Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/0f564d29-450b-37b8-9c67-5f81ec0c7ad9.roa
File:                     0f564d29-450b-37b8-9c67-5f81ec0c7ad9.roa (raw, json)
Hash identifier:          wuPR35xBxdvQm4cgVFUlLWJTWFTe2WGBsGbaKknxcbk=
Subject key identifier:   3D:A9:D2:5C:1F:BD:B4:B6:0C:6C:A9:EC:82:1E:E0:7F:BD:B5:83:7F
Certificate issuer:       /CN=c7554e9f-a3b0-474f-b728-4f959aa35449
Certificate serial:       010D0C9F43285848B8385E4475B32058E8284500
Authority key identifier: 96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/0f564d29-450b-37b8-9c67-5f81ec0c7ad9.roa
Signing time:             Thu 30 Jan 2025 19:49:12 +0000
ROA not before:           Thu 30 Jan 2025 19:49:12 +0000
ROA not after:            Wed 30 Apr 2025 18:49:12 +0000
asID:                     5650
IP address blocks:        68.170.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:38:5e:44:75:b3:20:58:e8:28:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7554e9f-a3b0-474f-b728-4f959aa35449
        Validity
            Not Before: Jan 30 19:49:12 2025 GMT
            Not After : Apr 30 18:49:12 2025 GMT
        Subject: CN=99ab2006-f4f8-46a7-843e-310106ee61f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7d:a3:fd:d9:b5:52:6a:9b:98:a2:f8:7e:4a:
                    dd:72:7f:cb:5d:49:a0:e3:dc:50:61:3a:b8:dc:90:
                    f8:36:10:33:9d:fd:6e:f7:9e:2b:a5:e1:08:3c:66:
                    65:8d:fa:af:01:11:ee:ef:bd:eb:6a:ff:21:01:1a:
                    14:17:14:c0:01:f7:85:9b:58:d8:34:60:87:bf:ec:
                    6c:d8:7e:bf:9b:7c:7e:fd:80:5b:a7:87:6f:97:2f:
                    f2:35:26:1b:a0:b8:19:36:e3:c2:2b:86:06:08:73:
                    e6:f1:1a:53:87:5d:3f:04:09:ca:c2:02:5c:b7:6c:
                    f7:4b:f1:1b:a9:86:71:6e:14:1e:7b:bf:81:94:c5:
                    e4:61:4e:df:34:4f:8f:5c:30:55:b3:de:19:30:12:
                    d7:d2:dc:50:65:96:f3:d7:37:fe:88:0c:1c:61:3a:
                    86:6f:d4:1b:ea:4e:ff:cd:d6:67:b3:41:56:5b:af:
                    9d:e7:a1:07:ed:f9:fe:d6:e7:a8:8a:8b:e4:35:a1:
                    25:7b:47:9b:74:74:e7:3d:27:80:bb:c8:8f:1d:11:
                    35:c7:d9:99:fc:66:31:37:aa:51:a3:e6:17:f1:23:
                    76:6d:9b:e1:60:e6:83:47:86:e8:4e:e0:b7:75:21:
                    5a:d8:0c:f3:77:6e:d1:58:90:6c:20:a5:bc:b8:0f:
                    c1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A9:D2:5C:1F:BD:B4:B6:0C:6C:A9:EC:82:1E:E0:7F:BD:B5:83:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/0f564d29-450b-37b8-9c67-5f81ec0c7ad9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl

            X509v3 Authority Key Identifier:
                keyid:96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:08:7d:a7:0a:ab:ab:71:a6:7a:2e:e6:14:58:9b:f6:18:64:
         08:81:7e:48:cc:01:e6:24:62:fd:8d:cf:32:b9:df:c8:a6:10:
         1d:a3:ea:70:83:b3:9b:ff:6b:37:56:83:e3:47:8a:38:09:8f:
         9a:0a:4a:1b:91:69:31:df:47:01:91:6d:dc:cd:3e:72:d9:6d:
         a7:38:94:39:7a:38:db:ef:9c:3b:30:9d:73:43:52:47:08:58:
         9c:e1:20:0f:dd:da:12:35:9f:d6:90:91:7c:83:ce:af:58:a4:
         96:c9:53:da:ca:2c:01:83:59:16:7b:7d:7f:73:ef:55:77:ca:
         ef:6b:d0:25:1a:e3:fb:b9:3f:c4:e6:4c:d3:10:ba:af:5e:d3:
         d9:22:fb:70:cb:75:19:55:36:a2:44:a0:17:f8:db:f8:0b:ba:
         4a:72:ee:bc:8b:f3:16:e2:33:ab:de:ab:9f:bc:61:45:4e:c4:
         2b:3d:44:fc:8c:e6:40:38:25:b3:72:b0:28:b9:a4:47:4a:78:
         15:4c:e5:ef:34:be:4f:68:29:5f:05:f7:c9:74:fc:96:e2:34:
         b5:2e:a1:7e:68:d7:a7:f0:d3:1b:1c:f5:02:3d:46:a3:2f:55:
         3c:89:13:67:22:92:08:78:5a:ef:5d:5f:4b:fa:ef:39:c8:58:
         89:97:41:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi4OF5EdbMgWOgoRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzc1NTRlOWYtYTNiMC00NzRmLWI3MjgtNGY5NTlhYTM1
NDQ5MB4XDTI1MDEzMDE5NDkxMloXDTI1MDQzMDE4NDkxMlowLzEtMCsGA1UEAxMk
OTlhYjIwMDYtZjRmOC00NmE3LTg0M2UtMzEwMTA2ZWU2MWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgn2j/dm1UmqbmKL4fkrdcn/LXUmg49xQYTq4
3JD4NhAznf1u954rpeEIPGZljfqvARHu773rav8hARoUFxTAAfeFm1jYNGCHv+xs
2H6/m3x+/YBbp4dvly/yNSYboLgZNuPCK4YGCHPm8RpTh10/BAnKwgJct2z3S/Eb
qYZxbhQee7+BlMXkYU7fNE+PXDBVs94ZMBLX0txQZZbz1zf+iAwcYTqGb9Qb6k7/
zdZns0FWW6+d56EH7fn+1ueoiovkNaEle0ebdHTnPSeAu8iPHRE1x9mZ/GYxN6pR
o+YX8SN2bZvhYOaDR4boTuC3dSFa2Azzd27RWJBsIKW8uA/BcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD2p0lwfvbS2DGyp7IIe4H+9tYN/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1
NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1OWFhMzU0NDkvMGY1NjRkMjktNDUwYi0z
N2I4LTljNjctNWY4MWVjMGM3YWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzc1NTRlOWYtYTNiMC00NzRmLWI3
MjgtNGY5NTlhYTM1NDQ5L2M3NTU0ZTlmLWEzYjAtNDc0Zi1iNzI4LTRmOTU5YWEz
NTQ0OS5jcmwwHwYDVR0jBBgwFoAUli7MQkEJ9CB4PLADz1sQrKOP3gcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1
OWFhMzU0NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKoDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC0IfacKq6txpnou5hRYm/YYZAiBfkjMAeYkYv2NzzK538imEB2j6nCD
s5v/azdWg+NHijgJj5oKShuRaTHfRwGRbdzNPnLZbac4lDl6ONvvnDswnXNDUkcI
WJzhIA/d2hI1n9aQkXyDzq9YpJbJU9rKLAGDWRZ7fX9z71V3yu9r0CUa4/u5P8Tm
TNMQuq9e09ki+3DLdRlVNqJEoBf42/gLukpy7ryL8xbiM6veq5+8YUVOxCs9RPyM
5kA4JbNysCi5pEdKeBVM5e80vk9oKV8F98l0/JbiNLUuoX5o16fw0xsc9QI9RqMv
VTyJE2cikgh4Wu9dX0v67znIWImXQT4=
-----END CERTIFICATE-----