Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f25b49c9-5690-3892-8366-7d916842509c.roa
File:                     f25b49c9-5690-3892-8366-7d916842509c.roa (raw, json)
Hash identifier:          sNB/oW96DEhhzMOc1RmcNEbWKxUCUispXSOy+SJIdfA=
Subject key identifier:   E6:BA:61:7E:FF:31:BF:65:90:21:15:68:0B:41:31:37:D4:56:40:32
Certificate issuer:       /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial:       010D0C9F432858489A3B4AF44E90AACF0471E288
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f25b49c9-5690-3892-8366-7d916842509c.roa
Signing time:             Mon 20 Jan 2025 02:00:40 +0000
ROA not before:           Mon 20 Jan 2025 02:00:40 +0000
ROA not after:            Sun 20 Apr 2025 01:00:40 +0000
asID:                     398420
IP address blocks:        74.126.164.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9a:3b:4a:f4:4e:90:aa:cf:04:71:e2:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
        Validity
            Not Before: Jan 20 02:00:40 2025 GMT
            Not After : Apr 20 01:00:40 2025 GMT
        Subject: CN=2911ab20-847f-49d3-8e82-922e0010c402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6f:35:61:34:44:c7:08:f9:3a:e2:0c:b5:54:
                    db:78:92:aa:0c:f7:e8:59:89:50:c4:1b:dc:6d:c0:
                    bd:bb:1b:75:f2:26:d1:67:6f:ee:43:81:86:e4:88:
                    b6:01:4d:89:48:44:1c:67:4c:64:42:0c:04:bd:05:
                    9f:b9:3c:12:a6:bf:e7:46:4b:92:94:a0:75:87:69:
                    07:4f:99:8a:34:8f:7f:39:02:6b:bd:16:e0:62:33:
                    73:f3:5c:28:2f:78:3d:04:26:7b:17:38:7b:3e:89:
                    17:af:e6:81:f3:10:17:dd:68:2e:d9:84:a2:c1:00:
                    46:cd:ac:a7:80:9b:11:d6:0d:4d:ee:64:ad:93:96:
                    8b:95:19:b4:e4:f4:0e:b9:07:37:e3:af:04:1f:f2:
                    61:1c:a4:2c:f2:f4:4d:0b:7a:57:8f:61:9c:ac:a9:
                    36:9a:d0:2f:5b:a8:97:06:06:a1:c0:99:d8:e6:da:
                    ab:5f:ba:40:8e:e3:f4:c8:ee:d2:04:1b:72:b4:4d:
                    3d:c9:ad:3d:43:82:32:00:20:df:e2:e7:1f:e6:ad:
                    f5:3c:cf:82:7d:50:73:9c:2f:7b:d5:fb:e9:5a:f0:
                    de:45:db:d7:72:b9:aa:e7:72:de:a4:99:3d:6d:5f:
                    ea:49:40:3b:0d:7f:36:99:43:ac:0d:de:b3:7a:93:
                    8c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BA:61:7E:FF:31:BF:65:90:21:15:68:0B:41:31:37:D4:56:40:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f25b49c9-5690-3892-8366-7d916842509c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl

            X509v3 Authority Key Identifier:
                keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.126.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:67:8b:db:65:65:0d:dd:03:3a:7a:65:66:df:25:4c:75:59:
         6c:61:01:4a:0f:92:9a:38:91:07:25:5d:bb:0a:fc:c5:0d:b2:
         20:32:f3:77:2a:bb:de:d6:71:24:06:ee:09:02:b2:92:2d:d6:
         41:50:8f:0f:41:46:df:d7:66:21:99:f9:91:c0:b6:ee:ed:9a:
         07:b0:39:55:78:14:7c:1c:7b:b8:9f:17:af:8e:17:33:2b:79:
         b9:14:bd:47:8b:75:fc:48:6e:ec:43:8a:bf:1d:e6:df:a7:af:
         37:5c:61:ec:58:fb:13:03:9b:87:93:38:20:bc:4c:f4:c1:2b:
         4e:6e:c0:13:38:fe:88:cd:00:ce:95:8f:1e:2c:2e:fb:57:09:
         c9:f1:d2:49:69:ac:79:b5:1b:ce:26:0b:3b:da:88:51:ba:5d:
         43:bf:5b:8c:0c:5e:b6:cc:44:db:6e:97:33:45:8e:01:bb:c3:
         5c:3e:a6:62:9a:9d:9f:52:60:f2:ca:c9:b9:2c:58:74:81:00:
         68:ac:e0:bb:75:e4:84:6c:7e:a1:b8:4e:74:a1:6f:75:ab:7b:
         3d:3f:a9:a8:04:2a:c6:21:31:6a:c1:40:d6:36:c4:c1:c6:a3:
         4d:6b:8e:52:9d:8d:92:cc:4e:de:bf:4d:a6:d6:b2:92:43:45:
         3f:4a:e3:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiaO0r0TpCqzwRx4ogwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3
OTU5MB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk
MjkxMWFiMjAtODQ3Zi00OWQzLThlODItOTIyZTAwMTBjNDAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm81YTRExwj5OuIMtVTbeJKqDPfoWYlQxBvc
bcC9uxt18ibRZ2/uQ4GG5Ii2AU2JSEQcZ0xkQgwEvQWfuTwSpr/nRkuSlKB1h2kH
T5mKNI9/OQJrvRbgYjNz81woL3g9BCZ7Fzh7PokXr+aB8xAX3Wgu2YSiwQBGzayn
gJsR1g1N7mStk5aLlRm05PQOuQc3468EH/JhHKQs8vRNC3pXj2GcrKk2mtAvW6iX
BgahwJnY5tqrX7pAjuP0yO7SBBtytE09ya09Q4IyACDf4ucf5q31PM+CfVBznC97
1fvpWvDeRdvXcrmq53LepJk9bV/qSUA7DX82mUOsDd6zepOM1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOa6YX7/Mb9lkCEVaAtBMTfUVkAyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz
ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvZjI1YjQ5YzktNTY5MC0z
ODkyLTgzNjYtN2Q5MTY4NDI1MDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0
ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0
Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw
M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSn6kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFFni9tlZQ3dAzp6ZWbfJUx1WWxhAUoPkpo4kQclXbsK/MUNsiAy83cq
u97WcSQG7gkCspIt1kFQjw9BRt/XZiGZ+ZHAtu7tmgewOVV4FHwce7ifF6+OFzMr
ebkUvUeLdfxIbuxDir8d5t+nrzdcYexY+xMDm4eTOCC8TPTBK05uwBM4/ojNAM6V
jx4sLvtXCcnx0klprHm1G84mCzvaiFG6XUO/W4wMXrbMRNtulzNFjgG7w1w+pmKa
nZ9SYPLKybksWHSBAGis4Lt15IRsfqG4TnShb3Wrez0/qagEKsYhMWrBQNY2xMHG
o01rjlKdjZLMTt6/TabWspJDRT9K46I=
-----END CERTIFICATE-----