Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8d658794-56d7-3b38-8373-803b9414aa8b.roa
File:                     8d658794-56d7-3b38-8373-803b9414aa8b.roa (raw, json)
Hash identifier:          hNtrzAnwqKKKt/esO8rgSKwFDhaw6Sj8GZ57QePX/J4=
Subject key identifier:   8F:CA:E6:9C:55:F7:71:9C:34:64:0E:1F:A4:43:DB:79:60:CB:C0:0C
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584838854F03A91E52D5A644A380
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8d658794-56d7-3b38-8373-803b9414aa8b.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     20473
IP address blocks:        8.9.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:4f:03:a9:1e:52:d5:a6:44:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=428e701e-2195-468e-888f-f53b4f90a6e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:85:8a:da:82:a8:99:2c:73:ec:5a:00:93:5e:
                    34:ce:89:f1:da:61:03:63:73:3d:15:a9:9f:b1:8b:
                    f2:b2:64:e8:dc:ff:f7:d5:56:23:56:1c:28:2b:77:
                    04:65:85:c8:33:0d:1d:4b:36:1f:29:d1:b0:c8:78:
                    c5:ef:aa:a9:f2:2d:dc:92:6d:56:3d:3c:8c:1f:bb:
                    9c:43:c3:a5:b0:59:06:8a:34:ec:d0:32:f0:65:53:
                    6f:bd:1c:52:2c:ab:84:ba:bf:47:f9:9e:3e:fa:f9:
                    d1:26:8a:20:d7:b4:2e:8d:7e:1a:f5:78:b6:22:a5:
                    bd:3b:73:b4:e0:f7:8f:56:5a:e4:68:3b:4e:dd:9d:
                    f5:52:44:cc:d2:f8:71:30:8d:10:dd:df:8c:aa:e1:
                    d0:b1:30:ab:55:b8:29:04:fa:43:d6:9d:d4:9f:80:
                    28:8b:a1:3a:3b:59:71:91:a3:77:ed:70:91:72:d4:
                    eb:4f:cc:01:c7:dc:7b:75:d7:5e:8c:28:4c:c4:05:
                    77:8c:4e:56:79:ba:86:4e:ba:6f:c7:c5:6e:a0:c5:
                    87:ed:94:13:14:3b:5f:21:8b:be:26:5e:4f:07:15:
                    fa:8d:70:e2:ae:d1:11:f6:a1:1a:8f:96:3d:ea:d4:
                    a9:92:ba:4f:86:f9:92:a3:d9:cf:6e:60:54:60:76:
                    bc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:CA:E6:9C:55:F7:71:9C:34:64:0E:1F:A4:43:DB:79:60:CB:C0:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8d658794-56d7-3b38-8373-803b9414aa8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.9.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:1d:fa:f5:47:80:72:ed:28:ae:6f:73:58:5a:a2:19:cb:54:
         10:da:78:8c:3c:aa:57:5e:fa:0b:98:5f:d2:ca:37:59:71:b5:
         20:63:28:1d:90:5e:06:cb:f5:77:45:9d:a6:46:4f:7a:68:da:
         ee:35:fc:3f:a2:83:29:51:b1:5b:11:95:51:4e:98:d7:ef:c1:
         94:02:4f:b5:9b:00:c7:2e:44:d3:0b:75:44:0e:ef:51:1e:bf:
         b0:df:4e:22:b8:a0:1d:fe:fc:1f:85:68:a4:43:bd:a1:1d:b6:
         6d:af:c4:13:9b:32:a0:a6:fc:72:6c:f5:27:b6:8c:cb:5d:e7:
         2a:69:3c:78:74:9f:5e:4b:28:75:4e:dd:ad:f8:37:ae:9e:28:
         d2:99:73:98:18:19:11:c5:db:9a:fc:bb:5f:25:6d:81:d8:c4:
         2d:68:a2:ee:1f:73:2b:a2:3d:c4:8d:a6:6e:75:a6:0a:95:fe:
         ef:3c:0d:eb:9f:8b:38:74:a8:da:93:89:45:24:18:e1:6b:68:
         41:66:98:3c:27:72:f8:0d:13:0b:af:41:a1:22:c8:a2:ff:09:
         3f:08:50:d9:05:2b:13:40:61:26:71:d7:4d:93:4c:55:11:45:
         7a:ff:d7:0c:79:3b:84:ee:38:c6:51:b2:9b:9b:0a:ae:1b:c4:
         8e:ba:b8:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg4hU8DqR5S1aZEo4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk
NDI4ZTcwMWUtMjE5NS00NjhlLTg4OGYtZjUzYjRmOTBhNmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYWK2oKomSxz7FoAk140zonx2mEDY3M9Famf
sYvysmTo3P/31VYjVhwoK3cEZYXIMw0dSzYfKdGwyHjF76qp8i3ckm1WPTyMH7uc
Q8OlsFkGijTs0DLwZVNvvRxSLKuEur9H+Z4++vnRJoog17QujX4a9Xi2IqW9O3O0
4PePVlrkaDtO3Z31UkTM0vhxMI0Q3d+MquHQsTCrVbgpBPpD1p3Un4Aoi6E6O1lx
kaN37XCRctTrT8wBx9x7dddejChMxAV3jE5WebqGTrpvx8VuoMWH7ZQTFDtfIYu+
Jl5PBxX6jXDirtER9qEaj5Y96tSpkrpPhvmSo9nPbmBUYHa86wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI/K5pxV93GcNGQOH6RD23lgy8AMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOGQ2NTg3OTQtNTZkNy0z
YjM4LTgzNzMtODAzYjk0MTRhYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAkFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFsd+vVHgHLtKK5vc1haohnLVBDaeIw8qlde+guYX9LKN1lxtSBjKB2Q
XgbL9XdFnaZGT3po2u41/D+igylRsVsRlVFOmNfvwZQCT7WbAMcuRNMLdUQO71Ee
v7DfTiK4oB3+/B+FaKRDvaEdtm2vxBObMqCm/HJs9Se2jMtd5yppPHh0n15LKHVO
3a34N66eKNKZc5gYGRHF25r8u18lbYHYxC1oou4fcyuiPcSNpm51pgqV/u88Deuf
izh0qNqTiUUkGOFraEFmmDwncvgNEwuvQaEiyKL/CT8IUNkFKxNAYSZx102TTFUR
RXr/1wx5O4TuOMZRspubCq4bxI66uFQ=
-----END CERTIFICATE-----