Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/01fb150d-a072-39ec-b4dd-9952490d8c1a.roa
File:                     01fb150d-a072-39ec-b4dd-9952490d8c1a.roa (raw, json)
Hash identifier:          EqyA0WUDhtckyMD528TlnCm/yAjBvK2iGq2rea4XQlA=
Subject key identifier:   3A:DC:DB:64:C0:1A:B7:0B:5A:59:3E:12:6B:34:F6:38:1E:44:C2:F4
Certificate issuer:       /CN=464cd0d4-6da8-497c-b270-cb658d45f4e8
Certificate serial:       010D0C9F432858495ABEDE2B4963E10F025134C0
Authority key identifier: 4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/01fb150d-a072-39ec-b4dd-9952490d8c1a.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     40788
IP address blocks:        162.247.224.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:de:2b:49:63:e1:0f:02:51:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464cd0d4-6da8-497c-b270-cb658d45f4e8
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=06cc65c0-67cc-4fb1-b53a-bf5ef0260700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d0:d1:ee:42:88:8a:de:c3:28:bf:94:d9:e6:
                    7b:fc:b5:1b:bb:5d:76:04:12:d8:11:c1:63:9c:44:
                    13:d0:29:54:86:2a:36:35:4d:56:32:03:dc:1c:26:
                    c8:0b:ba:23:00:c4:66:e6:f7:62:c2:09:de:e3:1f:
                    24:74:d9:29:98:b1:87:65:8b:0a:1b:c2:44:24:54:
                    a1:ff:22:ee:47:df:5a:c7:d3:48:df:f1:e2:e6:cd:
                    d5:ee:b7:d3:76:73:e6:45:f3:bc:1a:a8:99:ea:ed:
                    a8:3f:52:56:5f:4a:32:dd:29:e8:6e:83:4b:cd:91:
                    e1:9b:fc:e5:bb:9f:d6:25:b7:b6:35:bc:6f:35:a3:
                    c9:bb:d4:e2:5e:f6:72:ef:2e:3a:30:ba:ad:53:28:
                    11:62:9a:89:6b:b5:6d:50:94:74:47:56:a9:45:bf:
                    de:05:f4:b2:fa:87:e1:d1:e5:8b:7b:2b:08:4f:81:
                    08:b5:ea:de:31:f9:6b:93:fc:84:ee:df:9c:b0:5f:
                    63:8a:d9:99:2a:f9:6f:fc:5e:c5:0a:2e:90:64:82:
                    8d:fc:34:9c:7b:17:01:99:9c:55:78:56:c5:aa:ef:
                    36:d4:cf:1a:e9:f1:b9:f3:ad:41:09:18:a2:23:50:
                    32:1a:d3:b1:fc:dd:d0:bc:89:b5:eb:66:25:1e:27:
                    e1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DC:DB:64:C0:1A:B7:0B:5A:59:3E:12:6B:34:F6:38:1E:44:C2:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/01fb150d-a072-39ec-b4dd-9952490d8c1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.crl

            X509v3 Authority Key Identifier:
                keyid:4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:0c:6a:37:41:0c:76:8d:91:df:ef:01:54:54:48:59:14:52:
         b1:32:b4:d4:76:44:28:09:f9:46:e0:f2:0e:da:c4:15:f9:7a:
         f0:ac:db:df:21:6f:ad:2e:78:6c:82:4d:a0:4f:4b:c9:6b:d6:
         1f:7a:53:5d:2a:79:03:ba:1f:0c:07:98:51:c6:de:08:5c:dc:
         ad:af:89:47:08:ba:9e:71:9e:15:df:f1:e8:91:d8:b9:ab:f3:
         a9:7f:3d:05:9b:74:ba:36:04:5d:60:9a:65:84:68:ca:06:41:
         ef:3d:71:88:d4:bf:b3:2e:cc:cb:87:68:60:02:66:93:da:a8:
         bb:f4:a3:35:08:df:ab:91:aa:6d:82:83:aa:ee:45:6c:56:b6:
         5f:bc:19:f4:1d:23:f0:ac:1c:b6:88:83:1d:a7:79:af:21:44:
         f6:74:df:a9:74:6a:88:7d:ff:61:88:9a:ac:80:45:e2:f3:79:
         dc:59:5a:91:ae:19:23:b9:1c:e1:fd:38:4c:05:e2:02:5f:1c:
         e6:d6:32:7e:ce:0e:36:f4:90:e7:c0:ae:40:89:b2:35:a4:be:
         f3:18:53:60:04:39:5b:05:12:14:73:4a:c7:b9:5d:fc:57:4d:
         f3:55:d9:e9:21:a9:49:e3:94:25:af:6b:b1:e0:b9:93:e5:c8:
         93:2a:f0:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavt4rSWPhDwJRNMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY0Y2QwZDQtNmRhOC00OTdjLWIyNzAtY2I2NThkNDVm
NGU4MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk
MDZjYzY1YzAtNjdjYy00ZmIxLWI1M2EtYmY1ZWYwMjYwNzAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutDR7kKIit7DKL+U2eZ7/LUbu112BBLYEcFj
nEQT0ClUhio2NU1WMgPcHCbIC7ojAMRm5vdiwgne4x8kdNkpmLGHZYsKG8JEJFSh
/yLuR99ax9NI3/Hi5s3V7rfTdnPmRfO8GqiZ6u2oP1JWX0oy3SnoboNLzZHhm/zl
u5/WJbe2NbxvNaPJu9TiXvZy7y46MLqtUygRYpqJa7VtUJR0R1apRb/eBfSy+ofh
0eWLeysIT4EItereMflrk/yE7t+csF9jitmZKvlv/F7FCi6QZIKN/DScexcBmZxV
eFbFqu821M8a6fG5861BCRiiI1AyGtOx/N3QvIm162YlHifhxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDrc22TAGrcLWlk+Ems09jgeRML0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80NjRj
ZDBkNC02ZGE4LTQ5N2MtYjI3MC1jYjY1OGQ0NWY0ZTgvMDFmYjE1MGQtYTA3Mi0z
OWVjLWI0ZGQtOTk1MjQ5MGQ4YzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDY0Y2QwZDQtNmRhOC00OTdjLWIy
NzAtY2I2NThkNDVmNGU4LzQ2NGNkMGQ0LTZkYTgtNDk3Yy1iMjcwLWNiNjU4ZDQ1
ZjRlOC5jcmwwHwYDVR0jBBgwFoAUS39fShDtIwmAi5OI16u8VyHwb6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi80NjRjZDBkNC02ZGE4LTQ5N2MtYjI3MC1jYjY1
OGQ0NWY0ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovfgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHkMajdBDHaNkd/vAVRUSFkUUrEytNR2RCgJ+Ubg8g7axBX5evCs298h
b60ueGyCTaBPS8lr1h96U10qeQO6HwwHmFHG3ghc3K2viUcIup5xnhXf8eiR2Lmr
86l/PQWbdLo2BF1gmmWEaMoGQe89cYjUv7MuzMuHaGACZpPaqLv0ozUI36uRqm2C
g6ruRWxWtl+8GfQdI/CsHLaIgx2nea8hRPZ036l0aoh9/2GImqyAReLzedxZWpGu
GSO5HOH9OEwF4gJfHObWMn7ODjb0kOfArkCJsjWkvvMYU2AEOVsFEhRzSse5XfxX
TfNV2ekhqUnjlCWva7HguZPlyJMq8Gc=
-----END CERTIFICATE-----