Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/54d71881-b318-35e4-9462-b56c9c49c60d.roa
File:                     54d71881-b318-35e4-9462-b56c9c49c60d.roa (raw, json)
Hash identifier:          37niyxHTTPA8Zb5mHm6JXrFyKk57C8Ajdlv3N9YzUbc=
Subject key identifier:   44:84:0C:13:87:AD:17:16:A0:6A:D8:04:A8:BA:65:C5:0C:2F:42:AE
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285847E094DD5B8814F5690AC78900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/54d71881-b318-35e4-9462-b56c9c49c60d.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     15169
IP address blocks:        104.134.232.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:dd:5b:88:14:f5:69:0a:c7:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=4150433c-20a9-46a7-9e5e-ca44f069eb78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6d:e1:3b:ea:b6:bc:1c:e0:ec:e3:53:1a:96:
                    24:68:e2:eb:dd:46:e4:11:a8:f5:2f:e7:34:75:85:
                    84:28:1f:d8:88:95:aa:9c:8e:1d:3d:e0:64:15:31:
                    9c:bf:83:af:9c:1d:50:24:fb:72:f0:65:35:ee:9c:
                    e7:33:b7:1c:81:a4:80:75:cf:53:c1:27:e0:11:60:
                    75:3f:47:2f:96:4e:9a:14:ae:8f:a0:21:45:a5:66:
                    f2:31:0d:65:fb:4c:c6:b9:57:11:3e:9e:29:f8:cd:
                    16:07:40:84:7d:b1:a3:a8:0a:9c:af:ee:87:88:8a:
                    9e:1f:80:fd:6f:83:50:65:11:ab:f3:67:3c:99:4c:
                    0e:3b:bc:6e:7d:b1:36:21:e4:d9:57:1b:b1:41:85:
                    ca:a9:11:9f:f7:53:91:7b:08:fd:36:56:e0:7a:48:
                    9f:f9:e5:f6:58:6f:3c:2d:7c:70:43:54:25:f4:22:
                    d6:f8:25:da:a9:0b:07:6b:8e:07:c7:e3:2c:26:1c:
                    4f:4e:ed:95:a8:cd:d4:7d:ac:ec:43:de:17:b8:7d:
                    94:26:55:83:b7:7a:27:8e:61:4a:3d:f1:0d:d4:21:
                    4d:b0:67:d8:3f:a6:fa:a5:4f:99:0d:16:a5:00:c9:
                    52:b1:98:87:98:06:5c:73:f4:c4:33:51:ea:a6:6b:
                    e9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:84:0C:13:87:AD:17:16:A0:6A:D8:04:A8:BA:65:C5:0C:2F:42:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/54d71881-b318-35e4-9462-b56c9c49c60d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:b0:e2:85:29:d9:af:36:60:41:41:10:f7:ba:22:5a:64:59:
         ac:46:17:26:3e:9b:7a:9d:79:76:81:15:54:26:d4:f7:cd:8e:
         fb:d6:2d:df:41:cf:43:8f:76:9e:b0:16:79:1f:ed:73:a4:5c:
         5b:5e:ff:09:2a:72:89:77:da:ec:e3:c2:9b:8f:82:74:56:fb:
         07:f1:2b:29:a2:2e:46:70:f1:e2:2a:bd:dc:55:99:ce:92:0f:
         46:89:f0:f0:fc:07:8d:3f:ba:1a:d7:25:52:5c:96:21:11:9c:
         0e:1c:64:7f:c3:c4:e7:a9:5f:1b:20:c4:71:25:f5:60:36:af:
         db:a7:d2:af:cb:39:bb:f6:f9:95:c3:e1:0d:d6:7a:18:76:7d:
         fe:53:ff:e4:8b:69:08:2a:8f:77:0a:dd:90:86:c0:0e:d6:bd:
         88:13:9f:12:74:c9:22:c3:57:22:e4:d8:f2:81:48:e5:5c:46:
         26:ed:34:a7:0c:13:7b:c3:4b:fa:21:2b:27:67:ee:02:db:06:
         d2:b4:c8:4c:1c:1d:2d:15:2c:91:12:99:b1:09:3d:e8:02:d3:
         a2:d5:61:11:ee:b4:f7:84:1c:c7:48:42:d8:50:36:e1:9b:10:
         b6:a5:e2:dd:9d:b0:09:bc:a5:c8:1a:2b:1f:18:65:dd:10:b4:
         86:c5:a8:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglN1biBT1aQrHiQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk
NDE1MDQzM2MtMjBhOS00NmE3LTllNWUtY2E0NGYwNjllYjc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0m3hO+q2vBzg7ONTGpYkaOLr3UbkEaj1L+c0
dYWEKB/YiJWqnI4dPeBkFTGcv4OvnB1QJPty8GU17pznM7ccgaSAdc9TwSfgEWB1
P0cvlk6aFK6PoCFFpWbyMQ1l+0zGuVcRPp4p+M0WB0CEfbGjqAqcr+6HiIqeH4D9
b4NQZRGr82c8mUwOO7xufbE2IeTZVxuxQYXKqRGf91ORewj9Nlbgekif+eX2WG88
LXxwQ1Ql9CLW+CXaqQsHa44Hx+MsJhxPTu2VqM3UfazsQ94XuH2UJlWDt3onjmFK
PfEN1CFNsGfYP6b6pU+ZDRalAMlSsZiHmAZcc/TEM1HqpmvpyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFESEDBOHrRcWoGrYBKi6ZcUML0KuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTRkNzE4ODEtYjMxOC0z
NWU0LTk0NjItYjU2YzljNDljNjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIboMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALyw4oUp2a82YEFBEPe6IlpkWaxGFyY+m3qdeXaBFVQm1PfNjvvWLd9B
z0OPdp6wFnkf7XOkXFte/wkqcol32uzjwpuPgnRW+wfxKymiLkZw8eIqvdxVmc6S
D0aJ8PD8B40/uhrXJVJcliERnA4cZH/DxOepXxsgxHEl9WA2r9un0q/LObv2+ZXD
4Q3Wehh2ff5T/+SLaQgqj3cK3ZCGwA7WvYgTnxJ0ySLDVyLk2PKBSOVcRibtNKcM
E3vDS/ohKydn7gLbBtK0yEwcHS0VLJESmbEJPegC06LVYRHutPeEHMdIQthQNuGb
ELal4t2dsAm8pcgaKx8YZd0QtIbFqB4=
-----END CERTIFICATE-----