Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a68b61e6-ecd0-30b8-8f2d-7581e805dc47.roa
File:                     a68b61e6-ecd0-30b8-8f2d-7581e805dc47.roa (raw, json)
Hash identifier:          rgjtBMyDioxkhrOECPWOru2Qxs4JtYyEYfSo2KWg8bM=
Subject key identifier:   6A:78:BD:FE:17:93:2E:96:DE:A4:34:F6:0E:2D:10:5A:E2:F8:4A:1D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848C150E8D605554E2FA20971C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a68b61e6-ecd0-30b8-8f2d-7581e805dc47.roa
Signing time:             Mon 03 Feb 2025 02:00:39 +0000
ROA not before:           Mon 03 Feb 2025 02:00:39 +0000
ROA not after:            Sun 04 May 2025 01:00:39 +0000
asID:                     6167
IP address blocks:        174.196.120.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:50:e8:d6:05:55:4e:2f:a2:09:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb  3 02:00:39 2025 GMT
            Not After : May  4 01:00:39 2025 GMT
        Subject: CN=4f773b7c-21bd-4676-aa09-182c5a3fd42e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c7:62:e6:97:71:fc:7f:da:cf:b4:58:d1:32:
                    57:69:9e:b0:51:65:49:7d:60:57:f3:bf:6a:3f:46:
                    b1:ed:b9:97:c7:3b:e6:e6:14:ce:32:14:b9:fc:76:
                    f9:99:11:44:07:37:03:bb:cd:bb:2d:ae:f0:97:64:
                    2e:f8:3a:64:be:7f:3f:40:fa:f3:c8:1a:28:a6:c2:
                    55:b5:ba:a4:95:f3:36:84:a7:12:85:70:40:a0:83:
                    b0:5b:1e:f6:21:02:30:09:48:6b:8b:ac:b2:25:bc:
                    26:e0:77:5a:c2:18:d6:1c:f4:33:e0:54:ef:f4:b7:
                    56:77:18:12:db:b4:99:25:bd:5a:26:58:77:49:bb:
                    0a:2f:7a:3d:f5:e0:a2:3e:4b:f8:63:d2:f1:33:2c:
                    f0:99:ca:d1:a2:68:d9:91:90:18:ec:10:dd:06:18:
                    2b:a3:3f:a8:57:8c:50:b4:3d:4a:30:b7:c3:35:2d:
                    58:e1:d8:9f:3f:2c:16:a1:1c:73:db:cc:c6:61:88:
                    de:1c:7d:99:39:a9:49:39:a5:a4:9d:d1:c7:b8:04:
                    47:0e:be:ea:58:4b:98:ae:0a:ba:01:ae:4d:7d:18:
                    f1:94:8f:e7:9d:e2:f3:f4:f4:2d:d7:3f:d1:ab:ce:
                    56:95:2b:84:7a:f0:a3:eb:22:01:9b:ec:44:0a:7b:
                    6c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:78:BD:FE:17:93:2E:96:DE:A4:34:F6:0E:2D:10:5A:E2:F8:4A:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a68b61e6-ecd0-30b8-8f2d-7581e805dc47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.196.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:3c:c3:c2:73:11:b4:c2:a2:9e:a9:57:67:45:91:2f:51:06:
         88:72:19:84:7f:09:7a:ec:1a:5b:76:9a:06:7e:53:82:96:02:
         e3:c9:da:3f:1c:50:de:a2:2d:e5:19:78:3e:4d:8c:ce:4c:16:
         a8:ae:79:85:1b:5e:fd:b4:e3:7b:0a:20:2a:b0:18:dc:87:db:
         8c:c1:84:60:ec:be:0f:a5:1b:a8:b6:55:95:11:97:41:31:11:
         79:23:4f:26:2e:01:60:6e:d4:8e:f7:0c:d3:af:af:10:65:f7:
         c8:fa:0d:67:77:73:5b:c1:a5:68:5d:6e:e7:c6:cc:7a:4d:91:
         e2:f2:ce:6d:93:de:4c:49:54:c0:c0:27:45:10:0d:86:0e:5d:
         90:8f:72:0a:df:06:12:d2:d5:2d:24:b1:c9:12:ce:78:9e:9f:
         97:d9:06:a4:69:94:25:c2:7c:00:06:51:1d:8e:01:6a:e0:1b:
         92:11:f1:77:57:a0:84:f1:14:df:09:75:9d:87:ef:d7:0b:b6:
         b0:21:fe:f4:12:ba:18:cc:19:05:06:78:0c:9b:55:c4:f6:50:
         03:30:86:ef:1e:09:4e:aa:03:c3:86:64:54:5a:2a:e2:f5:23:
         ca:66:62:85:b1:9c:b0:ee:b2:78:d9:70:a8:00:6e:92:a6:e6:
         2c:fe:37:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUOjWBVVOL6IJccAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk
NGY3NzNiN2MtMjFiZC00Njc2LWFhMDktMTgyYzVhM2ZkNDJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cdi5pdx/H/az7RY0TJXaZ6wUWVJfWBX879q
P0ax7bmXxzvm5hTOMhS5/Hb5mRFEBzcDu827La7wl2Qu+Dpkvn8/QPrzyBoopsJV
tbqklfM2hKcShXBAoIOwWx72IQIwCUhri6yyJbwm4HdawhjWHPQz4FTv9LdWdxgS
27SZJb1aJlh3SbsKL3o99eCiPkv4Y9LxMyzwmcrRomjZkZAY7BDdBhgroz+oV4xQ
tD1KMLfDNS1Y4difPywWoRxz28zGYYjeHH2ZOalJOaWkndHHuARHDr7qWEuYrgq6
Aa5NfRjxlI/nneLz9PQt1z/Rq85WlSuEevCj6yIBm+xECntsMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGp4vf4Xky6W3qQ09g4tEFri+EodMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTY4YjYxZTYtZWNkMC0z
MGI4LThmMmQtNzU4MWU4MDVkYzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrsR4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGk8w8JzEbTCop6pV2dFkS9RBohyGYR/CXrsGlt2mgZ+U4KWAuPJ2j8c
UN6iLeUZeD5NjM5MFqiueYUbXv2043sKICqwGNyH24zBhGDsvg+lG6i2VZURl0Ex
EXkjTyYuAWBu1I73DNOvrxBl98j6DWd3c1vBpWhdbufGzHpNkeLyzm2T3kxJVMDA
J0UQDYYOXZCPcgrfBhLS1S0ksckSznien5fZBqRplCXCfAAGUR2OAWrgG5IR8XdX
oITxFN8JdZ2H79cLtrAh/vQSuhjMGQUGeAybVcT2UAMwhu8eCU6qA8OGZFRaKuL1
I8pmYoWxnLDusnjZcKgAbpKm5iz+N58=
-----END CERTIFICATE-----