Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/6c8d9f74-f79f-36f5-9aff-f8fce7d1e2bc.roa
File:                     6c8d9f74-f79f-36f5-9aff-f8fce7d1e2bc.roa (raw, json)
Hash identifier:          JKyfb9pUS5QLF2RMMyJFpWxsom/i90RSk2ewyeoSX9M=
Subject key identifier:   14:8C:22:50:85:C8:BF:2D:11:6A:40:8B:28:17:E5:26:93:E9:96:37
Certificate issuer:       /CN=974309dc-20f5-4894-9707-f2e446573ea1
Certificate serial:       010D0C9F4328584981D45252DFA28278AEB760A0
Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/6c8d9f74-f79f-36f5-9aff-f8fce7d1e2bc.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     401587
IP address blocks:        23.131.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:52:52:df:a2:82:78:ae:b7:60:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=e5317ca5-1d67-4345-8c07-d166f0c38f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d0:68:49:99:c2:95:7c:cb:51:a9:c7:9d:a4:
                    01:fb:c6:96:53:a4:24:03:12:5d:a6:80:ce:34:87:
                    ba:cd:9c:58:e4:1b:55:f7:9c:ce:53:0a:35:c4:9a:
                    7d:32:32:0a:b5:18:b5:a7:f1:39:d3:92:bc:69:66:
                    09:99:b9:aa:4c:83:59:d2:d0:73:58:b4:79:6d:9e:
                    b7:9c:b5:b3:05:86:75:65:8d:d2:33:c8:02:04:06:
                    42:13:23:27:5a:59:b5:25:2d:1b:1a:8e:47:cc:22:
                    2e:b1:dd:c2:99:3e:e1:7d:d3:55:a6:67:cf:9c:37:
                    5a:a1:c5:60:5d:0b:b2:88:d8:fd:e2:22:8c:be:15:
                    c2:b9:c6:3e:0a:ba:44:2f:ba:7a:4f:87:b5:5e:e8:
                    b6:7f:5b:66:ab:47:5d:94:75:3b:75:9d:0d:c4:4c:
                    da:d7:f5:f1:45:a8:95:81:3a:5f:d9:0d:09:62:30:
                    d9:6e:cb:8a:1a:00:25:51:d9:7f:2c:4c:ae:8e:8c:
                    cd:1c:2b:3c:6d:67:a4:35:ae:c6:c7:8d:51:41:87:
                    4e:d7:96:84:77:22:e6:8c:5b:12:90:4c:e3:b4:b9:
                    8e:eb:60:cc:25:a5:8e:99:ce:87:d0:f6:ef:7c:55:
                    92:15:88:83:45:4a:35:f0:63:27:2d:c1:d7:8b:1c:
                    24:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8C:22:50:85:C8:BF:2D:11:6A:40:8B:28:17:E5:26:93:E9:96:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/6c8d9f74-f79f-36f5-9aff-f8fce7d1e2bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl

            X509v3 Authority Key Identifier:
                keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:a7:e0:28:ca:82:d2:b0:51:12:48:cb:da:0c:bf:81:6e:42:
         65:41:e8:17:39:ca:18:f1:62:c3:52:ff:02:02:95:88:25:4b:
         ae:d1:c0:45:41:2b:2b:70:c2:ae:92:d0:2e:e8:02:76:24:bf:
         8e:0d:16:a6:e8:c0:0d:1a:5f:cb:90:80:32:53:9e:9a:b3:79:
         bc:fa:b0:6f:bb:42:83:b4:ae:da:6a:3c:7f:aa:1b:c1:a8:d5:
         88:a2:8d:a8:1e:f0:1f:40:d3:6f:5d:e1:0d:98:2b:01:e9:47:
         c3:e5:ca:8f:32:98:4d:ca:9e:3c:e6:9d:fa:de:78:a7:e3:e5:
         f9:6d:1c:54:be:d6:82:33:12:0d:3d:b8:17:c2:c5:c6:ab:7c:
         8e:c9:ad:74:e6:59:67:58:f6:d8:20:80:08:bd:91:bb:d1:d6:
         13:d7:14:44:84:6e:fe:44:ad:0a:fa:d1:7c:3e:99:d5:39:73:
         38:80:1c:03:8c:a1:0d:6b:66:d9:4b:66:81:22:8d:fb:11:10:
         38:0f:e2:4e:cb:b6:44:64:6e:dc:9b:bd:c3:29:0d:05:43:08:
         3c:a5:4d:0a:10:1d:aa:4f:b4:37:76:47:b3:b6:56:90:0a:6b:
         89:f4:61:9e:40:2b:48:5a:93:ab:52:31:98:33:6f:c5:2d:1f:
         c7:0f:1f:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmB1FJS36KCeK63YKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTc0MzA5ZGMtMjBmNS00ODk0LTk3MDctZjJlNDQ2NTcz
ZWExMB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk
ZTUzMTdjYTUtMWQ2Ny00MzQ1LThjMDctZDE2NmYwYzM4ZjE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidBoSZnClXzLUanHnaQB+8aWU6QkAxJdpoDO
NIe6zZxY5BtV95zOUwo1xJp9MjIKtRi1p/E505K8aWYJmbmqTINZ0tBzWLR5bZ63
nLWzBYZ1ZY3SM8gCBAZCEyMnWlm1JS0bGo5HzCIusd3CmT7hfdNVpmfPnDdaocVg
XQuyiNj94iKMvhXCucY+CrpEL7p6T4e1Xui2f1tmq0ddlHU7dZ0NxEza1/XxRaiV
gTpf2Q0JYjDZbsuKGgAlUdl/LEyujozNHCs8bWekNa7Gx41RQYdO15aEdyLmjFsS
kEzjtLmO62DMJaWOmc6H0PbvfFWSFYiDRUo18GMnLcHXixwkgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBSMIlCFyL8tEWpAiygX5SaT6ZY3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NzQz
MDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0NDY1NzNlYTEvNmM4ZDlmNzQtZjc5Zi0z
NmY1LTlhZmYtZjhmY2U3ZDFlMmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTc0MzA5ZGMtMjBmNS00ODk0LTk3
MDctZjJlNDQ2NTczZWExLzk3NDMwOWRjLTIwZjUtNDg5NC05NzA3LWYyZTQ0NjU3
M2VhMS5jcmwwHwYDVR0jBBgwFoAU8wpyK8l5Fe1rdy/fvqwHji6l1eEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85NzQzMDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0
NDY1NzNlYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4NEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAqn4CjKgtKwURJIy9oMv4FuQmVB6Bc5yhjxYsNS/wIClYglS67RwEVB
Kytwwq6S0C7oAnYkv44NFqbowA0aX8uQgDJTnpqzebz6sG+7QoO0rtpqPH+qG8Go
1Yiijage8B9A029d4Q2YKwHpR8Plyo8ymE3KnjzmnfreeKfj5fltHFS+1oIzEg09
uBfCxcarfI7JrXTmWWdY9tgggAi9kbvR1hPXFESEbv5ErQr60Xw+mdU5cziAHAOM
oQ1rZtlLZoEijfsREDgP4k7LtkRkbtybvcMpDQVDCDylTQoQHapPtDd2R7O2VpAK
a4n0YZ5AK0hak6tSMZgzb8UtH8cPH0Q=
-----END CERTIFICATE-----