Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa
File:                     d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa (raw, json)
Hash identifier:          1saxS5igaK20pHQckC9gnREXJs69KGb1F3GE5dq/+WE=
Subject key identifier:   BA:8F:2B:B6:CC:EF:95:58:00:6E:9C:A0:B0:DC:8D:A3:F6:0A:E9:66
Certificate issuer:       /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial:       010D0C9F432858493243E067289D168454DEAB00
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     13213
IP address blocks:        209.236.72.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:e0:67:28:9d:16:84:54:de:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=6aac4c7e-a126-4038-92d2-3a41242bb59f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9d:dd:c5:cf:bf:c0:b4:0f:53:aa:e5:c8:a8:
                    11:fd:f2:13:b8:16:07:ae:02:59:2d:29:79:b6:ef:
                    f7:65:b5:18:f6:78:bc:c1:e8:20:de:cb:4e:29:c4:
                    23:7f:f5:ad:7f:73:34:97:6e:4b:7e:ba:6f:4f:72:
                    ce:fb:8b:df:17:6d:cf:86:11:b6:92:51:06:4c:d7:
                    dc:e3:48:8e:3f:03:56:ff:c1:5e:1d:e3:8f:63:6e:
                    1f:2a:5d:6e:75:b4:73:63:8c:2f:89:9a:01:87:c4:
                    30:67:02:95:61:c9:6a:14:e9:2d:fc:97:c4:ea:ef:
                    f8:ea:59:06:3b:73:86:0b:69:c1:6d:46:69:3b:86:
                    69:97:31:59:a3:85:0a:2a:eb:25:6f:11:76:ae:3b:
                    6e:9c:ed:2d:84:23:be:36:06:2b:64:e0:23:8a:bd:
                    27:9e:39:7e:ed:c2:16:27:ba:8f:32:d8:6f:19:62:
                    e7:00:c9:4f:4a:9b:23:92:2c:46:1c:a0:d8:a7:a3:
                    21:d7:b3:fe:70:25:41:3e:9e:3e:df:9b:e5:d5:59:
                    72:67:11:04:f6:90:65:ff:19:f0:8c:2c:f5:d7:2d:
                    66:83:01:e0:04:91:d4:18:31:ef:e3:bf:4a:55:b4:
                    cd:ec:65:63:e8:ed:b3:62:7c:df:48:00:64:b7:1c:
                    d4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8F:2B:B6:CC:EF:95:58:00:6E:9C:A0:B0:DC:8D:A3:F6:0A:E9:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl

            X509v3 Authority Key Identifier:
                keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:07:97:2b:80:6f:07:e4:85:8a:58:5b:3b:3f:23:78:d9:0c:
         9a:9c:45:ea:8d:0e:f4:04:84:38:0b:cd:76:0d:7b:f7:ca:29:
         bd:3c:98:36:43:f1:e4:d3:06:bf:dd:91:c0:f0:28:de:7f:76:
         0e:ca:44:7d:55:01:2f:f5:a6:52:13:07:3b:c9:fb:e8:12:38:
         2a:0d:a5:fa:d5:d8:9f:2e:4a:37:0c:33:67:fb:73:5c:6c:24:
         20:7e:06:b3:b1:a7:26:30:d2:bc:b2:d7:c9:be:90:87:9a:9c:
         d5:24:dc:5c:c1:2e:ec:62:63:e0:de:00:37:3a:14:3a:36:85:
         1f:a7:c4:20:1c:f1:14:f1:65:c2:18:96:62:33:b2:39:4e:10:
         31:4a:8c:11:6e:e2:42:15:ce:c6:35:cf:9e:f7:d0:7c:38:e8:
         4a:96:cb:eb:a2:de:08:62:06:7a:ba:3b:2d:dd:2e:96:2d:22:
         29:e7:3a:ba:8c:74:8c:79:7b:60:2f:02:a1:34:a9:48:de:9f:
         b2:a0:fc:44:e5:92:2e:86:c0:30:6d:11:6e:5c:90:d5:f5:fd:
         e7:77:a4:75:73:82:ce:af:df:c5:6c:69:57:95:af:aa:d3:76:
         47:67:43:8f:ee:4b:86:fb:9d:5b:ef:db:d6:08:a2:55:c5:16:
         87:99:39:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ+BnKJ0WhFTeqwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5
YWFlMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk
NmFhYzRjN2UtYTEyNi00MDM4LTkyZDItM2E0MTI0MmJiNTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp3dxc+/wLQPU6rlyKgR/fITuBYHrgJZLSl5
tu/3ZbUY9ni8wegg3stOKcQjf/Wtf3M0l25LfrpvT3LO+4vfF23PhhG2klEGTNfc
40iOPwNW/8FeHeOPY24fKl1udbRzY4wviZoBh8QwZwKVYclqFOkt/JfE6u/46lkG
O3OGC2nBbUZpO4ZplzFZo4UKKuslbxF2rjtunO0thCO+NgYrZOAjir0nnjl+7cIW
J7qPMthvGWLnAMlPSpsjkixGHKDYp6Mh17P+cCVBPp4+35vl1VlyZxEE9pBl/xnw
jCz11y1mgwHgBJHUGDHv479KVbTN7GVj6O2zYnzfSABktxzUlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLqPK7bM75VYAG6coLDcjaP2CulmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh
OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvZDBkNzZjMWItYTNmMS0z
NDI0LTlhZDgtMWFkZmYyY2Q5Y2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh
OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl
OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh
ZGI3ZTlhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0exIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHEHlyuAbwfkhYpYWzs/I3jZDJqcReqNDvQEhDgLzXYNe/fKKb08mDZD
8eTTBr/dkcDwKN5/dg7KRH1VAS/1plITBzvJ++gSOCoNpfrV2J8uSjcMM2f7c1xs
JCB+BrOxpyYw0ryy18m+kIeanNUk3FzBLuxiY+DeADc6FDo2hR+nxCAc8RTxZcIY
lmIzsjlOEDFKjBFu4kIVzsY1z5730Hw46EqWy+ui3ghiBnq6Oy3dLpYtIinnOrqM
dIx5e2AvAqE0qUjen7Kg/ETlki6GwDBtEW5ckNX1/ed3pHVzgs6v38VsaVeVr6rT
dkdnQ4/uS4b7nVvv29YIolXFFoeZOa4=
-----END CERTIFICATE-----