Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e8c53d47-8fbc-3229-af21-b9caae57b1c7.roa
File:                     e8c53d47-8fbc-3229-af21-b9caae57b1c7.roa (raw, json)
Hash identifier:          VXhY1IZ5WA3ygy8eCa8kQs0xuJRGSLTJnS8+RqUJoYs=
Subject key identifier:   83:29:1D:C1:3C:5D:BC:1E:7A:AF:5E:8F:A4:1E:A2:51:B7:F5:DE:F3
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285848EDFBB8F88035DC521EAE3C00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e8c53d47-8fbc-3229-af21-b9caae57b1c7.roa
Signing time:             Wed 19 Feb 2025 02:00:38 +0000
ROA not before:           Wed 19 Feb 2025 02:00:38 +0000
ROA not after:            Tue 20 May 2025 01:00:38 +0000
asID:                     1239
IP address blocks:        216.227.168.0/23 maxlen: 24
                          2001:49f0:d13e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ed:fb:b8:f8:80:35:dc:52:1e:ae:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Feb 19 02:00:38 2025 GMT
            Not After : May 20 01:00:38 2025 GMT
        Subject: CN=6b63f1c6-0212-4fa6-a0e5-72a4478008f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9c:e5:50:99:3c:0a:2b:4e:b4:e2:dc:f0:9b:
                    72:3b:5b:21:68:20:bf:a7:a7:8c:4f:0b:1c:49:55:
                    a5:c6:fa:d0:4b:50:b4:29:c8:55:52:09:fa:41:aa:
                    f6:d3:c1:95:b3:85:f1:69:17:b7:68:7e:2b:8e:ef:
                    39:16:f0:b1:c2:b9:4b:9f:0f:25:c8:4d:2c:17:99:
                    05:b6:4b:92:12:c0:08:06:9e:2d:a1:7d:a8:6f:63:
                    52:f0:8a:8e:76:1e:c7:f2:94:32:b9:e9:f8:b7:e7:
                    aa:07:e3:92:d5:da:8f:ae:14:9b:5e:e6:f7:4b:ff:
                    e2:a3:31:b0:0d:f9:e3:08:30:3b:d2:07:60:20:d0:
                    a2:20:be:70:f9:74:af:45:1b:bb:82:c8:54:b8:a4:
                    90:e6:83:ea:8e:2d:e4:f2:ea:dc:ee:be:12:d2:91:
                    60:e4:59:92:72:6d:bb:c3:61:7b:cb:7c:4e:29:97:
                    9d:ef:ec:c4:98:6b:33:b2:7d:7b:55:75:1f:71:f6:
                    5d:f1:d1:b7:b7:a2:09:cd:b8:f4:bd:a4:97:91:31:
                    5b:94:a3:6d:a2:71:fe:2b:c7:13:ab:14:48:af:42:
                    3b:ec:07:18:81:3d:b2:9c:29:59:62:71:ba:9a:14:
                    88:cd:99:06:ef:0b:30:b2:7b:a1:61:cc:5d:4f:19:
                    5f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:29:1D:C1:3C:5D:BC:1E:7A:AF:5E:8F:A4:1E:A2:51:B7:F5:DE:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e8c53d47-8fbc-3229-af21-b9caae57b1c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.168.0/23
                IPv6:
                  2001:49f0:d13e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:65:f4:d7:18:ce:5e:d8:50:f4:85:80:92:d4:5a:94:93:44:
         12:26:82:50:7c:38:13:a5:96:7c:ef:a3:21:6d:15:95:e7:a4:
         ed:01:e4:85:92:1e:3e:53:38:a1:a8:61:c5:c8:9b:1c:e2:19:
         ae:43:7b:4d:2e:fd:54:44:14:d8:40:3e:71:aa:7c:fa:d0:9c:
         f3:ae:f5:05:b8:12:f9:15:27:cd:7c:1f:4a:de:52:70:eb:b0:
         28:a0:f8:da:fc:bf:1e:1e:f6:de:0a:fd:b4:a5:aa:df:17:22:
         d5:2b:f9:76:cf:ed:36:e8:2f:7a:c1:95:8f:e7:b6:b4:fc:9c:
         0a:4f:82:62:36:f5:b6:5f:ef:e1:66:3e:06:81:e9:c6:1b:16:
         8e:d8:27:85:92:2b:d2:ae:01:66:d0:ac:36:4c:2c:b2:dd:ad:
         fc:51:ae:54:29:fa:a4:85:03:bc:fe:a2:f2:d6:d5:bb:66:e4:
         87:c6:f9:2d:56:2e:7b:0f:ea:70:93:05:fa:9a:94:9c:46:12:
         fc:ff:f3:75:7e:23:bd:21:2a:45:dc:5c:b1:03:47:f2:34:82:
         a6:34:34:76:06:38:34:a5:cb:34:4d:59:99:e8:7b:42:52:d4:
         0c:87:c3:e5:a0:11:f1:2c:89:a2:81:d4:e3:a3:03:c4:6f:23:
         7d:5b:5a:94
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEjt+7j4gDXcUh6uPAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI1MDIxOTAyMDAzOFoXDTI1MDUyMDAxMDAzOFowLzEtMCsGA1UEAxMk
NmI2M2YxYzYtMDIxMi00ZmE2LWEwZTUtNzJhNDQ3ODAwOGY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJzlUJk8CitOtOLc8JtyO1shaCC/p6eMTwsc
SVWlxvrQS1C0KchVUgn6Qar208GVs4XxaRe3aH4rju85FvCxwrlLnw8lyE0sF5kF
tkuSEsAIBp4toX2ob2NS8IqOdh7H8pQyuen4t+eqB+OS1dqPrhSbXub3S//iozGw
DfnjCDA70gdgINCiIL5w+XSvRRu7gshUuKSQ5oPqji3k8urc7r4S0pFg5FmScm27
w2F7y3xOKZed7+zEmGszsn17VXUfcfZd8dG3t6IJzbj0vaSXkTFblKNtonH+K8cT
qxRIr0I77AcYgT2ynClZYnG6mhSIzZkG7wswsnuhYcxdTxlfpwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFIMpHcE8Xbweeq9ej6QeolG39d7zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZThjNTNkNDctOGZiYy0z
MjI5LWFmMjEtYjljYWFlNTdiMWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQB2OOoMA8E
AgACMAkDBwAgAUnw0T4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA3WX01xjOXthQ9IWAktRalJNEEiaCUHw4
E6WWfO+jIW0Vleek7QHkhZIePlM4oahhxcibHOIZrkN7TS79VEQU2EA+cap8+tCc
8671BbgS+RUnzXwfSt5ScOuwKKD42vy/Hh723gr9tKWq3xci1Sv5ds/tNugvesGV
j+e2tPycCk+CYjb1tl/v4WY+BoHpxhsWjtgnhZIr0q4BZtCsNkwsst2t/FGuVCn6
pIUDvP6i8tbVu2bkh8b5LVYuew/qcJMF+pqUnEYS/P/zdX4jvSEqRdxcsQNH8jSC
pjQ0dgY4NKXLNE1Zmeh7QlLUDIfD5aAR8SyJooHU46MDxG8jfVtalA==
-----END CERTIFICATE-----