Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/08795fcf-e040-301e-b174-61231872c055.roa
File:                     08795fcf-e040-301e-b174-61231872c055.roa (raw, json)
Hash identifier:          KL6DLWB1dwEcapk8rKpvXsUiKJBAkjd1kF7Ocnd0HKQ=
Subject key identifier:   65:13:DB:22:A0:79:8B:73:43:C6:7A:B7:21:E1:B7:C3:00:F6:1A:15
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F432858497C3EF24B782516171B7ADCA0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/08795fcf-e040-301e-b174-61231872c055.roa
Signing time:             Fri 11 Apr 2025 01:00:48 +0000
ROA not before:           Fri 11 Apr 2025 01:00:48 +0000
ROA not after:            Thu 10 Jul 2025 01:00:48 +0000
asID:                     8069
IP address blocks:        20.153.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7c:3e:f2:4b:78:25:16:17:1b:7a:dc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Apr 11 01:00:48 2025 GMT
            Not After : Jul 10 01:00:48 2025 GMT
        Subject: CN=6ed1397b-da14-43a3-8498-87d0d08c4770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:74:eb:fc:7d:29:c8:6a:76:82:36:1f:13:2e:
                    a9:78:12:28:e4:81:29:fd:11:87:67:2d:fa:a8:4d:
                    05:ed:0e:e0:5c:91:e4:cb:a9:e0:8a:de:cd:4c:c1:
                    1d:c6:c5:ad:5d:30:e0:fe:ee:67:79:ba:24:39:f4:
                    6d:2f:81:39:f3:f8:99:25:1a:dc:ce:47:4c:e7:26:
                    ef:95:7a:72:95:3b:8a:15:69:41:6f:c8:ab:98:1a:
                    80:09:20:71:2f:f1:8e:80:5b:0e:b5:42:71:13:03:
                    7b:72:86:2a:46:92:fc:bb:6e:e7:74:9c:62:ab:f9:
                    e6:f3:0b:dd:cd:9a:8b:cc:44:c6:82:97:9a:f8:68:
                    7f:e4:ea:19:35:16:fa:0c:00:ce:45:c7:1f:ef:bf:
                    9a:41:6e:54:60:fe:c3:57:fd:6e:70:ea:c0:71:e4:
                    46:a2:4a:5b:a2:8f:f2:a5:4b:96:7c:5a:b3:31:77:
                    76:34:15:f1:e6:dc:c0:47:a2:55:5c:dc:24:9e:ce:
                    ce:8f:ef:b7:48:5a:e3:da:83:e6:df:04:bf:1f:19:
                    e9:c7:fc:99:fb:a4:14:cf:e9:37:d3:e7:86:92:bf:
                    56:ba:bc:8e:98:28:0f:20:68:3a:11:51:7f:ce:0c:
                    d9:cc:bb:06:91:c9:cd:41:e6:82:14:d0:5b:af:fd:
                    f9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:13:DB:22:A0:79:8B:73:43:C6:7A:B7:21:E1:B7:C3:00:F6:1A:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/08795fcf-e040-301e-b174-61231872c055.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.153.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:07:52:7a:22:17:0c:f1:a7:10:b9:7b:aa:41:d7:6d:2a:79:
         d7:17:98:86:f9:06:75:c7:4f:55:ca:77:a3:65:18:08:8c:ca:
         76:80:6a:7b:48:39:ed:f1:da:c6:a6:84:8f:5a:9f:c7:1a:88:
         b8:c1:f0:c4:d1:ee:e4:c0:5a:6e:8a:ae:7b:64:8f:9b:28:b4:
         20:43:47:72:cc:2d:08:8b:ca:18:df:40:21:12:89:7e:d0:d0:
         8b:7e:8b:35:7a:5f:b1:20:18:bb:55:d0:4a:5d:09:b9:4d:a3:
         cc:55:40:39:cb:15:76:39:46:f0:a0:f8:31:75:33:11:7c:4a:
         10:48:ad:0e:63:08:14:3b:86:e3:29:51:7a:12:95:e6:05:2d:
         6a:fc:3b:0b:b6:c3:fe:06:bd:86:0d:e6:90:40:74:ba:0f:bb:
         2d:08:73:04:ea:93:cd:b0:c9:a8:38:91:a7:5c:88:ef:32:ba:
         a1:be:2f:1a:bb:7e:0a:c9:12:10:5f:dd:45:1b:6a:2f:de:be:
         b6:38:ed:7f:f6:21:98:f1:97:63:f9:00:62:a1:18:4e:7e:58:
         bc:71:e5:bb:c5:38:07:9b:72:f8:d8:9b:fd:0c:af:19:cc:fb:
         fa:0e:ad:e4:75:e6:34:ab:a2:bc:3e:1f:2a:c1:47:84:09:52:
         b2:b2:d3:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8PvJLeCUWFxt63KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk
NmVkMTM5N2ItZGExNC00M2EzLTg0OTgtODdkMGQwOGM0NzcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXTr/H0pyGp2gjYfEy6peBIo5IEp/RGHZy36
qE0F7Q7gXJHky6ngit7NTMEdxsWtXTDg/u5nebokOfRtL4E58/iZJRrczkdM5ybv
lXpylTuKFWlBb8irmBqACSBxL/GOgFsOtUJxEwN7coYqRpL8u27ndJxiq/nm8wvd
zZqLzETGgpea+Gh/5OoZNRb6DADORccf77+aQW5UYP7DV/1ucOrAceRGokpboo/y
pUuWfFqzMXd2NBXx5tzAR6JVXNwkns7Oj++3SFrj2oPm3wS/Hxnpx/yZ+6QUz+k3
0+eGkr9WuryOmCgPIGg6EVF/zgzZzLsGkcnNQeaCFNBbr/356QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGUT2yKgeYtzQ8Z6tyHht8MA9hoVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDg3OTVmY2YtZTA0MC0z
MDFlLWIxNzQtNjEyMzE4NzJjMDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEwHUnoiFwzxpxC5e6pB120qedcXmIb5BnXHT1XKd6NlGAiMynaAantI
Oe3x2samhI9an8caiLjB8MTR7uTAWm6Krntkj5sotCBDR3LMLQiLyhjfQCESiX7Q
0It+izV6X7EgGLtV0EpdCblNo8xVQDnLFXY5RvCg+DF1MxF8ShBIrQ5jCBQ7huMp
UXoSleYFLWr8Owu2w/4GvYYN5pBAdLoPuy0IcwTqk82wyag4kadciO8yuqG+Lxq7
fgrJEhBf3UUbai/evrY47X/2IZjxl2P5AGKhGE5+WLxx5bvFOAebcvjYm/0MrxnM
+/oOreR15jSrorw+HyrBR4QJUrKy09I=
-----END CERTIFICATE-----