Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/6fb6192e-8f09-3c85-9e93-623081f4bb50.roa
File:                     6fb6192e-8f09-3c85-9e93-623081f4bb50.roa (raw, json)
Hash identifier:          g6Ygfb2ikWsDLbSwrbpqEvoYjL18K3bPDPk3utUDbbc=
Subject key identifier:   A6:22:8C:E1:0E:96:9E:F0:A1:27:74:98:AE:56:C8:3E:68:5B:19:A4
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584973DED9E6DB8FB1782C95C1C0
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/6fb6192e-8f09-3c85-9e93-623081f4bb50.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     1
IP address blocks:        198.1.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:d9:e6:db:8f:b1:78:2c:95:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=40eb51ef-c87f-4e9d-8932-62788177472b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:34:aa:7c:27:fd:37:00:38:05:97:57:fe:76:
                    f4:91:11:76:9c:32:95:c9:a3:8d:87:99:69:df:76:
                    b1:c6:bf:23:79:a8:b5:2e:27:0d:df:c8:38:07:fb:
                    c3:4e:22:5a:d9:06:bc:1f:8c:5b:1b:00:d3:ce:a3:
                    a5:97:2e:a7:1b:f7:e1:b2:a5:17:df:db:cb:d5:58:
                    64:9d:a2:c8:23:ae:15:e9:c3:f3:11:d2:a8:b7:22:
                    1e:8f:68:7f:bb:79:b5:ac:6f:2a:fc:ac:1b:b0:31:
                    b6:40:7e:5c:ce:5c:42:8d:db:10:f6:04:31:80:44:
                    19:b8:eb:fb:63:c8:27:04:7b:d4:90:0f:b1:1e:bd:
                    b0:5e:00:db:d1:6c:6e:b7:a0:6b:71:56:a8:ae:3e:
                    fd:55:f5:44:1f:8d:2a:08:67:f0:cb:fd:e7:c7:24:
                    96:f0:b1:4f:60:39:83:f0:bf:54:14:a4:a2:ab:ce:
                    28:5e:e7:80:18:ba:b1:ed:06:25:b7:ed:ce:31:c8:
                    eb:46:2e:b7:e2:e5:af:78:13:37:0a:50:ea:c9:0a:
                    e5:96:86:c3:a1:7b:36:21:6f:4a:d7:c2:51:81:b8:
                    d2:84:45:79:fe:5b:53:82:bb:66:69:42:1e:12:0a:
                    fd:d2:9f:af:1d:10:ac:8a:14:ac:41:d9:e2:e5:d2:
                    b1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:22:8C:E1:0E:96:9E:F0:A1:27:74:98:AE:56:C8:3E:68:5B:19:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/6fb6192e-8f09-3c85-9e93-623081f4bb50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:3c:d2:68:d8:f3:24:80:57:84:61:11:88:49:cc:02:50:f0:
         bb:88:47:bd:b6:66:f7:b8:e5:fe:31:a5:58:3d:b7:27:0f:e7:
         b5:bd:d9:c7:e3:d0:f8:9d:26:ec:95:9c:90:c7:2f:27:9e:b1:
         71:63:f8:cb:6c:fd:a9:6c:d4:de:44:d0:33:33:ee:f0:b9:b5:
         23:0e:d4:0a:50:ba:d3:97:5d:d3:d5:34:96:1d:36:9a:33:19:
         a7:a1:4c:0b:93:31:95:75:11:54:69:e4:31:5c:f7:1b:28:10:
         f0:13:8f:1a:4b:aa:36:54:41:84:6c:2b:f0:b6:93:94:af:f3:
         9f:76:75:45:57:49:bd:63:76:f1:ec:97:ca:2f:1a:02:ea:26:
         0c:1a:e6:2c:66:95:0f:79:96:99:a1:2f:13:71:fd:3d:e8:f1:
         39:6d:ac:db:7b:a4:a4:10:38:88:ad:c7:16:83:c5:98:8b:aa:
         ba:78:3a:4e:34:d3:90:2e:d8:a2:a3:94:f4:de:e9:e0:fc:4b:
         b8:1f:75:78:c7:96:f9:2a:85:02:6e:e4:e1:f3:5d:c4:db:1e:
         f2:86:65:b4:b5:73:64:e3:99:ac:f5:83:6a:1f:86:92:c2:e8:
         ee:a9:27:6b:a6:a7:cd:b6:fd:5c:54:b8:42:58:35:55:4a:6b:
         89:a8:53:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3tnm24+xeCyVwcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh
MjJmMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk
NDBlYjUxZWYtYzg3Zi00ZTlkLTg5MzItNjI3ODgxNzc0NzJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTSqfCf9NwA4BZdX/nb0kRF2nDKVyaONh5lp
33axxr8jeai1LicN38g4B/vDTiJa2Qa8H4xbGwDTzqOlly6nG/fhsqUX39vL1Vhk
naLII64V6cPzEdKotyIej2h/u3m1rG8q/KwbsDG2QH5czlxCjdsQ9gQxgEQZuOv7
Y8gnBHvUkA+xHr2wXgDb0Wxut6BrcVaorj79VfVEH40qCGfwy/3nxySW8LFPYDmD
8L9UFKSiq84oXueAGLqx7QYlt+3OMcjrRi634uWveBM3ClDqyQrllobDoXs2IW9K
18JRgbjShEV5/ltTgrtmaUIeEgr90p+vHRCsihSsQdni5dKxPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKYijOEOlp7woSd0mK5WyD5oWxmkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0
ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvNmZiNjE5MmUtOGYwOS0z
Yzg1LTllOTMtNjIzMDgxZjRiYjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi
NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll
YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm
NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJA80mjY8ySAV4RhEYhJzAJQ8LuIR722Zve45f4xpVg9tycP57W92cfj
0PidJuyVnJDHLyeesXFj+Mts/als1N5E0DMz7vC5tSMO1ApQutOXXdPVNJYdNpoz
GaehTAuTMZV1EVRp5DFc9xsoEPATjxpLqjZUQYRsK/C2k5Sv8592dUVXSb1jdvHs
l8ovGgLqJgwa5ixmlQ95lpmhLxNx/T3o8TltrNt7pKQQOIitxxaDxZiLqrp4Ok40
05Au2KKjlPTe6eD8S7gfdXjHlvkqhQJu5OHzXcTbHvKGZbS1c2Tjmaz1g2ofhpLC
6O6pJ2ump822/VxUuEJYNVVKa4moU7A=
-----END CERTIFICATE-----