Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/99f3809d-ec71-387f-b47f-d40d61add1c9.roa
File:                     99f3809d-ec71-387f-b47f-d40d61add1c9.roa (raw, json)
Hash identifier:          W1gHzwI3R6SWiI9ju6HOknZ5PYiF59I4ofAEaxZx4/w=
Subject key identifier:   4F:2D:3D:76:91:C3:26:E5:7B:5E:39:39:3F:17:B8:38:FE:89:DA:BB
Certificate issuer:       /CN=25d202df-6bec-4085-8c1b-d1f141557cfe
Certificate serial:       010D0C9F43285849806F2059BDB57B1197DDFE00
Authority key identifier: 62:29:36:6F:6F:B8:51:FB:6E:F9:A7:A1:71:11:EB:58:47:04:11:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/99f3809d-ec71-387f-b47f-d40d61add1c9.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     211051
IP address blocks:        23.144.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:20:59:bd:b5:7b:11:97:dd:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d202df-6bec-4085-8c1b-d1f141557cfe
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=d131dc3e-66db-457d-8aae-55340467fcd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b5:bf:a4:71:11:8f:16:09:79:53:fe:15:0c:
                    c1:f5:4c:02:b1:94:34:07:4b:82:53:ef:9b:ae:58:
                    62:45:8e:46:48:6e:f0:29:f6:d1:92:c1:92:d1:c8:
                    9e:f1:fe:86:4b:52:9f:4a:63:75:87:03:86:7a:26:
                    54:8c:22:b7:60:f4:73:b8:0d:19:c0:52:c4:57:b3:
                    34:ed:80:e2:10:27:31:23:7b:d3:26:b4:85:d7:90:
                    d5:b7:ee:80:f8:27:c7:3c:11:99:64:05:79:6d:46:
                    1e:61:55:16:40:5b:d7:5f:ee:03:72:b1:f6:b2:b0:
                    7d:f8:cd:37:0e:8d:f1:b2:65:f3:83:ea:cf:66:6d:
                    ee:f8:e7:95:d9:bc:cf:00:a4:bb:4e:c7:3f:d1:11:
                    bf:34:8c:0f:9c:6b:c0:58:55:1c:6f:a0:0f:e3:b9:
                    cf:6a:eb:ec:e3:5f:a0:fd:3d:6b:d0:56:75:0b:57:
                    8f:6d:a0:b4:76:41:9c:2c:8f:1c:9a:09:9c:0d:c0:
                    30:7b:c1:cd:fe:95:98:c3:f7:75:6b:0d:fe:bc:d5:
                    64:89:05:bb:02:16:67:8e:60:6b:05:dc:d1:cd:0b:
                    8e:da:a7:9c:4e:cc:39:cc:57:63:57:b4:28:f8:a8:
                    97:af:98:0d:9a:83:e0:6c:74:0b:38:7b:36:d9:5d:
                    46:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2D:3D:76:91:C3:26:E5:7B:5E:39:39:3F:17:B8:38:FE:89:DA:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/99f3809d-ec71-387f-b47f-d40d61add1c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/25d202df-6bec-4085-8c1b-d1f141557cfe.crl

            X509v3 Authority Key Identifier:
                keyid:62:29:36:6F:6F:B8:51:FB:6E:F9:A7:A1:71:11:EB:58:47:04:11:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:67:9a:a4:f0:19:1b:ee:04:76:d3:c5:93:7d:bb:61:26:e2:
         7e:4b:af:4b:a0:ec:00:44:53:eb:96:d8:3f:42:87:05:5a:ee:
         45:f7:3f:a8:68:79:6c:fa:68:16:4d:e6:51:28:a8:12:04:7f:
         07:ed:1a:2e:0e:bc:11:2b:fb:e7:05:f3:10:57:2b:45:0f:61:
         3c:c6:a4:43:34:60:18:3c:a5:8c:04:07:84:c7:5f:ec:14:32:
         5b:e9:10:94:7f:ba:62:df:44:c4:08:a9:71:45:41:39:22:22:
         c8:82:95:dd:4b:f6:10:f4:d1:85:24:0e:0a:18:e0:dc:37:72:
         d4:f5:af:e8:a6:67:64:9e:a5:f3:67:b1:6e:3b:2b:60:07:e5:
         6f:1c:ff:76:e2:95:f6:08:a4:83:f1:a7:26:74:c2:23:c6:67:
         8c:bb:be:94:01:f7:54:b0:51:79:a3:08:96:e5:5e:48:4e:46:
         60:1d:8e:ff:b1:85:11:00:c1:42:a7:8b:71:d0:f3:29:8c:39:
         3c:01:c0:2b:49:5f:b2:64:df:9b:b7:85:4b:c5:b4:7e:f9:97:
         2c:97:41:b0:45:24:27:0a:5f:ef:04:4c:df:b8:00:0b:62:d2:
         53:1e:7f:7c:7a:e3:25:55:e8:b4:8f:b4:70:2a:e7:ab:b1:d2:
         98:b0:62:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbyBZvbV7EZfd/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjVkMjAyZGYtNmJlYy00MDg1LThjMWItZDFmMTQxNTU3
Y2ZlMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk
ZDEzMWRjM2UtNjZkYi00NTdkLThhYWUtNTUzNDA0NjdmY2Q0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbW/pHERjxYJeVP+FQzB9UwCsZQ0B0uCU++b
rlhiRY5GSG7wKfbRksGS0cie8f6GS1KfSmN1hwOGeiZUjCK3YPRzuA0ZwFLEV7M0
7YDiECcxI3vTJrSF15DVt+6A+CfHPBGZZAV5bUYeYVUWQFvXX+4DcrH2srB9+M03
Do3xsmXzg+rPZm3u+OeV2bzPAKS7Tsc/0RG/NIwPnGvAWFUcb6AP47nPauvs41+g
/T1r0FZ1C1ePbaC0dkGcLI8cmgmcDcAwe8HN/pWYw/d1aw3+vNVkiQW7AhZnjmBr
BdzRzQuO2qecTsw5zFdjV7Qo+KiXr5gNmoPgbHQLOHs22V1GNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE8tPXaRwyble145OT8XuDj+idq7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNWQy
MDJkZi02YmVjLTQwODUtOGMxYi1kMWYxNDE1NTdjZmUvOTlmMzgwOWQtZWM3MS0z
ODdmLWI0N2YtZDQwZDYxYWRkMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjVkMjAyZGYtNmJlYy00MDg1LThj
MWItZDFmMTQxNTU3Y2ZlLzI1ZDIwMmRmLTZiZWMtNDA4NS04YzFiLWQxZjE0MTU1
N2NmZS5jcmwwHwYDVR0jBBgwFoAUYik2b2+4Uftu+aehcRHrWEcEEckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yNWQyMDJkZi02YmVjLTQwODUtOGMxYi1kMWYx
NDE1NTdjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5DoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADFnmqTwGRvuBHbTxZN9u2Em4n5Lr0ug7ABEU+uW2D9ChwVa7kX3P6ho
eWz6aBZN5lEoqBIEfwftGi4OvBEr++cF8xBXK0UPYTzGpEM0YBg8pYwEB4THX+wU
MlvpEJR/umLfRMQIqXFFQTkiIsiCld1L9hD00YUkDgoY4Nw3ctT1r+imZ2SepfNn
sW47K2AH5W8c/3bilfYIpIPxpyZ0wiPGZ4y7vpQB91SwUXmjCJblXkhORmAdjv+x
hREAwUKni3HQ8ymMOTwBwCtJX7Jk35u3hUvFtH75lyyXQbBFJCcKX+8ETN+4AAti
0lMef3x64yVV6LSPtHAq56ux0piwYm0=
-----END CERTIFICATE-----