Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e0509c46-0481-335e-9abf-5705ae2ce135.roa
File:                     e0509c46-0481-335e-9abf-5705ae2ce135.roa (raw, json)
Hash identifier:          Z7GhvSu29FGByFkeOCjXJRlhQMBfuXB4IXxUhqnGc4c=
Subject key identifier:   AE:19:8B:EA:88:33:9C:34:56:71:61:90:E6:D4:D2:EF:AA:69:64:D2
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F432858484C1014A2ACEEA3D007710440
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e0509c46-0481-335e-9abf-5705ae2ce135.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     202
IP address blocks:        20.132.0.0/20 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:14:a2:ac:ee:a3:d0:07:71:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=4b5d5356-4ff0-4254-98f1-e5bd046c2cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e9:85:a2:9f:86:5b:ce:1a:b8:fe:b5:89:37:
                    32:8d:9c:9d:e8:f8:aa:09:87:38:56:00:2e:b7:c7:
                    17:26:c0:12:e5:ec:25:39:36:9d:b5:61:02:ed:c7:
                    2e:d5:2a:65:35:a1:82:b1:62:e7:6c:28:4a:3e:d8:
                    06:1d:b2:6c:22:be:17:74:aa:51:3a:92:91:8b:7c:
                    00:4d:f5:4e:87:94:1e:08:a1:8c:87:9c:db:46:b0:
                    af:85:d3:98:63:10:b5:9b:c7:0e:2e:f1:1c:0d:fc:
                    36:02:3f:16:67:7d:ec:7b:e7:4d:10:1e:2e:73:bc:
                    0d:08:aa:12:ef:0a:32:0b:a7:15:84:67:6b:62:f1:
                    a8:74:ee:eb:8b:88:62:83:f7:09:87:9c:c8:5f:04:
                    71:15:20:d0:f2:d9:e7:3e:6b:7a:2b:38:f7:15:8e:
                    9a:d8:a0:6c:95:b6:d3:19:74:c1:57:6b:6e:48:e0:
                    64:26:6e:e6:38:09:21:bc:35:5b:3f:98:5d:62:dd:
                    ed:d5:8b:39:fa:26:eb:28:56:11:a5:d5:af:aa:ed:
                    44:70:1c:68:e5:cf:d2:1f:49:77:9f:fe:fe:2f:22:
                    04:6a:73:74:5e:fd:53:0e:58:06:c3:8a:7c:e1:c7:
                    97:73:ca:1d:26:e0:4e:69:99:bc:a7:a1:34:5b:5c:
                    27:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:19:8B:EA:88:33:9C:34:56:71:61:90:E6:D4:D2:EF:AA:69:64:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e0509c46-0481-335e-9abf-5705ae2ce135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.132.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:74:6f:92:02:65:0a:0e:8b:de:b7:16:a8:6c:9b:7d:cd:6e:
         6b:f1:32:78:e0:c0:bb:38:bc:22:07:04:f2:e9:a7:ed:c2:44:
         41:54:be:39:fc:09:25:4e:c6:4f:c2:f9:b5:4e:7a:05:27:1c:
         a8:cf:91:89:34:f4:70:bf:74:78:69:12:65:4a:15:fc:ab:88:
         c3:c3:14:df:7a:2b:bd:98:a4:e4:29:79:4f:d5:20:58:9c:96:
         92:2a:ff:70:53:a3:cf:b9:cf:e8:c2:f1:d5:47:81:70:c1:45:
         a2:97:45:7c:47:bd:0e:c1:b6:cc:e4:73:31:79:15:70:38:7b:
         cd:ba:9d:a1:f6:31:fa:4c:49:fb:d4:28:50:d8:69:55:8e:3a:
         db:d9:03:da:73:46:0a:65:f6:48:bd:87:7b:e1:e3:14:bb:12:
         34:c9:d6:b6:71:a0:37:bc:be:83:80:1b:43:29:47:48:91:ce:
         17:27:d4:fa:3d:83:c2:00:58:ec:24:1e:e1:e8:5e:7f:5f:3e:
         ee:19:bc:e6:f1:f3:99:f0:91:5f:91:78:cf:5b:00:71:a6:18:
         8f:19:75:f6:0b:75:54:de:39:c6:36:1d:ed:c4:28:7e:a1:db:
         d7:be:e9:d1:c3:b6:4f:b1:a4:9b:06:4c:19:8f:ed:49:11:d9:
         83:81:91:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEBSirO6j0AdxBEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NGI1ZDUzNTYtNGZmMC00MjU0LTk4ZjEtZTViZDA0NmMyY2Y1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhumFop+GW84auP61iTcyjZyd6PiqCYc4VgAu
t8cXJsAS5ewlOTadtWEC7ccu1SplNaGCsWLnbChKPtgGHbJsIr4XdKpROpKRi3wA
TfVOh5QeCKGMh5zbRrCvhdOYYxC1m8cOLvEcDfw2Aj8WZ33se+dNEB4uc7wNCKoS
7woyC6cVhGdrYvGodO7ri4hig/cJh5zIXwRxFSDQ8tnnPmt6Kzj3FY6a2KBslbbT
GXTBV2tuSOBkJm7mOAkhvDVbP5hdYt3t1Ys5+ibrKFYRpdWvqu1EcBxo5c/SH0l3
n/7+LyIEanN0Xv1TDlgGw4p84ceXc8odJuBOaZm8p6E0W1wn8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK4Zi+qIM5w0VnFhkObU0u+qaWTSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTA1MDljNDYtMDQ4MS0z
MzVlLTlhYmYtNTcwNWFlMmNlMTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIQAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGF0b5ICZQoOi963Fqhsm33NbmvxMnjgwLs4vCIHBPLpp+3CREFUvjn8
CSVOxk/C+bVOegUnHKjPkYk09HC/dHhpEmVKFfyriMPDFN96K72YpOQpeU/VIFic
lpIq/3BTo8+5z+jC8dVHgXDBRaKXRXxHvQ7BtszkczF5FXA4e826naH2MfpMSfvU
KFDYaVWOOtvZA9pzRgpl9ki9h3vh4xS7EjTJ1rZxoDe8voOAG0MpR0iRzhcn1Po9
g8IAWOwkHuHoXn9fPu4ZvObx85nwkV+ReM9bAHGmGI8ZdfYLdVTeOcY2He3EKH6h
29e+6dHDtk+xpJsGTBmP7UkR2YOBkYc=
-----END CERTIFICATE-----