Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa
File:                     d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa (raw, json)
Hash identifier:          eJWAHmPCPVbmHJVkZjQ/UQC3RlXWYtMUbFRuaN8W9Zg=
Subject key identifier:   7D:20:82:A3:2B:C0:C2:24:84:E2:B7:CF:68:B3:87:92:AE:15:87:F0
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F432858480214FA2793C29A0FCA60AAE0
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa
Signing time:             Tue 26 Nov 2024 14:00:39 +0000
ROA not before:           Tue 26 Nov 2024 14:00:39 +0000
ROA not after:            Mon 24 Feb 2025 14:00:39 +0000
asID:                     51964
IP address blocks:        66.112.128.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:14:fa:27:93:c2:9a:0f:ca:60:aa:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Nov 26 14:00:39 2024 GMT
            Not After : Feb 24 14:00:39 2025 GMT
        Subject: CN=60b00d60-aa98-48ee-a702-88806a256ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5b:31:19:53:1f:44:98:67:77:63:6e:d9:40:
                    6e:66:a9:d1:a2:8f:0f:4a:e7:c7:51:65:17:55:41:
                    2f:61:e6:a9:b0:09:ae:0e:46:31:c1:88:09:1a:42:
                    4e:0b:7f:be:35:f4:8d:fd:aa:1f:14:ed:e6:df:99:
                    35:68:3f:1c:0a:75:99:8d:9c:6d:4a:31:83:45:3c:
                    85:2b:44:f8:86:3d:55:d0:51:b3:1f:3f:2c:f4:dc:
                    e1:bb:54:02:37:1a:21:9f:ca:b6:95:27:35:39:a3:
                    62:b0:c2:03:4b:39:aa:42:02:a0:4f:50:1b:67:b7:
                    5e:00:26:7e:18:78:64:c1:14:81:83:8b:52:b2:f1:
                    46:0d:ac:8f:cb:49:44:5b:be:97:e9:82:b5:61:1c:
                    ea:12:28:6b:17:4a:ca:25:ca:16:51:8b:75:7a:1d:
                    e0:9a:13:fc:f1:d8:17:e9:e3:d4:7c:48:68:56:3a:
                    f3:5a:43:5c:40:bf:87:38:cb:01:2c:68:63:1d:34:
                    4e:32:e6:87:6a:55:fd:f7:90:4c:df:ee:d7:87:8a:
                    05:c7:6b:a5:4c:13:fd:7a:5c:5e:7a:ad:47:85:24:
                    bf:8a:bd:a3:84:69:6a:28:87:71:36:4a:f1:97:fe:
                    10:84:e5:bc:89:d5:2b:96:88:5c:e1:69:45:f1:49:
                    c3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:20:82:A3:2B:C0:C2:24:84:E2:B7:CF:68:B3:87:92:AE:15:87:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.112.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:9e:fc:38:ad:33:78:96:b1:62:e3:e4:d0:07:da:cf:f0:fb:
         1a:bb:25:bb:24:c9:f0:2f:94:7f:c7:62:e1:0e:c4:21:3c:bd:
         52:e9:90:1a:d6:4c:45:26:f0:e9:04:4c:1c:85:91:ba:2b:ad:
         fe:e0:ee:82:a7:26:3f:99:e7:02:aa:51:ac:05:9f:d9:25:bf:
         00:72:f9:28:2b:c1:0c:fa:6b:78:e7:bd:a2:ef:ea:ba:57:29:
         9e:7e:21:c9:72:42:38:8b:27:d7:ca:2a:19:86:73:dc:7e:26:
         b6:fa:80:3d:34:0d:74:89:60:e9:00:bc:23:9f:10:b7:4c:58:
         36:03:c0:df:22:52:d6:d2:64:c2:03:89:87:73:64:0d:42:b9:
         a9:44:15:f3:a0:57:89:b9:d8:a9:bf:f4:42:79:c3:41:f4:9c:
         79:25:9d:d7:ba:5b:ca:9f:a7:37:ba:c4:51:85:d9:a9:02:30:
         cc:18:f0:00:2c:b1:32:6f:5f:96:ba:07:12:5a:f7:85:7b:0f:
         e9:80:70:19:df:6c:13:05:d7:3e:79:54:8d:05:85:e7:42:57:
         8a:a4:b9:d4:4f:53:ef:3e:25:4a:aa:e1:b1:b6:3f:4a:79:d2:
         cf:79:a4:b6:1a:e9:50:02:b1:70:e3:42:49:39:5a:cc:83:05:
         e8:52:03:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgCFPonk8KaD8pgquAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm
ZTM3MB4XDTI0MTEyNjE0MDAzOVoXDTI1MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk
NjBiMDBkNjAtYWE5OC00OGVlLWE3MDItODg4MDZhMjU2Y2E2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lsxGVMfRJhnd2Nu2UBuZqnRoo8PSufHUWUX
VUEvYeapsAmuDkYxwYgJGkJOC3++NfSN/aofFO3m35k1aD8cCnWZjZxtSjGDRTyF
K0T4hj1V0FGzHz8s9Nzhu1QCNxohn8q2lSc1OaNisMIDSzmqQgKgT1AbZ7deACZ+
GHhkwRSBg4tSsvFGDayPy0lEW76X6YK1YRzqEihrF0rKJcoWUYt1eh3gmhP88dgX
6ePUfEhoVjrzWkNcQL+HOMsBLGhjHTROMuaHalX995BM3+7Xh4oFx2ulTBP9elxe
eq1HhSS/ir2jhGlqKIdxNkrxl/4QhOW8idUrlohc4WlF8UnDVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH0ggqMrwMIkhOK3z2izh5KuFYfwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw
ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvZDVhNjBmMmYtZWU2Ny0z
NGEyLWE4ZmMtY2JmZjI1MDU2ZjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2
NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi
ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm
MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQnCAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALSe/DitM3iWsWLj5NAH2s/w+xq7JbskyfAvlH/HYuEOxCE8vVLpkBrW
TEUm8OkETByFkborrf7g7oKnJj+Z5wKqUawFn9klvwBy+SgrwQz6a3jnvaLv6rpX
KZ5+IclyQjiLJ9fKKhmGc9x+Jrb6gD00DXSJYOkAvCOfELdMWDYDwN8iUtbSZMID
iYdzZA1CualEFfOgV4m52Km/9EJ5w0H0nHklnde6W8qfpze6xFGF2akCMMwY8AAs
sTJvX5a6BxJa94V7D+mAcBnfbBMF1z55VI0FhedCV4qkudRPU+8+JUqq4bG2P0p5
0s95pLYa6VACsXDjQkk5WsyDBehSA6Q=
-----END CERTIFICATE-----