Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d56a37a-70c9-45c6-b734-00fcd55a27d1/73961757-e604-35c4-b735-59179e641550.roa
File:                     73961757-e604-35c4-b735-59179e641550.roa (raw, json)
Hash identifier:          xgi6puDagG6Ly7AU/nMGLP+kEznr+IYzGOk7PKcMyAk=
Subject key identifier:   D2:A6:12:D8:BB:99:74:EE:28:75:20:16:37:50:9F:F7:4E:5D:86:A1
Certificate issuer:       /CN=8d56a37a-70c9-45c6-b734-00fcd55a27d1
Certificate serial:       010D0C9F432858497DA45C7D748C6BA1CF5A1580
Authority key identifier: 49:E3:4F:3A:15:91:89:41:88:4E:97:05:49:FD:DA:6F:61:EB:34:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d56a37a-70c9-45c6-b734-00fcd55a27d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d56a37a-70c9-45c6-b734-00fcd55a27d1/73961757-e604-35c4-b735-59179e641550.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     6562
IP address blocks:        199.175.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:5c:7d:74:8c:6b:a1:cf:5a:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d56a37a-70c9-45c6-b734-00fcd55a27d1
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=cce5c968-9179-4e6f-bc8f-1976ee0f2327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:10:43:07:e0:f6:0c:0f:ca:b4:e2:4e:3e:d0:
                    99:e6:11:4f:c4:d4:27:b0:0f:c6:13:12:4a:0f:9b:
                    9a:5a:c0:04:42:04:ef:ef:6a:cb:54:34:04:c9:dc:
                    2a:bf:7f:c4:aa:8a:b5:4d:63:8d:c9:a7:28:7d:f7:
                    2b:c3:bb:dd:18:24:b0:86:61:71:f1:9c:8b:39:06:
                    e5:fe:1f:85:02:32:e3:19:46:15:0a:2a:8d:9a:8f:
                    fe:8e:d6:4c:5e:b0:65:40:41:02:d3:c4:9d:c3:10:
                    c5:97:63:2f:66:48:1c:ee:f1:07:bf:a8:a2:d3:8f:
                    b5:f7:74:54:88:7c:ca:ac:66:34:02:bf:32:db:f0:
                    64:c0:97:62:74:d3:8d:78:90:b8:1f:d2:44:12:66:
                    51:56:30:3c:1e:95:58:fc:6a:41:05:b7:17:fc:01:
                    4c:89:e4:06:16:2c:02:44:e9:9f:83:54:53:fb:61:
                    97:e3:ed:69:66:71:69:cc:00:0b:f2:b4:74:52:30:
                    ad:1c:1a:6e:3c:69:62:a5:cb:07:eb:70:3d:42:a7:
                    05:fc:9b:f6:f4:7d:f0:18:67:97:64:63:50:37:ae:
                    b8:f4:de:ee:ca:b3:e3:fe:98:f1:db:51:d1:cd:32:
                    9f:13:31:8a:8b:fe:a7:5f:16:00:82:b7:16:f2:09:
                    41:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A6:12:D8:BB:99:74:EE:28:75:20:16:37:50:9F:F7:4E:5D:86:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d56a37a-70c9-45c6-b734-00fcd55a27d1/73961757-e604-35c4-b735-59179e641550.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d56a37a-70c9-45c6-b734-00fcd55a27d1/8d56a37a-70c9-45c6-b734-00fcd55a27d1.crl

            X509v3 Authority Key Identifier:
                keyid:49:E3:4F:3A:15:91:89:41:88:4E:97:05:49:FD:DA:6F:61:EB:34:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d56a37a-70c9-45c6-b734-00fcd55a27d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.175.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:1b:cd:0d:d9:30:60:ab:77:2e:a4:e4:13:14:86:d4:dc:a7:
         f3:6d:a6:ed:5d:96:fa:ac:bd:80:cd:4f:9c:cc:ca:dd:78:a2:
         cb:96:38:de:22:f3:3e:29:32:b9:91:0c:56:f0:26:e4:6d:cb:
         e1:8b:7b:a9:fa:87:91:5c:1b:13:c0:92:23:6e:d3:e1:e7:c5:
         2b:b1:af:51:98:34:32:68:e7:ff:83:39:ae:cf:d5:8e:b4:2d:
         5b:04:80:49:71:2e:d1:5d:a8:6a:8c:15:5e:ce:ba:26:78:1a:
         fb:be:68:6a:87:67:d1:2c:9a:22:54:71:b7:f7:05:55:f2:e4:
         20:53:39:e1:40:9c:a0:e2:37:0d:93:6b:c2:eb:70:73:5d:19:
         83:96:fd:b3:35:9a:f5:b2:da:e9:13:32:ba:59:56:cd:07:b7:
         3f:b0:6d:f6:c2:b9:70:08:0d:6e:a5:af:e2:2c:d6:5c:f3:50:
         ea:e4:30:cf:f9:f2:3b:f7:bc:9e:f0:ff:d0:e8:95:ce:9e:7e:
         41:99:f1:c1:cb:7f:7e:28:7a:36:0a:a9:b5:b3:c4:fe:0c:5c:
         a9:c8:7f:e5:a1:24:0c:93:da:1d:7f:20:40:04:2c:9f:5c:dc:
         54:57:b6:4f:a1:ff:19:db:17:b1:fa:d5:1f:51:39:32:ee:20:
         0e:76:39:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pFx9dIxroc9aFYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGQ1NmEzN2EtNzBjOS00NWM2LWI3MzQtMDBmY2Q1NWEy
N2QxMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
Y2NlNWM5NjgtOTE3OS00ZTZmLWJjOGYtMTk3NmVlMGYyMzI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RBDB+D2DA/KtOJOPtCZ5hFPxNQnsA/GExJK
D5uaWsAEQgTv72rLVDQEydwqv3/Eqoq1TWONyacoffcrw7vdGCSwhmFx8ZyLOQbl
/h+FAjLjGUYVCiqNmo/+jtZMXrBlQEEC08SdwxDFl2MvZkgc7vEHv6ii04+193RU
iHzKrGY0Ar8y2/BkwJdidNONeJC4H9JEEmZRVjA8HpVY/GpBBbcX/AFMieQGFiwC
ROmfg1RT+2GX4+1pZnFpzAAL8rR0UjCtHBpuPGlipcsH63A9QqcF/Jv29H3wGGeX
ZGNQN6649N7uyrPj/pjx21HRzTKfEzGKi/6nXxYAgrcW8glBYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNKmEti7mXTuKHUgFjdQn/dOXYahMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZDU2
YTM3YS03MGM5LTQ1YzYtYjczNC0wMGZjZDU1YTI3ZDEvNzM5NjE3NTctZTYwNC0z
NWM0LWI3MzUtNTkxNzllNjQxNTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGQ1NmEzN2EtNzBjOS00NWM2LWI3
MzQtMDBmY2Q1NWEyN2QxLzhkNTZhMzdhLTcwYzktNDVjNi1iNzM0LTAwZmNkNTVh
MjdkMS5jcmwwHwYDVR0jBBgwFoAUSeNPOhWRiUGITpcFSf3ab2HrNJswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZDU2YTM3YS03MGM5LTQ1YzYtYjczNC0wMGZj
ZDU1YTI3ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx68AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHEbzQ3ZMGCrdy6k5BMUhtTcp/Ntpu1dlvqsvYDNT5zMyt14osuWON4i
8z4pMrmRDFbwJuRty+GLe6n6h5FcGxPAkiNu0+HnxSuxr1GYNDJo5/+DOa7P1Y60
LVsEgElxLtFdqGqMFV7OuiZ4Gvu+aGqHZ9EsmiJUcbf3BVXy5CBTOeFAnKDiNw2T
a8LrcHNdGYOW/bM1mvWy2ukTMrpZVs0Htz+wbfbCuXAIDW6lr+Is1lzzUOrkMM/5
8jv3vJ7w/9Dolc6efkGZ8cHLf34oejYKqbWzxP4MXKnIf+WhJAyT2h1/IEAELJ9c
3FRXtk+h/xnbF7H61R9ROTLuIA52Occ=
-----END CERTIFICATE-----