Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/93fb0bb9-c163-344b-87f1-3fd5d877f8b7.roa
File:                     93fb0bb9-c163-344b-87f1-3fd5d877f8b7.roa (raw, json)
Hash identifier:          5V7M9ReZ8Lgo2AaB2E7+pRwO494r9IIrU+q1kBmI8Bs=
Subject key identifier:   FC:3F:4F:8F:83:FB:81:7E:24:E8:C2:43:78:1B:B8:76:5B:9F:17:C3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A31A830CC8C24D4A03EF8
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/93fb0bb9-c163-344b-87f1-3fd5d877f8b7.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        67.54.202.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:31:a8:30:cc:8c:24:d4:a0:3e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=b3385ef5-3e9e-417a-a0e9-871cb19899c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:92:06:57:28:b7:25:b1:98:c3:e6:e3:f4:b5:
                    9f:55:7a:5f:ef:a1:db:0b:da:18:b4:59:03:e1:80:
                    48:93:4c:44:b9:38:91:41:0d:a2:82:41:cc:e4:88:
                    d6:1c:c7:fd:9d:96:33:0d:f2:1a:33:47:08:38:d3:
                    d4:be:43:af:d3:31:67:e2:23:43:8c:7f:52:ed:e8:
                    77:0a:8d:88:ae:4f:32:2a:c9:a2:49:91:dd:7a:8d:
                    67:60:b7:18:9b:f4:74:38:aa:37:87:5b:4e:66:d2:
                    c5:eb:51:3c:b3:da:d5:88:d4:69:b0:dc:ad:c9:1b:
                    a4:48:b1:f4:32:a9:c1:bd:1a:4b:33:e4:61:69:ef:
                    6d:7c:45:c4:de:fd:55:2a:ad:96:6b:81:16:25:01:
                    b7:87:12:95:f4:b2:37:b2:f5:f8:f3:84:6a:d8:b6:
                    73:f8:f2:7e:e0:8a:8c:34:21:40:17:c1:49:8c:0d:
                    81:63:c8:5a:e7:d1:47:e8:64:5b:dd:c9:c4:e2:7a:
                    6d:27:74:c6:40:c1:51:20:25:33:ff:70:3c:09:5f:
                    fa:f7:c8:2b:2e:8f:d3:38:d6:87:75:3a:ea:28:35:
                    6f:2b:60:89:2e:c9:38:f7:8d:ed:a8:ab:c9:8c:73:
                    f0:e4:24:ba:2e:21:f8:08:6b:cc:17:74:59:22:7a:
                    bd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3F:4F:8F:83:FB:81:7E:24:E8:C2:43:78:1B:B8:76:5B:9F:17:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/93fb0bb9-c163-344b-87f1-3fd5d877f8b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:8e:90:43:81:b8:7e:e3:98:43:12:35:6c:71:91:bb:e9:27:
         45:ed:94:27:e7:1c:c9:f4:c8:9a:89:a9:e0:3f:88:8b:4e:17:
         85:96:d6:e0:49:d4:c9:fe:e6:d6:e1:d5:9d:db:da:2b:b5:42:
         eb:5b:bf:19:58:8b:57:ca:8d:bf:c6:86:6a:ff:c7:8c:0d:2e:
         91:3f:57:6e:6f:5f:2b:d1:90:fc:89:79:35:95:e7:d2:c2:35:
         4f:3c:69:33:36:5d:9e:e8:bc:e8:3e:94:23:05:c7:b7:5b:1e:
         66:10:a4:eb:66:41:a3:fa:83:3f:93:85:62:7a:ed:69:55:34:
         bf:b3:34:c4:5d:9d:27:a9:de:dd:e7:c3:dc:a9:24:6d:2e:1e:
         2f:bb:4e:b1:46:1a:81:b2:31:1a:9c:70:6a:b9:ee:74:e7:8c:
         34:db:b7:5c:4d:d9:80:71:a5:6c:49:d7:fb:df:3f:44:95:18:
         9f:26:c0:dc:fa:d5:0a:c5:35:76:34:8b:0c:1d:77:d4:8a:49:
         20:d7:b8:df:9e:6c:02:d3:f3:8c:06:64:11:19:f2:4a:fe:e8:
         2e:f1:fe:f7:9f:4e:79:bd:89:d1:56:b5:51:a6:92:32:06:a7:
         99:b7:bf:a2:3e:94:b8:5f:7a:6a:37:d6:54:b2:2c:d7:17:2b:
         97:bf:57:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKjGoMMyMJNSgPvgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
YjMzODVlZjUtM2U5ZS00MTdhLWEwZTktODcxY2IxOTg5OWMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJIGVyi3JbGYw+bj9LWfVXpf76HbC9oYtFkD
4YBIk0xEuTiRQQ2igkHM5IjWHMf9nZYzDfIaM0cIONPUvkOv0zFn4iNDjH9S7eh3
Co2Irk8yKsmiSZHdeo1nYLcYm/R0OKo3h1tOZtLF61E8s9rViNRpsNytyRukSLH0
MqnBvRpLM+Rhae9tfEXE3v1VKq2Wa4EWJQG3hxKV9LI3svX484Rq2LZz+PJ+4IqM
NCFAF8FJjA2BY8ha59FH6GRb3cnE4nptJ3TGQMFRICUz/3A8CV/698grLo/TONaH
dTrqKDVvK2CJLsk4943tqKvJjHPw5CS6LiH4CGvMF3RZInq9rwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPw/T4+D+4F+JOjCQ3gbuHZbnxfDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTNmYjBiYjktYzE2My0z
NDRiLTg3ZjEtM2ZkNWQ4NzdmOGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzbKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM+OkEOBuH7jmEMSNWxxkbvpJ0XtlCfnHMn0yJqJqeA/iItOF4WW1uBJ
1Mn+5tbh1Z3b2iu1QutbvxlYi1fKjb/Ghmr/x4wNLpE/V25vXyvRkPyJeTWV59LC
NU88aTM2XZ7ovOg+lCMFx7dbHmYQpOtmQaP6gz+ThWJ67WlVNL+zNMRdnSep3t3n
w9ypJG0uHi+7TrFGGoGyMRqccGq57nTnjDTbt1xN2YBxpWxJ1/vfP0SVGJ8mwNz6
1QrFNXY0iwwdd9SKSSDXuN+ebALT84wGZBEZ8kr+6C7x/vefTnm9idFWtVGmkjIG
p5m3v6I+lLhfemo31lSyLNcXK5e/V+E=
-----END CERTIFICATE-----