Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9986b1a3-5272-37ba-88d4-c6a5c4fb1672.roa
File:                     9986b1a3-5272-37ba-88d4-c6a5c4fb1672.roa (raw, json)
Hash identifier:          e+iYEhmlyuSmLQKqNp58SeKuCl7QXTlTY4FIoErIp4A=
Subject key identifier:   7E:8E:AE:97:C1:0C:EA:52:49:A4:BD:AA:92:E3:E4:AD:97:EC:30:B9
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584835BAA31A012250DD95B45880
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9986b1a3-5272-37ba-88d4-c6a5c4fb1672.roa
Signing time:             Sun 15 Dec 2024 02:00:39 +0000
ROA not before:           Sun 15 Dec 2024 02:00:39 +0000
ROA not after:            Sat 15 Mar 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        204.195.192.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:35:ba:a3:1a:01:22:50:dd:95:b4:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 15 02:00:39 2024 GMT
            Not After : Mar 15 01:00:39 2025 GMT
        Subject: CN=59450f93-b7f9-4639-b28d-6a2e33c33a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c9:a1:7a:87:7a:9d:b4:a8:93:d9:4f:87:5f:
                    f5:de:2d:0a:df:4b:8d:ec:20:07:db:61:d2:95:4e:
                    57:b8:5b:c0:04:40:8f:44:85:7d:51:a5:bf:d9:d0:
                    07:a7:5b:d9:b0:50:96:19:d3:20:70:23:b9:6d:dc:
                    b3:c1:37:6c:97:22:c8:c0:f2:75:f9:6e:84:a8:d3:
                    d1:7f:c1:46:8b:99:b0:1f:4c:91:dc:92:25:2c:b0:
                    e8:77:a3:9a:b5:9a:01:25:f3:11:53:32:0c:a4:f5:
                    14:95:70:cf:8f:38:8a:c4:ae:a8:ca:13:b8:43:b6:
                    e9:cf:22:30:f5:0c:21:60:ef:33:dc:58:a5:b7:35:
                    8b:ea:ba:8f:04:49:94:c4:3e:3a:7e:d1:8a:ad:6c:
                    c9:52:7d:6d:81:ff:90:04:39:1c:d3:38:39:b8:fd:
                    78:90:8d:04:f5:5d:0e:7c:7b:7d:1e:b2:83:0a:1d:
                    d4:d8:24:b3:8a:5f:3e:a9:1f:c0:50:97:df:f4:1b:
                    de:55:85:bc:77:d9:ad:45:fa:a0:53:94:c2:7e:8d:
                    75:4c:0d:36:5b:5b:e1:2b:e7:f4:04:9e:3e:61:9f:
                    5a:4b:e1:f7:de:65:bc:5d:dd:47:b7:dc:04:f9:18:
                    a3:5f:8b:6a:fa:f0:b7:f0:ff:4e:5c:f4:bd:5c:2b:
                    46:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8E:AE:97:C1:0C:EA:52:49:A4:BD:AA:92:E3:E4:AD:97:EC:30:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9986b1a3-5272-37ba-88d4-c6a5c4fb1672.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:c1:b8:03:ea:87:93:cc:b7:fe:09:03:4b:0e:f4:73:12:6a:
         64:61:46:6c:0a:a6:ba:26:79:11:44:2b:4e:d2:58:da:26:fd:
         4a:5f:3a:df:85:7e:f0:c8:43:34:c4:31:a5:de:9f:ca:6d:a7:
         43:46:6e:75:f3:e4:8f:0f:a5:cb:24:bc:79:70:35:02:18:46:
         68:be:37:fd:51:3e:54:c0:45:8c:31:d6:45:a5:8b:b7:44:6b:
         33:3f:44:4c:20:cf:05:51:e9:27:f9:da:ce:86:21:51:61:88:
         11:dc:d8:26:a7:1d:24:53:f3:a2:0d:b5:83:fa:99:a9:cd:b6:
         95:d4:44:61:b3:2c:27:d4:6f:78:44:66:f8:6a:84:ff:67:bd:
         3c:36:52:a1:22:08:7a:7c:60:37:f8:49:16:fc:64:3e:c5:64:
         3f:7c:9b:16:6f:8e:dc:fb:67:ae:9c:8a:0b:1f:e9:83:ca:8d:
         0b:3b:99:a7:ff:91:9d:0f:8a:22:a1:5e:f0:d1:58:6c:ab:fd:
         08:3a:68:1a:e9:99:cf:80:c5:76:d3:12:54:db:3f:b9:47:f4:
         0f:9a:1e:f5:f7:64:50:71:e2:e8:e5:a7:c1:5d:91:f7:29:ad:
         28:52:09:71:75:e0:c2:95:7f:65:fa:7d:79:67:86:66:40:56:
         f2:83:6b:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg1uqMaASJQ3ZW0WIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTIxNTAyMDAzOVoXDTI1MDMxNTAxMDAzOVowLzEtMCsGA1UEAxMk
NTk0NTBmOTMtYjdmOS00NjM5LWIyOGQtNmEyZTMzYzMzYThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicmheod6nbSok9lPh1/13i0K30uN7CAH22HS
lU5XuFvABECPRIV9UaW/2dAHp1vZsFCWGdMgcCO5bdyzwTdslyLIwPJ1+W6EqNPR
f8FGi5mwH0yR3JIlLLDod6OatZoBJfMRUzIMpPUUlXDPjziKxK6oyhO4Q7bpzyIw
9QwhYO8z3FiltzWL6rqPBEmUxD46ftGKrWzJUn1tgf+QBDkc0zg5uP14kI0E9V0O
fHt9HrKDCh3U2CSzil8+qR/AUJff9BveVYW8d9mtRfqgU5TCfo11TA02W1vhK+f0
BJ4+YZ9aS+H33mW8Xd1Ht9wE+RijX4tq+vC38P9OXPS9XCtG9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH6OrpfBDOpSSaS9qpLj5K2X7DC5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOTk4NmIxYTMtNTI3Mi0z
N2JhLTg4ZDQtYzZhNWM0ZmIxNjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzMPAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEfBuAPqh5PMt/4JA0sO9HMSamRhRmwKpromeRFEK07SWNom/UpfOt+F
fvDIQzTEMaXen8ptp0NGbnXz5I8PpcskvHlwNQIYRmi+N/1RPlTARYwx1kWli7dE
azM/REwgzwVR6Sf52s6GIVFhiBHc2CanHSRT86INtYP6manNtpXURGGzLCfUb3hE
ZvhqhP9nvTw2UqEiCHp8YDf4SRb8ZD7FZD98mxZvjtz7Z66cigsf6YPKjQs7maf/
kZ0PiiKhXvDRWGyr/Qg6aBrpmc+AxXbTElTbP7lH9A+aHvX3ZFBx4ujlp8Fdkfcp
rShSCXF14MKVf2X6fXlnhmZAVvKDaxA=
-----END CERTIFICATE-----