Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ed5184da-8a1d-3591-9704-2df6c01524fb.roa
File:                     ed5184da-8a1d-3591-9704-2df6c01524fb.roa (raw, json)
Hash identifier:          8e08A24Tb5pyYQjWanCr7mK570yrazUC+lNAn6+LkG8=
Subject key identifier:   1D:12:F0:A9:45:9F:70:5C:D4:02:EC:01:55:CE:8B:DF:3D:29:ED:F7
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D15124E81D42751D62F000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ed5184da-8a1d-3591-9704-2df6c01524fb.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20001
IP address blocks:        74.87.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:51:24:e8:1d:42:75:1d:62:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=367d58c7-4c07-477d-9989-b9eb659f5056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3d:cb:ad:dc:9f:1d:96:2a:07:13:8c:9d:4d:
                    32:8f:d0:26:4c:ef:d5:f0:94:d5:0c:bc:9e:5b:31:
                    6d:7c:bf:35:2b:4f:44:23:90:9e:44:15:0d:4c:db:
                    a8:3c:3b:b1:40:74:2c:53:a1:81:44:54:b6:43:65:
                    03:ac:6b:12:48:b3:37:12:03:3f:37:23:72:6b:11:
                    2b:57:1d:7d:14:3f:ce:50:bb:75:99:1b:c1:8d:e7:
                    e2:a2:f3:b8:19:7e:04:91:2b:ed:45:60:dc:14:a0:
                    20:54:76:3c:d9:fa:5d:d8:c3:84:e6:a8:cb:09:a3:
                    74:c1:b6:44:36:dd:cd:1a:a8:f4:96:e5:b3:f8:93:
                    33:ed:ef:04:a6:8f:10:bf:52:8f:64:d3:c5:46:5b:
                    72:9e:3c:de:35:3f:af:af:e4:68:85:f7:c8:6c:6d:
                    e3:51:b5:d2:cc:66:cb:38:10:06:dc:b7:95:c0:66:
                    37:1b:5a:0a:db:11:df:8b:57:07:ac:fd:0e:17:69:
                    bd:e2:8a:ab:88:aa:8c:a0:12:43:1d:63:bb:2e:e7:
                    29:d8:dc:77:2f:14:36:31:61:c4:4f:73:49:32:a3:
                    53:d2:b3:73:46:70:0e:62:4f:c3:46:cf:a2:b3:a6:
                    09:f2:7e:e2:0a:e1:bc:41:d6:39:ea:32:9b:ab:6e:
                    ca:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:12:F0:A9:45:9F:70:5C:D4:02:EC:01:55:CE:8B:DF:3D:29:ED:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ed5184da-8a1d-3591-9704-2df6c01524fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:4e:96:2f:57:88:86:b2:96:8a:33:90:0c:1e:ba:94:51:a1:
         3a:43:88:d9:a1:bb:03:45:a3:9d:29:4d:dc:37:91:e8:60:b9:
         aa:ab:76:05:79:85:f5:a9:e7:44:68:78:33:c3:65:37:c8:eb:
         4b:a5:d9:e8:6e:29:78:11:e4:f2:8d:3e:78:2a:3d:6c:5f:ae:
         36:5d:28:15:f4:53:16:70:3a:bf:59:dc:56:7c:89:42:3e:86:
         35:a8:d5:6a:de:20:b5:87:55:69:23:73:68:72:ce:26:b4:a1:
         63:a6:e0:c9:35:27:3f:4e:3d:00:0a:86:fd:31:bc:c5:b1:01:
         53:86:d7:7f:58:f6:30:04:05:85:dd:fd:fb:18:b1:01:fa:b8:
         22:3c:02:05:da:b8:5c:b3:7e:6f:64:9a:c3:23:3f:2f:f1:57:
         2f:08:5d:77:32:26:6f:b0:e0:37:3e:58:da:ca:b5:c0:f5:f8:
         8c:2f:5d:3a:ee:7a:9b:3f:20:b7:71:8d:60:3c:a6:46:d6:31:
         73:cb:eb:3c:d3:52:61:fb:a7:56:31:26:13:89:b5:6d:69:9a:
         98:04:f4:60:55:53:2f:0d:c8:92:e1:68:e5:27:a1:d0:86:05:
         29:1c:07:b2:08:16:24:12:bd:11:95:0e:de:b6:d8:5a:f5:a6:
         75:97:81:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0VEk6B1CdR1i8AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
MzY3ZDU4YzctNGMwNy00NzdkLTk5ODktYjllYjY1OWY1MDU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz3LrdyfHZYqBxOMnU0yj9AmTO/V8JTVDLye
WzFtfL81K09EI5CeRBUNTNuoPDuxQHQsU6GBRFS2Q2UDrGsSSLM3EgM/NyNyaxEr
Vx19FD/OULt1mRvBjefiovO4GX4EkSvtRWDcFKAgVHY82fpd2MOE5qjLCaN0wbZE
Nt3NGqj0luWz+JMz7e8Epo8Qv1KPZNPFRltynjzeNT+vr+RohffIbG3jUbXSzGbL
OBAG3LeVwGY3G1oK2xHfi1cHrP0OF2m94oqriKqMoBJDHWO7Lucp2Nx3LxQ2MWHE
T3NJMqNT0rNzRnAOYk/DRs+is6YJ8n7iCuG8QdY56jKbq27KywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB0S8KlFn3Bc1ALsAVXOi989Ke33MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZWQ1MTg0ZGEtOGExZC0z
NTkxLTk3MDQtMmRmNmMwMTUyNGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASledMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE5Oli9XiIayloozkAweupRRoTpDiNmhuwNFo50pTdw3kehguaqrdgV5
hfWp50RoeDPDZTfI60ul2ehuKXgR5PKNPngqPWxfrjZdKBX0UxZwOr9Z3FZ8iUI+
hjWo1WreILWHVWkjc2hyzia0oWOm4Mk1Jz9OPQAKhv0xvMWxAVOG139Y9jAEBYXd
/fsYsQH6uCI8AgXauFyzfm9kmsMjPy/xVy8IXXcyJm+w4Dc+WNrKtcD1+IwvXTru
eps/ILdxjWA8pkbWMXPL6zzTUmH7p1YxJhOJtW1pmpgE9GBVUy8NyJLhaOUnodCG
BSkcB7IIFiQSvRGVDt622Fr1pnWXgdI=
-----END CERTIFICATE-----