Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2433f0be-6ed1-3881-a83f-d02711edd4d9.roa
File:                     2433f0be-6ed1-3881-a83f-d02711edd4d9.roa (raw, json)
Hash identifier:          CA37nCs1q19X69lRGWLp3VOXv6xabwJtttWVE4r8DYc=
Subject key identifier:   CA:C3:0D:E0:ED:B3:60:AC:97:A4:A2:64:74:4F:02:70:1A:A3:70:02
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C126252AFA5CED37777FA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2433f0be-6ed1-3881-a83f-d02711edd4d9.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33491
IP address blocks:        174.62.154.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:62:52:af:a5:ce:d3:77:77:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=23e1444c-a742-4eb7-8bad-0a42316e0627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:38:0e:c3:81:ff:e2:52:0e:aa:dd:2f:0f:23:
                    00:10:86:d5:37:8e:74:a1:70:ea:65:0c:b8:55:68:
                    ad:2e:7b:91:81:58:b6:3f:c4:85:07:7e:2a:59:60:
                    62:9c:7c:35:14:f3:f4:74:cb:0f:b2:27:a5:3b:e5:
                    92:23:9c:99:d4:99:30:13:1e:1f:b8:c6:4b:ff:45:
                    f9:5f:60:17:84:d3:1c:73:51:5c:b1:dc:38:0a:38:
                    c9:38:36:03:30:94:ac:5b:f8:63:27:68:f3:dd:77:
                    0f:d6:45:72:24:20:b2:3e:a7:41:e4:fd:68:19:2e:
                    c1:e0:c3:8b:88:27:a3:72:29:f8:b4:aa:54:4d:f2:
                    03:c2:e5:fb:0a:ab:3b:1e:41:ca:f6:62:2c:1f:84:
                    40:c4:9e:44:96:51:30:8b:01:b4:99:ef:84:a2:bf:
                    60:93:05:b4:f9:c1:2f:2c:89:dd:15:73:c2:0d:84:
                    2a:63:c0:7b:42:2d:ac:d6:1b:6f:01:5a:40:87:f2:
                    ec:e6:0b:fc:a5:e6:5c:6d:68:af:a1:c5:94:9d:89:
                    e1:f5:ca:53:71:56:72:91:dc:29:67:1a:1c:2a:fe:
                    b2:fd:0a:be:48:64:56:50:03:23:8d:b3:16:33:91:
                    bf:84:d1:73:e5:97:bf:a5:ed:95:df:3d:65:ce:eb:
                    ba:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C3:0D:E0:ED:B3:60:AC:97:A4:A2:64:74:4F:02:70:1A:A3:70:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2433f0be-6ed1-3881-a83f-d02711edd4d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.62.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:ae:3c:08:5f:6f:ed:6d:f7:4d:3b:4e:b6:11:39:eb:dd:bd:
         e8:e8:7d:12:d7:b1:62:d6:b5:a9:2d:af:cd:d9:bc:59:5f:16:
         86:f3:73:96:f8:c6:6c:0b:b0:5a:b5:40:a3:c1:60:d1:d6:4b:
         bf:a0:3a:ff:65:36:b8:1c:6f:4b:cf:ff:ba:dc:69:fe:9b:63:
         48:ae:45:17:62:b0:ad:fb:e9:df:e5:ee:fb:0f:69:99:01:e1:
         2e:a0:02:76:4f:0c:a0:c5:36:16:8d:e4:34:4e:9c:5e:29:f2:
         60:f5:fa:0e:03:9e:22:31:60:12:14:55:72:04:22:76:ca:9c:
         1c:b6:85:04:e2:13:cf:14:48:72:8d:66:74:67:3c:5e:bc:96:
         d5:b9:b2:1c:0b:65:37:66:e7:30:6c:6f:cc:80:3f:de:bc:f8:
         10:64:55:15:fb:10:3c:1f:c3:00:4e:a4:5d:69:61:89:ea:4f:
         9c:10:43:76:8c:e0:f6:87:dd:a5:59:18:35:04:ce:3d:b0:86:
         3e:eb:ea:36:5f:21:12:c7:f7:f6:e7:94:18:5f:16:1c:2f:a3:
         5a:78:c4:c7:a9:57:b5:f9:5a:a0:62:03:38:76:9a:fd:b6:b4:
         42:4f:aa:16:ee:7b:b0:25:43:fe:c7:28:12:f6:4b:db:a5:71:
         df:58:ab:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEmJSr6XO03d3+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
MjNlMTQ0NGMtYTc0Mi00ZWI3LThiYWQtMGE0MjMxNmUwNjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDgOw4H/4lIOqt0vDyMAEIbVN450oXDqZQy4
VWitLnuRgVi2P8SFB34qWWBinHw1FPP0dMsPsielO+WSI5yZ1JkwEx4fuMZL/0X5
X2AXhNMcc1Fcsdw4CjjJODYDMJSsW/hjJ2jz3XcP1kVyJCCyPqdB5P1oGS7B4MOL
iCejcin4tKpUTfIDwuX7Cqs7HkHK9mIsH4RAxJ5EllEwiwG0me+Eor9gkwW0+cEv
LIndFXPCDYQqY8B7Qi2s1htvAVpAh/Ls5gv8peZcbWivocWUnYnh9cpTcVZykdwp
ZxocKv6y/Qq+SGRWUAMjjbMWM5G/hNFz5Ze/pe2V3z1lzuu6yQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMrDDeDts2Csl6SiZHRPAnAao3ACMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjQzM2YwYmUtNmVkMS0z
ODgxLWE4M2YtZDAyNzExZWRkNGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrj6aMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJyuPAhfb+1t9007TrYROevdvejofRLXsWLWtaktr83ZvFlfFobzc5b4
xmwLsFq1QKPBYNHWS7+gOv9lNrgcb0vP/7rcaf6bY0iuRRdisK376d/l7vsPaZkB
4S6gAnZPDKDFNhaN5DROnF4p8mD1+g4DniIxYBIUVXIEInbKnBy2hQTiE88USHKN
ZnRnPF68ltW5shwLZTdm5zBsb8yAP968+BBkVRX7EDwfwwBOpF1pYYnqT5wQQ3aM
4PaH3aVZGDUEzj2whj7r6jZfIRLH9/bnlBhfFhwvo1p4xMepV7X5WqBiAzh2mv22
tEJPqhbue7AlQ/7HKBL2S9ulcd9Yqzo=
-----END CERTIFICATE-----