Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2e22497-4725-3706-a4b7-e5cc33506ecb.roa
File:                     b2e22497-4725-3706-a4b7-e5cc33506ecb.roa (raw, json)
Hash identifier:          wL03xOCF6fphYmaDPUPfe9lhdHUkjVNauefwVr20fQU=
Subject key identifier:   4C:DD:FD:AC:69:51:BF:43:8E:98:A7:26:C2:50:A4:4F:48:13:3A:89
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C1074F4B2ABAE2E57E496C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2e22497-4725-3706-a4b7-e5cc33506ecb.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33659
IP address blocks:        73.194.92.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:74:f4:b2:ab:ae:2e:57:e4:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=b6c8d0d2-4e25-40b0-961e-cba5782dd546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:51:41:f6:34:d7:2f:a2:82:8f:63:83:70:ee:
                    34:1d:cd:0b:09:54:60:a7:4b:59:ba:ce:16:6a:62:
                    60:14:19:ab:f2:3e:70:ba:9c:f5:18:dd:83:d1:6b:
                    a7:7f:40:01:ba:b1:62:dc:85:40:26:29:a8:be:00:
                    29:8d:4d:fc:96:a8:21:fe:cb:b7:ac:df:e8:a9:ab:
                    e4:c6:55:0a:16:1f:d1:78:de:b9:f9:d2:6b:f8:32:
                    6f:fe:16:d3:9e:6e:4c:98:87:43:ab:b7:5b:f5:2d:
                    28:b0:b0:48:87:62:12:ee:ba:15:06:bd:2a:ba:34:
                    ec:40:0c:6a:1a:d5:bf:42:c8:d5:95:21:de:e9:5b:
                    7d:5f:b4:78:75:1c:25:5a:36:93:5f:f9:fa:3f:38:
                    f1:af:83:9e:ad:89:c9:c6:2c:af:d0:17:54:2b:93:
                    d9:b7:af:26:1e:74:96:eb:1d:dd:54:39:2d:cb:87:
                    32:36:aa:48:57:e6:c9:c9:8e:0a:9f:6f:f5:cf:1b:
                    50:2a:39:68:e4:8a:c9:25:27:cb:f4:5c:80:1b:7c:
                    5d:80:07:9b:20:83:c7:af:85:13:b5:6b:53:e0:c4:
                    73:00:48:d5:38:97:24:a1:96:f5:e9:d9:cb:79:9c:
                    10:0f:c3:bb:7c:48:f0:17:a4:e5:45:8a:c4:14:eb:
                    93:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:DD:FD:AC:69:51:BF:43:8E:98:A7:26:C2:50:A4:4F:48:13:3A:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2e22497-4725-3706-a4b7-e5cc33506ecb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.194.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:62:56:30:4d:01:e0:35:85:0a:92:30:9a:9d:7e:dd:78:01:
         9b:2d:12:bf:83:c7:de:a8:7c:04:ee:33:3c:32:cb:c1:0d:98:
         9b:ef:77:2c:42:b5:7c:f4:14:db:88:0f:02:82:0f:94:dc:30:
         00:52:d1:e2:e3:64:35:4f:4a:15:19:01:34:9d:67:b7:db:9b:
         3f:db:3a:76:b1:57:98:4e:80:d7:df:0a:eb:07:7c:5b:ae:d2:
         0b:43:36:2a:2e:d2:0a:2d:5a:be:b8:10:7e:c9:a2:3f:39:50:
         7d:0d:18:ca:a6:68:0c:6e:e3:89:ef:f5:41:d5:6a:41:c7:c2:
         4e:e8:b1:57:60:81:76:06:48:cf:e2:44:6e:60:c1:73:86:24:
         77:09:13:a3:5c:f9:d9:7e:96:2e:3a:ba:4f:e6:d6:33:79:be:
         dc:07:20:a1:88:6c:45:85:07:05:6a:57:6c:6f:0d:fc:6b:85:
         b5:50:59:76:45:a8:33:da:d4:e8:aa:7f:a8:c9:8c:a2:36:8d:
         a8:ae:9f:b2:50:64:c8:23:4f:f6:bb:f9:cc:b2:be:bd:90:df:
         3a:da:14:fb:0a:cd:62:d1:dd:4a:bc:46:f8:97:cc:c3:3f:80:
         bf:df:bf:cb:28:45:be:d9:f4:90:76:8d:e0:84:56:0c:9b:f5:
         15:e5:65:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEHT0squuLlfklsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
YjZjOGQwZDItNGUyNS00MGIwLTk2MWUtY2JhNTc4MmRkNTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFFB9jTXL6KCj2ODcO40Hc0LCVRgp0tZus4W
amJgFBmr8j5wupz1GN2D0Wunf0ABurFi3IVAJimovgApjU38lqgh/su3rN/oqavk
xlUKFh/ReN65+dJr+DJv/hbTnm5MmIdDq7db9S0osLBIh2IS7roVBr0qujTsQAxq
GtW/QsjVlSHe6Vt9X7R4dRwlWjaTX/n6Pzjxr4OerYnJxiyv0BdUK5PZt68mHnSW
6x3dVDkty4cyNqpIV+bJyY4Kn2/1zxtQKjlo5IrJJSfL9FyAG3xdgAebIIPHr4UT
tWtT4MRzAEjVOJckoZb16dnLeZwQD8O7fEjwF6TlRYrEFOuTvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEzd/axpUb9DjpinJsJQpE9IEzqJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjJlMjI0OTctNDcyNS0z
NzA2LWE0YjctZTVjYzMzNTA2ZWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScJcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGliVjBNAeA1hQqSMJqdft14AZstEr+Dx96ofATuMzwyy8ENmJvvdyxC
tXz0FNuIDwKCD5TcMABS0eLjZDVPShUZATSdZ7fbmz/bOnaxV5hOgNffCusHfFuu
0gtDNiou0gotWr64EH7Joj85UH0NGMqmaAxu44nv9UHVakHHwk7osVdggXYGSM/i
RG5gwXOGJHcJE6Nc+dl+li46uk/m1jN5vtwHIKGIbEWFBwVqV2xvDfxrhbVQWXZF
qDPa1Oiqf6jJjKI2jaiun7JQZMgjT/a7+cyyvr2Q3zraFPsKzWLR3Uq8RviXzMM/
gL/fv8soRb7Z9JB2jeCEVgyb9RXlZfQ=
-----END CERTIFICATE-----