Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a6569b4-2e26-3ee4-91ef-77be5945245b.roa
File:                     0a6569b4-2e26-3ee4-91ef-77be5945245b.roa (raw, json)
Hash identifier:          hUdHSPptw6noDyI46Iq+vRielTc51AHMoN2YSqSpyVc=
Subject key identifier:   F3:A9:78:C9:46:25:38:25:F8:5E:F7:43:A2:A7:0F:3A:F0:4A:7B:8A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C10E99230277A702DA15458
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a6569b4-2e26-3ee4-91ef-77be5945245b.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        68.54.122.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:e9:92:30:27:7a:70:2d:a1:54:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=efb307e1-b8c3-4705-9c57-61a4627f5063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fe:47:45:39:56:e3:d9:c2:68:42:1f:bc:2f:
                    a2:58:38:81:01:e0:9a:d3:ed:20:dc:70:20:65:2b:
                    24:a4:9b:c3:c9:95:ba:5c:8c:9d:54:f4:53:d0:95:
                    c3:25:26:ed:75:d0:de:ce:b1:32:a7:1d:ee:a5:97:
                    e3:90:ab:a0:54:d1:17:fe:f4:ce:94:02:e4:8b:29:
                    da:92:f4:bf:5a:73:b1:fa:62:15:32:50:8b:74:d3:
                    b6:cd:94:9b:e7:e8:69:71:33:50:75:63:b4:00:b6:
                    aa:8a:0d:7e:54:74:3d:af:2d:c9:1b:00:cb:cf:48:
                    6d:7f:79:7d:11:ac:26:38:c0:d8:f8:27:35:26:75:
                    e5:5d:2f:00:cb:53:fd:49:f5:98:db:5f:97:46:87:
                    a9:6a:74:e2:0d:94:28:92:9f:b1:27:4e:d9:64:ee:
                    65:9b:2a:5c:a7:f7:9f:f3:91:13:5a:43:5a:f7:8d:
                    75:b5:18:75:a9:10:1c:4a:bc:2a:27:86:c6:3f:d6:
                    ca:6d:90:0c:2a:ec:7f:98:f7:53:20:4c:ec:8d:c4:
                    0d:8d:0a:02:46:22:38:0a:f4:38:9d:89:12:93:8c:
                    a6:f8:1c:a7:f2:bd:40:dd:51:f8:e9:21:21:1e:17:
                    92:0d:51:12:1d:95:3a:c8:00:b7:cd:d6:28:12:59:
                    94:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A9:78:C9:46:25:38:25:F8:5E:F7:43:A2:A7:0F:3A:F0:4A:7B:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a6569b4-2e26-3ee4-91ef-77be5945245b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.54.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:2e:e3:03:28:b6:a4:1f:94:c2:84:ab:0b:ec:0c:22:d0:4e:
         5f:52:a0:a2:06:d6:73:51:47:c5:da:94:45:bf:7e:10:62:9c:
         c1:eb:6e:c2:8c:a0:30:57:8e:56:c8:c3:cd:00:94:61:30:59:
         44:0b:c8:89:ff:03:ff:a4:c8:92:ba:dd:b4:29:2f:81:a4:ed:
         b9:17:9a:c0:6f:9d:99:01:b9:1b:f4:02:8a:c2:34:57:7e:b2:
         9b:e8:b8:ab:97:25:0f:88:6f:79:85:f1:5c:1c:a2:a2:81:82:
         bf:a8:c1:2d:f3:ec:c2:21:c0:0e:25:ef:10:db:b8:d1:d5:c1:
         00:c7:fd:7f:1e:c4:01:80:ee:b7:85:22:32:c0:a8:77:94:da:
         c3:f5:5f:61:b6:4f:35:ac:ba:18:ce:b7:e2:57:26:a1:dc:8d:
         5d:13:e9:fe:1b:c1:55:89:6b:2a:38:8c:85:78:e9:96:87:ad:
         9b:18:e8:65:8d:a9:9b:1a:a4:78:5f:1e:0e:6f:c5:25:03:49:
         93:8f:5a:7b:e2:9f:23:47:df:09:f9:50:9d:81:09:ea:0b:90:
         a0:bd:bd:60:55:01:a4:0b:06:d8:1b:c1:1e:05:b1:87:95:c5:
         6b:1d:bc:04:7b:1c:d8:7b:47:20:6f:14:f4:72:82:63:01:7a:
         60:0d:37:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEOmSMCd6cC2hVFgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ZWZiMzA3ZTEtYjhjMy00NzA1LTljNTctNjFhNDYyN2Y1MDYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/5HRTlW49nCaEIfvC+iWDiBAeCa0+0g3HAg
ZSskpJvDyZW6XIydVPRT0JXDJSbtddDezrEypx3upZfjkKugVNEX/vTOlALkiyna
kvS/WnOx+mIVMlCLdNO2zZSb5+hpcTNQdWO0ALaqig1+VHQ9ry3JGwDLz0htf3l9
EawmOMDY+Cc1JnXlXS8Ay1P9SfWY21+XRoepanTiDZQokp+xJ07ZZO5lmypcp/ef
85ETWkNa9411tRh1qRAcSrwqJ4bGP9bKbZAMKux/mPdTIEzsjcQNjQoCRiI4CvQ4
nYkSk4ym+Byn8r1A3VH46SEhHheSDVESHZU6yAC3zdYoElmU+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPOpeMlGJTgl+F73Q6KnDzrwSnuKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGE2NTY5YjQtMmUyNi0z
ZWU0LTkxZWYtNzdiZTU5NDUyNDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDZ6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALcu4wMotqQflMKEqwvsDCLQTl9SoKIG1nNRR8XalEW/fhBinMHrbsKM
oDBXjlbIw80AlGEwWUQLyIn/A/+kyJK63bQpL4Gk7bkXmsBvnZkBuRv0AorCNFd+
spvouKuXJQ+Ib3mF8VwcoqKBgr+owS3z7MIhwA4l7xDbuNHVwQDH/X8exAGA7reF
IjLAqHeU2sP1X2G2TzWsuhjOt+JXJqHcjV0T6f4bwVWJayo4jIV46ZaHrZsY6GWN
qZsapHhfHg5vxSUDSZOPWnvinyNH3wn5UJ2BCeoLkKC9vWBVAaQLBtgbwR4FsYeV
xWsdvAR7HNh7RyBvFPRygmMBemANNww=
-----END CERTIFICATE-----