Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c227707b-f168-32f2-995d-6bf7c66c06eb.roa
File:                     c227707b-f168-32f2-995d-6bf7c66c06eb.roa (raw, json)
Hash identifier:          cB+Wes3YbMOrsd1it9lJDgNRC5HI0h6XEtZo03gyPiE=
Subject key identifier:   9F:0E:B4:AA:6D:64:38:89:2B:3A:17:EE:7A:9F:B6:7B:D2:FD:65:C6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849833A0CD382504F281381EB00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c227707b-f168-32f2-995d-6bf7c66c06eb.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        23.195.16.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:0c:d3:82:50:4f:28:13:81:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=c0efe1b4-3309-4b90-a555-1f1cc2eb0323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:84:cd:6b:a5:4c:fd:4d:02:65:f6:21:b7:f8:
                    5f:5b:f6:38:4c:2f:a5:49:16:2e:d4:8b:79:a7:d5:
                    fe:b2:a4:56:71:d8:74:76:d6:e0:af:7a:21:ca:00:
                    d9:36:3b:d1:e6:1f:19:b1:b9:00:21:bf:d8:aa:3a:
                    c3:7a:f6:ee:20:7e:f6:8d:79:5e:32:01:9f:58:bb:
                    33:18:dc:03:4d:0a:55:d3:23:ab:72:52:47:bf:0e:
                    20:17:9b:10:9b:e2:9b:95:9c:26:f3:db:48:bf:a7:
                    58:d5:81:da:d5:50:c0:22:65:db:73:2b:18:58:42:
                    f2:3b:51:97:ec:3f:39:09:b7:04:a2:1f:9e:a4:77:
                    f5:47:de:3a:9c:53:1f:13:66:01:7d:36:a1:50:c7:
                    e5:d3:c5:ee:83:e7:08:95:bb:26:ce:af:eb:93:36:
                    d8:3f:79:9e:aa:3f:59:c2:71:f5:70:72:38:e4:6b:
                    bd:72:4c:1a:28:6c:b1:e1:6c:71:1c:0f:e9:69:f7:
                    fa:58:3d:50:65:f8:8c:22:88:d9:79:eb:4f:07:31:
                    f1:fb:0d:19:c7:bf:7f:79:0f:d4:5e:fc:82:a8:49:
                    8c:cc:41:75:18:0e:2f:7c:91:14:ee:d2:a3:da:c6:
                    82:89:8a:f4:45:24:9e:6b:18:e7:46:48:b9:72:3f:
                    7e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0E:B4:AA:6D:64:38:89:2B:3A:17:EE:7A:9F:B6:7B:D2:FD:65:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c227707b-f168-32f2-995d-6bf7c66c06eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.195.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:55:27:3b:91:6a:14:be:89:ec:40:12:c5:51:9e:b3:66:62:
         40:c2:58:16:13:67:47:c3:e3:34:0f:57:7c:16:51:da:ec:f6:
         44:e5:0d:90:af:c9:05:c5:a8:50:8a:37:42:8f:3d:db:f8:aa:
         8d:0f:d0:70:dd:6a:fe:a6:6b:8a:8d:d7:5f:e7:68:be:01:71:
         b2:44:fe:a8:52:3e:32:c6:84:c5:69:8b:ac:76:76:2a:b0:b8:
         8d:75:60:fe:94:04:38:71:74:0c:99:e7:64:a9:2c:c1:89:59:
         83:cc:16:94:26:01:72:9d:0d:ab:8a:97:73:26:b1:17:3f:9a:
         13:f2:4c:e0:55:6e:47:45:94:d7:22:c2:ee:ff:71:22:f6:36:
         13:d7:69:c1:f9:1b:66:70:76:55:17:cd:12:63:ef:a4:ce:a2:
         b0:f4:59:a8:ed:26:07:9d:22:2d:3d:1a:93:b7:54:82:89:fb:
         9b:ae:aa:72:be:1b:42:39:ea:f5:11:96:f8:d0:22:3b:c2:42:
         55:a2:ad:d3:ee:09:b8:bc:c2:e1:82:cb:9a:d2:1d:6f:3c:eb:
         41:24:87:de:2c:b2:28:4f:ad:81:0b:73:7a:a1:9e:fa:c1:94:
         26:47:27:6b:24:c9:38:4d:ab:9a:16:39:76:e7:b8:fa:70:99:
         1d:e1:ed:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOgzTglBPKBOB6wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk
YzBlZmUxYjQtMzMwOS00YjkwLWE1NTUtMWYxY2MyZWIwMzIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuITNa6VM/U0CZfYht/hfW/Y4TC+lSRYu1It5
p9X+sqRWcdh0dtbgr3ohygDZNjvR5h8ZsbkAIb/YqjrDevbuIH72jXleMgGfWLsz
GNwDTQpV0yOrclJHvw4gF5sQm+KblZwm89tIv6dY1YHa1VDAImXbcysYWELyO1GX
7D85CbcEoh+epHf1R946nFMfE2YBfTahUMfl08Xug+cIlbsmzq/rkzbYP3meqj9Z
wnH1cHI45Gu9ckwaKGyx4WxxHA/paff6WD1QZfiMIojZeetPBzHx+w0Zx79/eQ/U
XvyCqEmMzEF1GA4vfJEU7tKj2saCiYr0RSSeaxjnRki5cj9+6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ8OtKptZDiJKzoX7nqftnvS/WXGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzIyNzcwN2ItZjE2OC0z
MmYyLTk5NWQtNmJmN2M2NmMwNmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8MQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAARVJzuRahS+iexAEsVRnrNmYkDCWBYTZ0fD4zQPV3wWUdrs9kTlDZCv
yQXFqFCKN0KPPdv4qo0P0HDdav6ma4qN11/naL4BcbJE/qhSPjLGhMVpi6x2diqw
uI11YP6UBDhxdAyZ52SpLMGJWYPMFpQmAXKdDauKl3MmsRc/mhPyTOBVbkdFlNci
wu7/cSL2NhPXacH5G2ZwdlUXzRJj76TOorD0WajtJgedIi09GpO3VIKJ+5uuqnK+
G0I56vURlvjQIjvCQlWirdPuCbi8wuGCy5rSHW8860Ekh94ssihPrYELc3qhnvrB
lCZHJ2skyThNq5oWOXbnuPpwmR3h7Rc=
-----END CERTIFICATE-----