Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fbe50946-2663-37b3-a7a4-dd8c923176ee.roa
File:                     fbe50946-2663-37b3-a7a4-dd8c923176ee.roa (raw, json)
Hash identifier:          iFXGLQbKsx3JKmANjronxw8tZLtv21wuWlFl8LSJllM=
Subject key identifier:   B9:2A:DF:A6:11:3B:0C:B2:5F:76:67:C9:B1:2B:95:BD:74:66:77:D9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285848280E941074301EF7F7A1B1C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fbe50946-2663-37b3-a7a4-dd8c923176ee.roa
Signing time:             Tue 10 Dec 2024 04:28:36 +0000
ROA not before:           Tue 10 Dec 2024 04:28:36 +0000
ROA not after:            Mon 10 Mar 2025 03:28:36 +0000
asID:                     13335
IP address blocks:        172.68.106.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:28:0e:94:10:74:30:1e:f7:f7:a1:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Dec 10 04:28:36 2024 GMT
            Not After : Mar 10 03:28:36 2025 GMT
        Subject: CN=9a2da213-a654-45b6-9328-aaffae982d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d8:e5:98:de:88:b4:be:b1:65:3d:f6:63:f4:
                    ec:15:54:91:e2:8c:58:20:80:ab:e4:6b:37:74:cd:
                    8c:86:c8:3c:cd:34:80:3a:4d:36:e1:f4:40:6e:8a:
                    e9:01:15:1f:f5:97:ab:99:27:9b:8e:72:cc:79:d2:
                    f7:19:e4:88:6b:a2:c5:06:1c:6c:0b:a1:5b:d4:ba:
                    b3:67:b1:c0:5c:82:cb:c0:15:3b:1d:38:34:a2:e2:
                    8f:b9:c2:69:3c:68:7c:58:00:95:07:85:b3:97:af:
                    43:64:a0:51:fa:2d:4c:97:11:86:85:6e:54:e9:d5:
                    59:12:8e:5a:a3:31:14:b1:bc:14:d5:58:69:89:fb:
                    4c:c7:4c:d6:fc:25:46:8d:80:80:2e:32:b8:7d:8b:
                    94:c4:8c:ec:2f:4f:b5:c8:7c:40:fc:9e:90:a8:5b:
                    51:46:d5:ac:f5:19:3f:1c:a9:3a:a0:c0:0d:8c:88:
                    c3:1a:e4:b2:6a:a2:b2:94:19:22:34:4f:81:90:b0:
                    f2:86:15:67:bf:7a:f1:a8:af:19:b5:88:7d:3e:8d:
                    ae:e8:79:b2:9e:9d:87:8d:74:80:18:1f:d3:1e:e2:
                    23:af:99:4b:51:3c:51:94:4f:ad:59:2d:e1:d0:71:
                    12:81:43:25:bf:17:c6:5f:b3:d4:73:19:2f:eb:94:
                    bd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2A:DF:A6:11:3B:0C:B2:5F:76:67:C9:B1:2B:95:BD:74:66:77:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fbe50946-2663-37b3-a7a4-dd8c923176ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:fe:69:b4:08:19:d7:f2:25:3c:c8:3a:72:58:3e:9d:4d:01:
         fb:62:38:45:61:d8:6c:89:58:2e:fa:b4:7f:da:e6:2e:3b:69:
         cb:cb:77:4f:8a:83:c8:ad:59:0f:aa:f7:50:5b:a2:d6:aa:4a:
         c2:78:ae:af:2b:76:d9:3d:b5:b0:47:ea:11:1d:f0:ae:b5:63:
         0f:74:26:0b:64:ca:d4:b0:a6:89:b5:28:5e:8a:3b:e9:81:17:
         d7:37:7f:bc:61:95:35:f5:12:eb:d3:6d:73:25:2c:05:f2:ba:
         0c:f0:e8:53:55:0a:d4:ee:d0:8d:09:03:57:71:bc:d2:84:68:
         58:0e:2c:d6:c2:13:f1:dd:f9:8b:5b:2f:a2:9d:19:81:eb:dc:
         cb:ab:91:ef:bf:11:93:9c:fe:4a:03:14:ef:be:7d:e9:28:97:
         e4:68:d8:cc:28:7f:84:a0:75:82:86:31:98:1b:49:a8:07:64:
         1e:7f:b1:de:92:c3:f6:2e:fc:9c:5b:6c:10:19:b3:d1:73:b6:
         e6:b9:d8:a1:05:91:db:c8:2d:f5:25:22:88:1f:24:66:53:e2:
         46:47:3c:86:e0:57:d5:2d:9b:a1:5f:50:21:69:79:89:0d:1d:
         92:83:2a:3c:6a:08:38:96:95:42:f2:c8:a9:66:52:90:66:27:
         a7:6e:6d:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgoDpQQdDAe9/ehscAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMDA0MjgzNloXDTI1MDMxMDAzMjgzNlowLzEtMCsGA1UEAxMk
OWEyZGEyMTMtYTY1NC00NWI2LTkzMjgtYWFmZmFlOTgyZDJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tjlmN6ItL6xZT32Y/TsFVSR4oxYIICr5Gs3
dM2Mhsg8zTSAOk024fRAborpARUf9ZermSebjnLMedL3GeSIa6LFBhxsC6Fb1Lqz
Z7HAXILLwBU7HTg0ouKPucJpPGh8WACVB4Wzl69DZKBR+i1MlxGGhW5U6dVZEo5a
ozEUsbwU1VhpiftMx0zW/CVGjYCALjK4fYuUxIzsL0+1yHxA/J6QqFtRRtWs9Rk/
HKk6oMANjIjDGuSyaqKylBkiNE+BkLDyhhVnv3rxqK8ZtYh9Po2u6Hmynp2HjXSA
GB/THuIjr5lLUTxRlE+tWS3h0HESgUMlvxfGX7PUcxkv65S9eQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLkq36YROwyyX3ZnybErlb10ZnfZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmJlNTA5NDYtMjY2My0z
N2IzLWE3YTQtZGQ4YzkyMzE3NmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAz+abQIGdfyJTzIOnJYPp1NAftiOEVh2GyJWC76tH/a5i47acvLd0+K
g8itWQ+q91BbotaqSsJ4rq8rdtk9tbBH6hEd8K61Yw90JgtkytSwpom1KF6KO+mB
F9c3f7xhlTX1EuvTbXMlLAXyugzw6FNVCtTu0I0JA1dxvNKEaFgOLNbCE/Hd+Ytb
L6KdGYHr3Murke+/EZOc/koDFO++fekol+Ro2Mwof4SgdYKGMZgbSagHZB5/sd6S
w/Yu/JxbbBAZs9Fztua52KEFkdvILfUlIogfJGZT4kZHPIbgV9Utm6FfUCFpeYkN
HZKDKjxqCDiWlULyyKlmUpBmJ6dubRE=
-----END CERTIFICATE-----