Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad6c26a0-7ea4-390f-8e7c-ab6197564470.roa
File:                     ad6c26a0-7ea4-390f-8e7c-ab6197564470.roa (raw, json)
Hash identifier:          Ddj2ubogaBnNtUKtdWEYd1VXZ3EHFcAXLZGJiNMNQI4=
Subject key identifier:   56:4B:52:74:ED:D3:57:EB:76:99:AA:FA:B2:0B:6A:A7:FD:14:89:1A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858473B55555720299E0277A48500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad6c26a0-7ea4-390f-8e7c-ab6197564470.roa
Signing time:             Sun 15 Sep 2024 12:00:00 +0000
ROA not before:           Sun 15 Sep 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        162.159.82.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3b:55:55:57:20:29:9e:02:77:a4:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 15 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=be8b917e-c87e-4d70-ab43-439bbb9fb70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:06:bf:f3:48:5d:98:62:8e:e1:c9:94:bd:f1:
                    03:ff:84:49:1c:9c:0e:e5:5f:c0:a2:50:81:d3:dc:
                    78:79:cd:6e:f3:8d:d2:70:b6:48:cf:5a:df:1f:bf:
                    d6:26:41:a4:36:a0:d6:db:3d:6e:09:e5:b5:a7:ce:
                    8a:2d:b8:34:d5:f7:e2:bb:ec:74:ef:85:f4:18:f3:
                    2a:e1:e4:f0:61:2d:1d:22:6d:94:bb:f3:35:45:e7:
                    fd:f3:84:d1:67:c9:ec:be:3e:d3:87:57:c1:43:4a:
                    88:3d:2e:a6:1e:06:2b:f2:e9:09:44:ba:b4:61:37:
                    f2:5e:17:09:78:68:3c:79:6a:32:2d:70:9c:35:bc:
                    a5:ed:d6:ad:09:67:d9:1e:cc:0e:57:b0:8c:d5:45:
                    1a:41:92:55:63:10:f9:c3:a8:87:0d:e5:00:f5:21:
                    96:7b:cd:6c:44:ff:64:eb:2f:79:d6:80:99:bc:4a:
                    36:53:41:c9:1d:15:b2:e3:45:26:6d:cd:49:cc:f0:
                    3f:86:4b:76:3e:ee:dc:bd:5b:a2:48:94:b7:e2:1a:
                    7b:e7:0b:1c:a0:ba:4e:26:0d:86:cf:e4:4b:74:e8:
                    e8:1b:b2:ad:dd:ac:2f:df:80:a6:43:48:b7:97:32:
                    cb:2b:89:5a:0d:41:0b:4b:04:7a:9f:12:0a:00:19:
                    1a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4B:52:74:ED:D3:57:EB:76:99:AA:FA:B2:0B:6A:A7:FD:14:89:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad6c26a0-7ea4-390f-8e7c-ab6197564470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:54:64:60:a5:4d:26:19:b3:99:58:fd:f8:ec:85:1c:b8:1b:
         b9:d4:da:b8:b3:f4:d5:62:3f:60:db:13:02:03:1a:38:81:c9:
         37:d2:30:1e:8a:53:fc:04:92:04:d1:f1:c9:3f:60:14:be:af:
         85:81:fc:38:e7:88:df:e6:7a:05:0d:40:3c:5d:54:0f:76:ab:
         b0:27:56:99:d4:05:29:a5:c8:9b:fc:7b:a2:3c:2f:33:01:20:
         50:aa:69:2a:d3:3d:4a:c8:42:be:b7:f8:c2:10:cb:31:ad:35:
         63:cb:a1:fc:a0:29:a5:bc:f2:19:27:b0:44:6d:7c:df:f9:30:
         d9:d2:0a:0b:e6:28:fb:7c:86:4f:63:e2:9f:01:31:64:e9:fc:
         53:c1:f6:e1:f6:c6:99:d1:09:30:14:5c:a7:c9:9d:fa:56:f5:
         ba:11:1d:89:2f:ef:ee:eb:29:a3:66:d6:73:ee:97:7b:fb:47:
         aa:78:3b:47:94:1d:0d:05:84:bc:31:18:60:56:3b:09:55:ef:
         b3:53:bd:84:fd:9c:b5:80:3a:17:53:b8:52:8b:82:7b:02:da:
         76:8d:9c:e6:6d:4c:58:d4:e9:60:2a:b3:17:0f:93:0e:cc:2f:
         6a:7a:26:75:f6:45:b2:2f:26:28:f2:19:26:fd:e7:3a:a8:ee:
         8b:43:05:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc7VVVXICmeAnekhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MDkxNTEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk
YmU4YjkxN2UtYzg3ZS00ZDcwLWFiNDMtNDM5YmJiOWZiNzBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAa/80hdmGKO4cmUvfED/4RJHJwO5V/AolCB
09x4ec1u843ScLZIz1rfH7/WJkGkNqDW2z1uCeW1p86KLbg01ffiu+x074X0GPMq
4eTwYS0dIm2Uu/M1Ref984TRZ8nsvj7Th1fBQ0qIPS6mHgYr8ukJRLq0YTfyXhcJ
eGg8eWoyLXCcNbyl7datCWfZHswOV7CM1UUaQZJVYxD5w6iHDeUA9SGWe81sRP9k
6y951oCZvEo2U0HJHRWy40Umbc1JzPA/hkt2Pu7cvVuiSJS34hp75wscoLpOJg2G
z+RLdOjoG7Kt3awv34CmQ0i3lzLLK4laDUELSwR6nxIKABkapwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFZLUnTt01frdpmq+rILaqf9FIkaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWQ2YzI2YTAtN2VhNC0z
OTBmLThlN2MtYWI2MTk3NTY0NDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop9SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHBUZGClTSYZs5lY/fjshRy4G7nU2riz9NViP2DbEwIDGjiByTfSMB6K
U/wEkgTR8ck/YBS+r4WB/DjniN/megUNQDxdVA92q7AnVpnUBSmlyJv8e6I8LzMB
IFCqaSrTPUrIQr63+MIQyzGtNWPLofygKaW88hknsERtfN/5MNnSCgvmKPt8hk9j
4p8BMWTp/FPB9uH2xpnRCTAUXKfJnfpW9boRHYkv7+7rKaNm1nPul3v7R6p4O0eU
HQ0FhLwxGGBWOwlV77NTvYT9nLWAOhdTuFKLgnsC2naNnOZtTFjU6WAqsxcPkw7M
L2p6JnX2RbIvJijyGSb95zqo7otDBWA=
-----END CERTIFICATE-----