Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4f004cec-8ad5-311c-a400-22bfc882b03c.roa
File:                     4f004cec-8ad5-311c-a400-22bfc882b03c.roa (raw, json)
Hash identifier:          XyA1pXbvDT3oAGAchDoehQLYarUwkimGHnmYaELwe9g=
Subject key identifier:   98:5D:75:9D:E6:96:CC:AD:E8:D3:45:33:34:DE:96:06:79:D6:8B:3D
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847EBBF8C75B85ADF32A157D180
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4f004cec-8ad5-311c-a400-22bfc882b03c.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        150.48.130.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:8c:75:b8:5a:df:32:a1:57:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=35bd5f80-c36a-4eba-9fd6-44f5d5344ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:22:3a:66:4f:4c:6f:e6:99:b8:5c:2f:10:13:
                    44:39:40:5f:11:d6:96:7e:53:41:18:83:3c:be:e8:
                    e9:b6:a8:ac:fc:15:91:9e:da:ae:48:5d:45:27:48:
                    7b:28:97:fd:08:ea:aa:41:3b:1a:42:03:5a:53:3a:
                    d7:e1:fb:50:22:b5:48:22:89:c9:44:8d:9c:dc:50:
                    de:98:26:ca:e7:ac:8a:73:f9:76:a1:6c:0b:15:b5:
                    88:31:35:9e:54:43:a6:16:58:89:e5:be:9c:c8:6c:
                    c8:a1:82:9b:ce:3b:ce:4a:05:30:8e:72:6e:33:55:
                    d1:fe:e6:4a:b0:fd:a7:3b:03:b2:f2:4d:ea:65:f9:
                    d1:ff:aa:78:a3:81:41:55:22:74:f5:b4:d5:1f:5d:
                    a7:6e:07:0c:4a:88:97:60:2b:9a:f8:11:d6:e0:16:
                    e3:7f:c4:4f:81:0d:27:94:2f:2a:ad:2f:1d:73:4f:
                    b4:30:a6:72:c0:2f:de:cc:a6:7e:60:f7:8b:c2:cd:
                    fb:24:7a:43:e6:52:c6:db:aa:41:13:1b:1a:e7:6e:
                    23:60:0e:53:68:03:a0:b1:c1:d8:c2:ca:2f:c7:35:
                    58:39:1c:d0:0f:3d:77:22:da:ab:b6:df:3c:6b:b4:
                    77:4c:41:ea:f4:c9:4c:e9:2a:86:5f:46:8f:97:2f:
                    ad:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5D:75:9D:E6:96:CC:AD:E8:D3:45:33:34:DE:96:06:79:D6:8B:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4f004cec-8ad5-311c-a400-22bfc882b03c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:3b:c6:32:de:22:39:be:db:91:5f:4b:40:79:05:e8:0a:e0:
         ce:0c:9f:6d:e1:62:ba:19:6e:e5:a7:60:de:e2:57:cc:d2:81:
         7e:cd:45:79:01:8c:ee:95:85:fc:da:f7:91:b9:cd:0c:c9:80:
         da:36:0d:75:74:32:55:d4:da:3c:05:5b:68:9a:b2:43:69:7f:
         3e:03:96:e8:26:5d:3d:41:ca:89:fa:72:6b:10:38:9d:4b:74:
         f6:e4:c1:32:e2:37:31:ec:6d:fd:a0:38:fe:f1:c6:0a:bb:d1:
         85:72:da:d2:a9:f3:b8:68:75:89:9f:4d:08:ec:57:83:d5:48:
         5c:26:19:77:09:70:91:c9:7f:b7:d1:98:74:66:c7:73:20:38:
         2d:bf:fe:6e:7a:d6:6f:4f:7a:8c:cf:8b:d2:b4:69:12:1a:da:
         df:87:d6:2c:4f:84:d8:62:52:f6:03:7b:3e:b4:28:dc:a2:e3:
         be:ae:c5:c0:26:d0:c2:dd:ec:5d:64:a5:cc:2f:87:82:78:04:
         dc:32:06:f8:29:03:30:be:0a:d3:07:b7:5a:26:36:31:bf:bd:
         1f:7e:1f:d5:1b:16:6c:72:61:2b:c5:6d:e6:0d:86:66:4a:6d:
         74:75:8f:42:67:f1:eb:2e:f1:7d:28:dd:3e:a9:85:18:2e:7b:
         9c:e3:41:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfrv4x1uFrfMqFX0YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTExODE0MDA0MFoXDTI1MDIxNjE0MDA0MFowLzEtMCsGA1UEAxMk
MzViZDVmODAtYzM2YS00ZWJhLTlmZDYtNDRmNWQ1MzQ0ZWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSI6Zk9Mb+aZuFwvEBNEOUBfEdaWflNBGIM8
vujptqis/BWRntquSF1FJ0h7KJf9COqqQTsaQgNaUzrX4ftQIrVIIonJRI2c3FDe
mCbK56yKc/l2oWwLFbWIMTWeVEOmFliJ5b6cyGzIoYKbzjvOSgUwjnJuM1XR/uZK
sP2nOwOy8k3qZfnR/6p4o4FBVSJ09bTVH12nbgcMSoiXYCua+BHW4Bbjf8RPgQ0n
lC8qrS8dc0+0MKZywC/ezKZ+YPeLws37JHpD5lLG26pBExsa524jYA5TaAOgscHY
wsovxzVYORzQDz13Itqrtt88a7R3TEHq9MlM6SqGX0aPly+tjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJhddZ3mlsyt6NNFMzTelgZ51os9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNGYwMDRjZWMtOGFkNS0z
MTFjLWE0MDAtMjJiZmM4ODJiMDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG87xjLeIjm+25FfS0B5BegK4M4Mn23hYroZbuWnYN7iV8zSgX7NRXkB
jO6Vhfza95G5zQzJgNo2DXV0MlXU2jwFW2iaskNpfz4DlugmXT1Byon6cmsQOJ1L
dPbkwTLiNzHsbf2gOP7xxgq70YVy2tKp87hodYmfTQjsV4PVSFwmGXcJcJHJf7fR
mHRmx3MgOC2//m561m9PeozPi9K0aRIa2t+H1ixPhNhiUvYDez60KNyi476uxcAm
0MLd7F1kpcwvh4J4BNwyBvgpAzC+CtMHt1omNjG/vR9+H9UbFmxyYSvFbeYNhmZK
bXR1j0Jn8esu8X0o3T6phRgue5zjQdE=
-----END CERTIFICATE-----