Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e063393a-feea-31d8-a0f0-955038576b9d.roa
File:                     e063393a-feea-31d8-a0f0-955038576b9d.roa (raw, json)
Hash identifier:          YfOqSQGrmpyO6PatbjuA6fKvo4K2ZcpA58TM4rbwnlk=
Subject key identifier:   61:32:2E:59:FF:2A:92:D3:62:6A:A3:FD:0A:6F:11:05:00:31:A4:14
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A89B3B8734EEC913AA200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e063393a-feea-31d8-a0f0-955038576b9d.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        184.21.248.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:89:b3:b8:73:4e:ec:91:3a:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=e55ef95d-a605-42eb-8a2b-5710691d3c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1a:ef:a8:90:2a:bb:d6:25:6b:84:29:06:ee:
                    56:95:08:3c:c8:ca:7c:af:70:20:74:65:a2:ec:20:
                    d1:78:38:34:7f:11:90:e2:e6:b9:be:51:11:11:d3:
                    8b:b8:3d:42:1c:8f:0b:07:7b:68:ae:f3:45:a0:9e:
                    b2:28:de:81:72:6e:11:f1:5f:95:15:87:98:66:6d:
                    db:6a:d0:cd:22:cf:c8:26:2e:c0:d7:92:b9:87:cc:
                    89:55:55:2a:16:cb:5b:01:5d:2a:51:99:17:f0:df:
                    77:19:db:bd:5b:16:dd:2a:8a:aa:f9:12:ba:e6:86:
                    0a:e1:75:df:26:6a:5e:f4:e3:8b:bd:80:25:04:1e:
                    77:a5:2a:9c:a1:5d:e6:dc:67:e4:a9:30:fe:8d:03:
                    ac:4e:15:7d:f0:3d:8c:59:8a:96:25:b8:2b:87:51:
                    27:b8:fd:93:28:45:c9:65:8c:d5:99:71:6f:63:8c:
                    fc:1e:b1:e9:73:c8:a1:dd:92:cc:00:05:c1:b8:bb:
                    dd:75:0e:c2:1c:2f:6c:b8:52:ae:3c:4b:8a:16:b6:
                    3f:3e:51:08:03:ad:3a:22:43:e8:23:cc:81:aa:6b:
                    60:7a:93:2c:4d:41:9a:2f:63:86:4b:bd:37:af:3a:
                    ea:32:cb:b5:44:31:e3:53:a5:87:03:a7:21:c7:1f:
                    e8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:32:2E:59:FF:2A:92:D3:62:6A:A3:FD:0A:6F:11:05:00:31:A4:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e063393a-feea-31d8-a0f0-955038576b9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:fe:6c:86:c8:26:69:27:f1:e2:ef:82:fe:98:1f:20:79:03:
         b0:6c:86:67:9d:0b:d3:9f:d7:64:a3:f9:7d:87:4c:27:9b:45:
         b8:80:7c:11:1e:0f:dc:60:d9:19:e5:73:1c:73:d3:cd:83:01:
         b0:b1:ac:b5:fc:2c:fd:5c:0f:0e:2a:f6:17:77:14:21:ae:13:
         95:86:ae:26:f5:34:d3:61:98:9a:54:88:c0:83:59:7d:5a:c2:
         ae:13:fa:48:20:bd:7f:ed:32:0d:d3:49:7e:94:f9:7a:ae:06:
         a6:a2:5e:17:0d:5a:23:35:2a:7f:ed:21:1a:c1:0c:7e:74:f6:
         f8:49:04:6c:48:6c:9d:f0:b9:d9:b0:3f:e8:89:12:e6:e6:b8:
         3b:29:71:ce:f4:43:e9:3b:1b:4a:a8:4e:58:ac:69:5d:2d:e2:
         51:ec:8f:62:7b:da:b1:7e:48:ea:1c:a1:10:9c:ef:ea:1d:22:
         5f:bd:35:51:e5:21:75:4c:2b:8b:c0:d4:9e:33:24:75:b6:bd:
         5e:8d:f4:d1:95:c0:8d:6e:c3:56:55:a5:65:a3:59:b2:e6:a5:
         cf:c0:34:ab:4e:1c:62:16:f2:24:08:ea:12:20:1b:65:fa:41:
         4a:e7:49:6a:4e:30:13:56:30:93:93:5f:14:e5:93:d2:68:5a:
         6b:8b:4c:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKomzuHNO7JE6ogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZTU1ZWY5NWQtYTYwNS00MmViLThhMmItNTcxMDY5MWQzYzIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihrvqJAqu9Yla4QpBu5WlQg8yMp8r3AgdGWi
7CDReDg0fxGQ4ua5vlEREdOLuD1CHI8LB3torvNFoJ6yKN6Bcm4R8V+VFYeYZm3b
atDNIs/IJi7A15K5h8yJVVUqFstbAV0qUZkX8N93Gdu9WxbdKoqq+RK65oYK4XXf
Jmpe9OOLvYAlBB53pSqcoV3m3GfkqTD+jQOsThV98D2MWYqWJbgrh1EnuP2TKEXJ
ZYzVmXFvY4z8HrHpc8ih3ZLMAAXBuLvddQ7CHC9suFKuPEuKFrY/PlEIA606IkPo
I8yBqmtgepMsTUGaL2OGS703rzrqMsu1RDHjU6WHA6chxx/oKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGEyLln/KpLTYmqj/QpvEQUAMaQUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTA2MzM5M2EtZmVlYS0z
MWQ4LWEwZjAtOTU1MDM4NTc2YjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBX4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG7+bIbIJmkn8eLvgv6YHyB5A7BshmedC9Of12Sj+X2HTCebRbiAfBEe
D9xg2Rnlcxxz082DAbCxrLX8LP1cDw4q9hd3FCGuE5WGrib1NNNhmJpUiMCDWX1a
wq4T+kggvX/tMg3TSX6U+XquBqaiXhcNWiM1Kn/tIRrBDH509vhJBGxIbJ3wudmw
P+iJEubmuDspcc70Q+k7G0qoTlisaV0t4lHsj2J72rF+SOocoRCc7+odIl+9NVHl
IXVMK4vA1J4zJHW2vV6N9NGVwI1uw1ZVpWWjWbLmpc/ANKtOHGIW8iQI6hIgG2X6
QUrnSWpOMBNWMJOTXxTlk9JoWmuLTF4=
-----END CERTIFICATE-----