Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/6924619e-b6ce-3fb0-92e0-c20bbce6e352.roa
File:                     6924619e-b6ce-3fb0-92e0-c20bbce6e352.roa (raw, json)
Hash identifier:          sMzlpMYeV23OluSrvV+cvzzYRa18YAcGrna5rCdVTXM=
Subject key identifier:   8D:17:21:1E:97:75:46:56:48:36:75:90:0F:96:33:81:36:A3:ED:9E
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F4328584834556908E98C4BF149A3C880
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/6924619e-b6ce-3fb0-92e0-c20bbce6e352.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     14593
IP address blocks:        98.97.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:69:08:e9:8c:4b:f1:49:a3:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=21c1f17e-dfe3-4926-8bcd-af7c1d850adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:77:b7:28:03:68:7c:a9:c4:89:4a:19:6f:15:
                    90:f3:22:fa:2a:1b:25:4c:88:7e:93:60:87:3d:14:
                    71:18:d3:79:7e:19:c2:b6:46:e3:7d:b6:ee:ad:02:
                    c4:6b:c2:95:74:77:21:09:22:fe:e1:10:98:ad:5f:
                    a1:5c:89:54:ff:85:da:03:d7:80:16:24:4d:58:af:
                    d7:63:8b:a3:34:f6:61:71:52:77:4b:5d:d2:19:5a:
                    2d:e9:3c:ca:56:8f:13:00:8e:48:d1:e9:3c:36:54:
                    3e:55:cb:ea:15:b5:e1:2a:49:e1:32:6f:75:20:2d:
                    a3:34:53:b9:5b:c3:66:72:1c:b1:b0:a7:90:9f:4a:
                    9e:5c:8e:e2:f0:91:f7:1c:93:18:c1:ba:bd:f1:12:
                    bf:ee:54:46:e1:bf:99:e5:e1:54:21:ef:f8:96:a6:
                    86:ac:3a:fc:00:5d:5d:af:fa:73:1a:a0:d2:34:88:
                    3d:b1:04:86:aa:59:78:f5:1a:1e:e6:1d:b4:07:92:
                    c2:15:75:75:9d:8c:49:08:de:7f:e5:cc:a5:27:d0:
                    16:a6:eb:7d:97:a1:a9:d5:f1:92:c6:53:ba:28:98:
                    19:84:91:5b:0c:8c:35:0e:67:66:d2:88:63:b9:f6:
                    66:d1:c2:43:cc:e3:a4:e6:06:9b:e0:44:f4:e2:0c:
                    64:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:17:21:1E:97:75:46:56:48:36:75:90:0F:96:33:81:36:A3:ED:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/6924619e-b6ce-3fb0-92e0-c20bbce6e352.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.97.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         df:c2:9b:6d:17:1c:28:1b:d6:93:c3:c3:e3:6a:bf:be:7b:52:
         de:82:42:1e:6f:4a:fe:8e:73:5e:9b:32:17:9d:94:37:7d:2c:
         ac:da:ef:d1:95:22:28:85:91:4e:66:fb:03:54:19:4a:d0:62:
         5e:d7:32:9d:d7:ff:70:ba:65:5b:5a:66:0d:cb:10:96:63:ec:
         17:7c:2c:9b:2c:c0:48:65:b9:c1:88:1e:27:7a:ab:c1:49:52:
         63:9a:24:16:24:14:63:9f:d8:fb:3d:14:b6:a7:d8:a9:64:9e:
         20:63:54:c9:92:06:ef:fe:66:2f:56:cb:86:5b:41:b3:ee:8e:
         17:b3:35:e5:a1:28:fb:f4:97:cf:79:15:cd:91:45:a3:bc:12:
         e3:ed:aa:8f:77:3a:a0:26:a9:38:1f:80:a3:27:ed:b5:63:a3:
         1a:6c:bf:32:06:3e:76:5d:56:4c:d0:21:5f:1b:b9:57:f9:4a:
         83:ea:8e:1b:d9:4c:87:2a:ff:02:33:bf:e3:da:73:15:76:16:
         30:d3:af:b5:6e:97:1e:2e:0d:fe:3f:b1:a9:e7:e3:ee:40:ab:
         5f:13:f5:66:83:10:7d:32:64:23:12:c1:52:e7:66:98:aa:a5:
         50:88:43:58:83:33:04:a5:09:83:23:52:02:79:0a:1b:ca:83:
         ac:13:7f:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg0VWkI6YxL8UmjyIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWUyNjhhYWEtNjMwNi00OTg4LTk5ZjctZDU4MDJhNjdi
NTc3MB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk
MjFjMWYxN2UtZGZlMy00OTI2LThiY2QtYWY3YzFkODUwYWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHe3KANofKnEiUoZbxWQ8yL6KhslTIh+k2CH
PRRxGNN5fhnCtkbjfbburQLEa8KVdHchCSL+4RCYrV+hXIlU/4XaA9eAFiRNWK/X
Y4ujNPZhcVJ3S13SGVot6TzKVo8TAI5I0ek8NlQ+VcvqFbXhKknhMm91IC2jNFO5
W8NmchyxsKeQn0qeXI7i8JH3HJMYwbq98RK/7lRG4b+Z5eFUIe/4lqaGrDr8AF1d
r/pzGqDSNIg9sQSGqll49Roe5h20B5LCFXV1nYxJCN5/5cylJ9AWput9l6Gp1fGS
xlO6KJgZhJFbDIw1Dmdm0ohjufZm0cJDzOOk5gab4ET04gxkkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI0XIR6XdUZWSDZ1kA+WM4E2o+2eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2
OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgwMmE2N2I1NzcvNjkyNDYxOWUtYjZjZS0z
ZmIwLTkyZTAtYzIwYmJjZTZlMzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUyNjhhYWEtNjMwNi00OTg4LTk5
ZjctZDU4MDJhNjdiNTc3LzFlMjY4YWFhLTYzMDYtNDk4OC05OWY3LWQ1ODAyYTY3
YjU3Ny5jcmwwHwYDVR0jBBgwFoAUburdt4goigGRbqOJq8lh/SB9c8wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgw
MmE2N2I1NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYmGAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAN/Cm20XHCgb1pPDw+Nqv757Ut6CQh5vSv6Oc16bMhedlDd9LKza79GV
IiiFkU5m+wNUGUrQYl7XMp3X/3C6ZVtaZg3LEJZj7Bd8LJsswEhlucGIHid6q8FJ
UmOaJBYkFGOf2Ps9FLan2KlkniBjVMmSBu/+Zi9Wy4ZbQbPujhezNeWhKPv0l895
Fc2RRaO8EuPtqo93OqAmqTgfgKMn7bVjoxpsvzIGPnZdVkzQIV8buVf5SoPqjhvZ
TIcq/wIzv+PacxV2FjDTr7Vulx4uDf4/sann4+5Aq18T9WaDEH0yZCMSwVLnZpiq
pVCIQ1iDMwSlCYMjUgJ5ChvKg6wTf+k=
-----END CERTIFICATE-----