Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0af503c8-95d8-35d7-949d-ca98af02b896.roa
File:                     0af503c8-95d8-35d7-949d-ca98af02b896.roa (raw, json)
Hash identifier:          W6GYj1RcJM8Fit21V5RdtZyjsaSKDbU5ylLCnr9Yndc=
Subject key identifier:   C8:27:08:E0:18:9A:5A:AB:A9:36:EB:CF:83:6B:0D:1F:12:B6:C2:4A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858497DA45CE1341EB4CB2F5E0780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0af503c8-95d8-35d7-949d-ca98af02b896.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     16625
IP address blocks:        184.25.52.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:5c:e1:34:1e:b4:cb:2f:5e:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=cc3ce275-dc79-4020-8863-375c8dfcc023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e7:16:b5:bd:02:e7:61:ce:1b:d5:2d:0e:55:
                    4a:7f:b0:98:55:69:44:7d:05:8d:09:3a:f6:38:84:
                    06:af:57:cf:99:f6:98:ba:68:c7:be:5b:f7:33:3d:
                    41:0c:27:c7:ea:14:17:d8:fb:07:6b:00:fd:3d:94:
                    48:ea:d9:df:f6:da:aa:c9:3d:aa:1b:d9:e1:f8:2f:
                    0f:c3:bc:78:be:fb:00:b2:a7:c7:d0:6a:34:f4:d3:
                    64:32:f5:39:19:6d:23:5a:e8:fc:7b:18:2b:c4:d8:
                    5c:8c:9a:21:bd:9c:a8:7d:0e:2e:1e:44:de:0b:cd:
                    7a:2f:f0:af:e1:47:02:6a:e8:c1:95:7f:0d:1b:0a:
                    7e:f5:f6:0e:61:58:9e:17:06:4e:b2:8b:7a:3d:46:
                    97:94:ba:31:e6:2d:c6:a0:44:9c:e3:82:19:34:37:
                    e6:8c:92:82:fd:ac:9e:ed:fe:89:1c:08:2f:b3:5d:
                    f6:c1:1a:1f:1b:a6:5e:13:94:1c:ee:63:3c:89:bd:
                    a4:13:ee:8c:24:79:76:ba:e2:5d:2f:2d:17:af:2a:
                    95:73:ed:6f:4a:64:98:05:78:53:49:8b:2d:e9:8f:
                    67:2f:cd:05:4a:1b:93:8a:c2:aa:2c:be:ef:7c:04:
                    dd:3c:99:fe:3b:c6:db:d3:99:db:c9:22:3d:cf:1d:
                    29:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:27:08:E0:18:9A:5A:AB:A9:36:EB:CF:83:6B:0D:1F:12:B6:C2:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0af503c8-95d8-35d7-949d-ca98af02b896.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.25.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:bf:3c:97:79:97:1d:45:8b:ca:d1:21:3a:4d:6b:70:24:61:
         86:71:e5:23:15:2a:9e:20:24:f7:69:1c:11:25:63:4b:5d:e7:
         49:7a:1b:5d:49:33:79:2c:a0:35:cc:d5:78:79:de:35:75:4a:
         d1:a4:f5:67:ec:12:ff:9f:4e:c0:1b:dc:92:06:92:d7:9e:91:
         08:55:72:f2:ea:c6:ef:e7:2c:c1:3a:a4:b9:e0:28:f5:dc:ee:
         49:c1:c1:0b:73:e8:81:9a:12:83:85:99:d5:85:13:89:c3:76:
         92:f3:a3:37:c1:b0:bf:1d:53:ba:ca:65:29:28:d3:e4:b7:11:
         05:4a:97:d0:73:18:ef:6c:8b:4e:6f:b0:b9:68:eb:8a:39:2b:
         91:9f:41:30:7a:82:86:ff:05:df:f7:b9:4c:f1:30:7c:85:18:
         50:e7:5f:78:22:90:d8:14:99:54:2b:6a:ce:34:e2:e7:81:b2:
         e5:c8:81:29:ca:ee:24:a2:d3:47:39:ae:79:2c:3e:f7:51:89:
         2e:50:1f:d3:21:7e:73:ee:83:79:7e:de:eb:bc:5b:9d:fa:64:
         2d:97:97:79:ca:c3:5a:44:ad:32:8c:4c:b0:fe:df:27:25:aa:
         09:f6:ed:74:ca:49:94:b0:9e:88:f6:fb:93:13:1f:53:50:5b:
         7f:d1:06:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pFzhNB60yy9eB4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
Y2MzY2UyNzUtZGM3OS00MDIwLTg4NjMtMzc1YzhkZmNjMDIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOcWtb0C52HOG9UtDlVKf7CYVWlEfQWNCTr2
OIQGr1fPmfaYumjHvlv3Mz1BDCfH6hQX2PsHawD9PZRI6tnf9tqqyT2qG9nh+C8P
w7x4vvsAsqfH0Go09NNkMvU5GW0jWuj8exgrxNhcjJohvZyofQ4uHkTeC816L/Cv
4UcCaujBlX8NGwp+9fYOYVieFwZOsot6PUaXlLox5i3GoESc44IZNDfmjJKC/aye
7f6JHAgvs132wRofG6ZeE5Qc7mM8ib2kE+6MJHl2uuJdLy0XryqVc+1vSmSYBXhT
SYst6Y9nL80FShuTisKqLL7vfATdPJn+O8bb05nbySI9zx0pswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMgnCOAYmlqrqTbrz4NrDR8StsJKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGFmNTAzYzgtOTVkOC0z
NWQ3LTk0OWQtY2E5OGFmMDJiODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuBk0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABS/PJd5lx1Fi8rRITpNa3AkYYZx5SMVKp4gJPdpHBElY0td50l6G11J
M3ksoDXM1Xh53jV1StGk9WfsEv+fTsAb3JIGkteekQhVcvLqxu/nLME6pLngKPXc
7knBwQtz6IGaEoOFmdWFE4nDdpLzozfBsL8dU7rKZSko0+S3EQVKl9BzGO9si05v
sLlo64o5K5GfQTB6gob/Bd/3uUzxMHyFGFDnX3gikNgUmVQras404ueBsuXIgSnK
7iSi00c5rnksPvdRiS5QH9MhfnPug3l+3uu8W536ZC2Xl3nKw1pErTKMTLD+3ycl
qgn27XTKSZSwnoj2+5MTH1NQW3/RBmM=
-----END CERTIFICATE-----