:39:18:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=28cd5f60-91da-4366-ac5e-533bf5bd4e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ba:10:dc:35:64:15:5d:af:17:48:11:6e:63:
                    3f:6d:aa:42:74:2e:bc:77:2c:c1:6c:30:7f:bc:5a:
                    5e:9b:50:4b:ac:84:58:4f:80:bf:c2:2c:f1:a4:00:
                    81:6d:7b:f6:a1:66:e0:91:d1:55:52:5d:6a:20:58:
                    80:63:bc:c6:c1:b4:b0:a3:aa:98:d0:71:bf:fe:7b:
                    a4:7e:ac:bb:be:41:d3:1f:12:c7:36:fb:f4:83:2c:
                    8a:96:94:5a:3d:a1:ba:c7:44:52:bc:e9:bd:3b:ee:
                    80:15:81:9e:2d:10:d4:9e:31:c3:89:a1:87:c9:66:
                    99:56:29:02:b2:c4:53:59:86:93:f9:3c:59:c6:d6:
                    fb:8f:a8:1e:cb:6d:14:1b:41:2f:1f:1f:f6:c8:53:
                    79:f8:f9:4b:4c:e2:76:32:39:32:04:4a:17:fb:82:
                    7b:53:f8:2d:e9:5c:6e:22:f9:d7:12:73:ae:2e:83:
                    d8:73:be:a6:38:d6:c3:21:29:3d:28:1b:63:e3:30:
                    57:0f:19:81:f0:c2:22:93:32:44:a6:35:81:dd:72:
                    04:d8:be:3d:29:b7:e5:a5:6b:c5:90:6d:92:d7:b3:
                    ca:e5:db:db:d5:2b:8e:c3:29:54:89:9d:0c:50:1e:
                    8e:34:27:51:f7:b4:69:d5:21:fd:9e:a2:f7:ca:fa:
                    0c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9E:2B:A4:69:8A:DC:10:55:C5:6B:5B:50:E7:D2:D7:EC:D8:57:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/969905e0-1e6f-3ad5-a022-3588cc2beaa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.58.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:03:98:28:d7:c6:9b:59:36:d2:2e:fb:c6:da:91:2f:29:a1:
         63:fc:22:19:a8:9b:bf:7a:f4:14:31:9c:43:f6:26:26:35:ce:
         b0:cf:f7:d3:89:48:0d:0d:16:bf:22:fc:ca:71:29:30:1f:67:
         44:96:8c:65:86:3e:01:a1:37:cb:a1:d2:7b:fe:f7:44:26:09:
         04:40:9b:63:7a:56:70:03:ce:3b:da:79:af:98:f3:12:c7:47:
         5b:c2:74:fd:aa:d9:40:ba:db:fe:99:b5:c1:78:b1:7a:83:19:
         ae:2a:cf:ba:63:2f:a4:38:f3:a0:59:e4:d2:b5:ea:c4:08:c3:
         b2:47:ee:cb:3f:01:83:f3:94:4a:d7:d8:04:3c:33:46:38:14:
         36:d8:e5:46:71:e8:e0:f0:56:a8:b5:22:23:96:f8:fa:ff:a3:
         36:bf:3e:3e:c2:ef:e8:0e:d9:b8:da:4d:51:25:df:5d:fc:94:
         d3:87:26:60:e5:f6:44:0f:17:05:a6:49:ce:cc:98:c1:b2:8b:
         fb:c0:c3:56:be:3a:92:d8:54:e4:a1:e5:1a:18:79:da:44:39:
         8c:54:48:83:e0:3d:3f:a5:ee:cd:5d:19:40:4e:35:9f:ee:45:
         18:89:00:ff:b1:10:56:db:d0:bb:f2:0d:e3:5e:3f:03:ec:6b:
         e5:5c:ec:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0a8DrBot8T85GCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
MjhjZDVmNjAtOTFkYS00MzY2LWFjNWUtNTMzYmY1YmQ0ZTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmroQ3DVkFV2vF0gRbmM/bapCdC68dyzBbDB/
vFpem1BLrIRYT4C/wizxpACBbXv2oWbgkdFVUl1qIFiAY7zGwbSwo6qY0HG//nuk
fqy7vkHTHxLHNvv0gyyKlpRaPaG6x0RSvOm9O+6AFYGeLRDUnjHDiaGHyWaZVikC
ssRTWYaT+TxZxtb7j6gey20UG0EvHx/2yFN5+PlLTOJ2MjkyBEoX+4J7U/gt6Vxu
IvnXEnOuLoPYc76mONbDISk9KBtj4zBXDxmB8MIikzJEpjWB3XIE2L49KbflpWvF
kG2S17PK5dvb1SuOwylUiZ0MUB6ONCdR97Rp1SH9nqL3yvoMewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNWeK6RpitwQVcVrW1Dn0tfs2FedMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOTY5OTA1ZTAtMWU2Zi0z
YWQ1LWEwMjItMzU4OGNjMmJlYWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHuDqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADcDmCjXxptZNtIu+8bakS8poWP8Ihmom7969BQxnEP2JiY1zrDP99OJ
SA0NFr8i/MpxKTAfZ0SWjGWGPgGhN8uh0nv+90QmCQRAm2N6VnADzjvaea+Y8xLH
R1vCdP2q2UC62/6ZtcF4sXqDGa4qz7pjL6Q486BZ5NK16sQIw7JH7ss/AYPzlErX
2AQ8M0Y4FDbY5UZx6ODwVqi1IiOW+Pr/oza/Pj7C7+gO2bjaTVEl3138lNOHJmDl
9kQPFwWmSc7MmMGyi/vAw1a+OpLYVOSh5RoYedpEOYxUSIPgPT+l7s1dGUBONZ/u
RRiJAP+xEFbb0LvyDeNePwPsa+Vc7D4=
-----END CERTIFICATE-----