Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/f980010a-1876-3c4d-a37b-562fc134b52b.roa
File:                     f980010a-1876-3c4d-a37b-562fc134b52b.roa (raw, json)
Hash identifier:          wR6NTiMRoCJbicdR6vbX62Hs/KdhamuBerp8KK2wET4=
Subject key identifier:   FB:87:1B:B8:C5:42:84:0F:96:A9:EF:DF:67:F2:49:5F:3A:C8:04:31
Certificate issuer:       /CN=464cd0d4-6da8-497c-b270-cb658d45f4e8
Certificate serial:       010D0C9F432858495ABEDE385349396180330680
Authority key identifier: 4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/f980010a-1876-3c4d-a37b-562fc134b52b.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     40788
IP address blocks:        173.247.128.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:de:38:53:49:39:61:80:33:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464cd0d4-6da8-497c-b270-cb658d45f4e8
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=db898a34-0863-40e5-8e03-a4a4d7037c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:57:6a:6b:78:b9:38:77:9a:c5:25:30:28:d2:
                    d7:5a:ca:1c:dc:28:c2:ec:b6:57:79:68:87:bf:fc:
                    ff:55:77:1f:0b:fc:b5:f8:68:c5:5d:2e:27:3a:2c:
                    dc:3f:9e:b6:3e:20:1a:11:d0:02:a1:e7:e6:68:78:
                    76:fc:b0:ee:66:9a:5a:e1:5f:bc:9e:e2:43:2f:53:
                    af:df:96:d4:e4:7c:f9:48:2c:99:70:e8:a4:df:1b:
                    13:11:29:53:bd:e6:52:ed:72:48:9e:1c:d5:5a:5d:
                    e4:f8:3f:79:5a:f0:92:33:ca:27:b8:79:38:3d:c9:
                    4b:93:d5:30:46:d7:3e:be:2e:b7:36:16:04:38:1f:
                    c6:77:8c:e7:89:ab:a7:8d:55:02:85:db:f6:d1:a9:
                    7f:ff:0e:c6:6d:5e:4d:f2:2c:3a:05:16:40:c2:e7:
                    44:74:6e:70:75:d0:36:87:ca:06:19:9e:89:60:7d:
                    b7:2d:1a:83:e1:b1:18:85:e7:7b:ee:fc:99:4f:43:
                    4d:2c:d6:51:6b:1b:65:bc:92:ad:48:46:f2:51:cc:
                    c5:77:ce:0e:47:48:ec:9f:4b:95:c2:45:22:c9:44:
                    b0:df:e5:af:07:ef:91:4d:be:67:b2:b6:b7:3a:2f:
                    25:fa:83:2a:35:76:28:5d:27:30:a7:57:fd:46:4e:
                    ee:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:87:1B:B8:C5:42:84:0F:96:A9:EF:DF:67:F2:49:5F:3A:C8:04:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/f980010a-1876-3c4d-a37b-562fc134b52b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.crl

            X509v3 Authority Key Identifier:
                keyid:4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:5f:e4:2a:24:22:a2:9d:9e:04:bc:6c:d9:8d:b8:8b:35:4e:
         50:94:16:63:45:23:06:8a:b0:c6:63:01:ea:6e:ba:7c:3a:a4:
         8c:83:71:f6:39:95:a6:c8:fe:f7:e6:a8:00:f1:4c:bf:fa:8a:
         4f:c1:da:c9:04:cb:8e:33:d5:db:03:26:bb:f3:b5:bd:08:7c:
         4f:fd:9a:47:29:d5:71:7c:28:60:bf:94:7a:55:32:f1:06:b3:
         bb:4a:17:03:cb:b8:b1:c2:a9:b6:1b:d0:4a:cf:a4:88:05:c0:
         1e:1c:2e:07:f7:90:10:bf:a1:6a:98:51:1c:b3:23:74:b0:fc:
         8a:db:ee:5b:b7:a6:c3:5b:f0:62:a9:8a:f5:83:26:69:17:46:
         5f:98:e3:f0:48:51:86:f9:35:7b:6e:3b:ee:31:ba:1d:5b:d0:
         86:54:81:47:3f:9a:fc:f1:41:81:ac:05:c7:85:bb:cc:e1:8f:
         08:22:03:fe:ce:37:23:fd:ce:96:1c:7c:1d:1a:14:04:99:c5:
         bc:ab:fc:db:0f:a6:8e:83:fd:e6:26:ca:76:d6:f3:fd:9c:f5:
         d4:7b:e6:8a:50:63:da:ad:2b:98:0c:b4:65:ba:fd:29:46:39:
         72:89:a1:f4:ad:9f:bc:97:8d:76:c8:d8:0e:10:eb:d3:2f:a2:
         55:16:ed:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavt44U0k5YYAzBoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY0Y2QwZDQtNmRhOC00OTdjLWIyNzAtY2I2NThkNDVm
NGU4MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk
ZGI4OThhMzQtMDg2My00MGU1LThlMDMtYTRhNGQ3MDM3YzAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgldqa3i5OHeaxSUwKNLXWsoc3CjC7LZXeWiH
v/z/VXcfC/y1+GjFXS4nOizcP562PiAaEdACoefmaHh2/LDuZppa4V+8nuJDL1Ov
35bU5Hz5SCyZcOik3xsTESlTveZS7XJInhzVWl3k+D95WvCSM8onuHk4PclLk9Uw
Rtc+vi63NhYEOB/Gd4zniaunjVUChdv20al//w7GbV5N8iw6BRZAwudEdG5wddA2
h8oGGZ6JYH23LRqD4bEYhed77vyZT0NNLNZRaxtlvJKtSEbyUczFd84OR0jsn0uV
wkUiyUSw3+WvB++RTb5nsra3Oi8l+oMqNXYoXScwp1f9Rk7utwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPuHG7jFQoQPlqnv32fySV86yAQxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80NjRj
ZDBkNC02ZGE4LTQ5N2MtYjI3MC1jYjY1OGQ0NWY0ZTgvZjk4MDAxMGEtMTg3Ni0z
YzRkLWEzN2ItNTYyZmMxMzRiNTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDY0Y2QwZDQtNmRhOC00OTdjLWIy
NzAtY2I2NThkNDVmNGU4LzQ2NGNkMGQ0LTZkYTgtNDk3Yy1iMjcwLWNiNjU4ZDQ1
ZjRlOC5jcmwwHwYDVR0jBBgwFoAUS39fShDtIwmAi5OI16u8VyHwb6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi80NjRjZDBkNC02ZGE4LTQ5N2MtYjI3MC1jYjY1
OGQ0NWY0ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrfeAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB5f5CokIqKdngS8bNmNuIs1TlCUFmNFIwaKsMZjAepuunw6pIyDcfY5
labI/vfmqADxTL/6ik/B2skEy44z1dsDJrvztb0IfE/9mkcp1XF8KGC/lHpVMvEG
s7tKFwPLuLHCqbYb0ErPpIgFwB4cLgf3kBC/oWqYURyzI3Sw/Irb7lu3psNb8GKp
ivWDJmkXRl+Y4/BIUYb5NXtuO+4xuh1b0IZUgUc/mvzxQYGsBceFu8zhjwgiA/7O
NyP9zpYcfB0aFASZxbyr/NsPpo6D/eYmynbW8/2c9dR75opQY9qtK5gMtGW6/SlG
OXKJofStn7yXjXbI2A4Q69MvolUW7Sc=
-----END CERTIFICATE-----