Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/9c853f8c-13d0-3bc0-90b3-43dc6beab015.roa
File:                     9c853f8c-13d0-3bc0-90b3-43dc6beab015.roa (raw, json)
Hash identifier:          8uRPXsWWuMQS3RfO9soGCZ6+ra6LIx7PA+rHZJ4qaSY=
Subject key identifier:   4A:B9:BC:A6:50:9B:A8:97:BD:4F:DF:3B:A9:41:D1:29:B2:D3:35:0F
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F432858493B641421E7B1B6527D37C300
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/9c853f8c-13d0-3bc0-90b3-43dc6beab015.roa
Signing time:             Tue 18 Mar 2025 19:28:10 +0000
ROA not before:           Tue 18 Mar 2025 19:28:10 +0000
ROA not after:            Mon 16 Jun 2025 19:28:10 +0000
asID:                     30238
IP address blocks:        68.232.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3b:64:14:21:e7:b1:b6:52:7d:37:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Mar 18 19:28:10 2025 GMT
            Not After : Jun 16 19:28:10 2025 GMT
        Subject: CN=26311d63-23cd-4d6a-a263-965af039f2ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b2:77:41:07:e2:78:56:76:39:43:49:5c:7b:
                    59:d7:25:0c:83:d7:49:d3:46:09:c5:5b:a3:35:7c:
                    f6:57:76:85:b0:e3:93:ef:88:99:55:29:e2:13:0c:
                    b9:b0:5d:ad:72:6d:ea:9b:0b:67:a8:fc:4e:8e:e1:
                    24:7b:b7:a8:8d:79:d6:2d:47:4d:b9:30:3e:4b:8a:
                    49:37:4f:36:af:4a:a4:07:15:f0:7a:92:ec:0b:d6:
                    9d:7c:90:ed:46:c4:0b:45:0d:8c:c1:da:7e:e2:2a:
                    f2:60:ff:98:38:3e:bd:93:8e:c2:ec:d2:34:d8:4b:
                    2f:9f:9b:70:27:dd:be:43:4f:b4:c4:85:cc:37:2a:
                    90:7a:47:9f:19:bd:6b:28:62:d4:c1:35:6b:9e:24:
                    6a:2f:6b:62:05:c2:f8:a4:86:50:94:a6:c2:4a:cf:
                    bf:55:61:bd:ff:2f:3d:7e:8f:fd:23:ac:ae:b5:09:
                    e4:cc:ef:a9:8e:6e:8f:4c:93:7f:51:5e:46:61:6d:
                    dd:0c:f0:85:8f:81:ca:94:a2:f4:5a:55:35:9d:ea:
                    dc:43:9b:30:4d:ba:a6:8a:3c:4a:8d:70:7d:0e:e5:
                    60:77:3e:0e:74:ca:5c:17:83:42:d7:a5:e7:23:36:
                    0e:6e:49:95:82:98:03:67:4b:f0:31:ab:72:45:46:
                    22:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B9:BC:A6:50:9B:A8:97:BD:4F:DF:3B:A9:41:D1:29:B2:D3:35:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/9c853f8c-13d0-3bc0-90b3-43dc6beab015.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.232.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:6e:01:0c:37:42:a6:35:8d:ed:76:02:ef:eb:b9:2e:8b:e5:
         0b:45:df:85:3f:6a:c9:9f:b6:13:91:19:f2:35:97:06:11:a5:
         24:46:eb:ce:3e:f5:a5:bf:dd:e7:72:1c:32:03:55:d5:6b:6b:
         ca:0e:ac:e6:1e:56:a3:63:89:64:26:6e:39:e0:12:1e:4b:02:
         be:60:2f:cb:f9:61:97:dd:91:f4:99:47:f2:9d:fa:a2:73:94:
         89:87:d7:7e:35:78:8c:1a:4e:2d:9e:f5:15:f6:18:8f:ee:a6:
         8f:9e:3b:c5:ca:93:06:02:3b:5d:ed:af:12:ea:6d:3e:e5:b9:
         16:6f:85:dd:e8:62:35:58:42:eb:9c:8c:05:dd:bb:3f:16:cd:
         10:4b:fb:b4:f3:fe:7f:3d:00:e4:82:21:81:fb:4c:65:89:0b:
         ef:9c:ea:43:d9:8e:f4:f7:cf:e7:53:48:67:2f:73:bb:bf:02:
         4c:8b:42:71:dc:a8:9d:56:e8:c4:21:88:44:da:04:e2:2b:8b:
         ad:35:fe:9f:a7:d3:37:12:6e:47:c4:71:b7:6c:cf:80:14:7d:
         60:3d:69:0d:d9:bf:e2:09:99:c8:97:22:33:b6:41:94:0d:7c:
         5a:29:8c:3e:41:7c:b0:86:d8:48:20:14:76:ee:9f:9d:b7:23:
         4b:75:16:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk7ZBQh57G2Un03wwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI1MDMxODE5MjgxMFoXDTI1MDYxNjE5MjgxMFowLzEtMCsGA1UEAxMk
MjYzMTFkNjMtMjNjZC00ZDZhLWEyNjMtOTY1YWYwMzlmMmVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bJ3QQfieFZ2OUNJXHtZ1yUMg9dJ00YJxVuj
NXz2V3aFsOOT74iZVSniEwy5sF2tcm3qmwtnqPxOjuEke7eojXnWLUdNuTA+S4pJ
N082r0qkBxXwepLsC9adfJDtRsQLRQ2Mwdp+4iryYP+YOD69k47C7NI02Esvn5tw
J92+Q0+0xIXMNyqQekefGb1rKGLUwTVrniRqL2tiBcL4pIZQlKbCSs+/VWG9/y89
fo/9I6yutQnkzO+pjm6PTJN/UV5GYW3dDPCFj4HKlKL0WlU1nercQ5swTbqmijxK
jXB9DuVgdz4OdMpcF4NC16XnIzYObkmVgpgDZ0vwMatyRUYiiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEq5vKZQm6iXvU/fO6lB0Smy0zUPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvOWM4NTNmOGMtMTNkMC0z
YmMwLTkwYjMtNDNkYzZiZWFiMDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIZuAQw3QqY1je12Au/ruS6L5QtF34U/asmfthORGfI1lwYRpSRG684+
9aW/3edyHDIDVdVra8oOrOYeVqNjiWQmbjngEh5LAr5gL8v5YZfdkfSZR/Kd+qJz
lImH1341eIwaTi2e9RX2GI/upo+eO8XKkwYCO13trxLqbT7luRZvhd3oYjVYQuuc
jAXduz8WzRBL+7Tz/n89AOSCIYH7TGWJC++c6kPZjvT3z+dTSGcvc7u/AkyLQnHc
qJ1W6MQhiETaBOIri601/p+n0zcSbkfEcbdsz4AUfWA9aQ3Zv+IJmciXIjO2QZQN
fFopjD5BfLCG2EggFHbun523I0t1FgI=
-----END CERTIFICATE-----