Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/18f98b1f-13c1-3fb4-9c04-45c0618529c4.roa
File:                     18f98b1f-13c1-3fb4-9c04-45c0618529c4.roa (raw, json)
Hash identifier:          R5faQntdy0SQV86wJ0Kkp+ydWXQoKTsoc5CGGVkqikY=
Subject key identifier:   06:43:B8:0B:F8:B0:06:21:8F:2C:90:00:24:9C:B9:E9:1C:94:43:00
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847E095010C1571FFFCDA1DCA80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/18f98b1f-13c1-3fb4-9c04-45c0618529c4.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     7029
IP address blocks:        98.18.232.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:95:01:0c:15:71:ff:fc:da:1d:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=4702a3e1-49ee-400e-9987-9ec3adc3239f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3b:d0:21:55:d3:a4:9d:cd:40:b9:b2:04:43:
                    25:7c:3a:ff:04:42:e8:5d:b6:f6:96:a4:2f:94:1b:
                    df:24:e8:0e:b6:6f:8a:02:1e:e9:c8:9b:85:d7:c9:
                    49:6e:06:b0:95:34:4e:6e:0b:05:f4:51:09:f8:dc:
                    41:55:1d:f4:98:3c:f9:f7:1a:92:14:9a:07:21:84:
                    9d:db:09:b3:31:e1:7f:d2:30:7b:fa:4e:8f:31:3c:
                    d6:eb:0c:9e:d7:6f:d4:0d:2e:45:1b:cd:dc:18:c4:
                    f6:fc:c4:43:87:0f:c9:9c:46:65:bd:b0:ff:a4:df:
                    4c:6b:cb:e6:37:81:de:9c:11:75:83:3d:e3:93:94:
                    8e:37:94:36:98:16:33:8f:0a:b4:10:55:29:38:8b:
                    c3:f6:d6:57:f5:cf:92:d5:4b:55:2a:94:7f:51:a9:
                    02:a5:42:05:e0:67:5e:c4:6c:19:89:0e:95:e1:29:
                    be:fa:91:49:c6:bb:f5:1f:d5:75:16:49:0d:36:52:
                    b8:58:60:11:e4:a0:ed:79:c1:72:db:91:0d:3e:fe:
                    ee:84:df:4e:04:6f:ee:ea:f0:aa:c5:d9:60:eb:9f:
                    c1:fa:f1:89:6b:de:f7:bb:28:6d:50:93:a4:bd:aa:
                    f8:ca:2a:b1:fc:ea:a6:40:d7:b0:e4:39:c2:e8:12:
                    47:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:43:B8:0B:F8:B0:06:21:8F:2C:90:00:24:9C:B9:E9:1C:94:43:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/18f98b1f-13c1-3fb4-9c04-45c0618529c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.18.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:84:92:ac:77:ef:8e:80:3a:38:cb:b7:47:90:fc:f1:02:ed:
         56:a6:ee:0f:84:00:47:1a:52:71:95:05:d0:7a:bd:1f:de:47:
         c8:33:e4:af:36:42:2a:d5:f0:01:22:57:40:5c:4b:3c:ce:79:
         8f:38:9d:ad:1a:7b:bd:fc:09:22:ff:08:33:e9:72:70:78:05:
         14:04:76:22:1c:a0:93:82:07:62:7b:23:e1:b6:66:a2:8e:0a:
         20:09:c0:15:6e:58:e1:e5:0e:ca:97:e7:29:f7:7b:ab:51:41:
         f8:17:d5:57:6a:90:62:6e:7f:16:6b:7b:95:ba:ca:65:7a:2e:
         72:34:77:2d:1e:60:ec:94:49:6a:3e:1e:9d:16:09:29:89:58:
         a0:58:c8:51:ec:4d:3e:b9:97:89:f8:cd:58:7e:82:4e:1c:61:
         8a:87:8e:40:75:44:d8:bb:70:d4:67:80:3d:1b:ae:66:0c:21:
         7f:33:76:1b:d1:85:65:5b:6d:56:a5:e1:c4:72:1c:4f:42:dc:
         c5:79:8a:68:44:37:75:34:75:85:83:bb:94:63:1d:4b:68:d8:
         c0:35:34:36:d0:97:a6:ca:de:d8:ec:28:19:1f:43:89:85:fd:
         4b:4d:1a:ef:5f:7d:a6:3d:39:f2:c2:06:6a:ee:45:77:ce:86:
         e8:a2:d5:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglQEMFXH//NodyoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk
NDcwMmEzZTEtNDllZS00MDBlLTk5ODctOWVjM2FkYzMyMzlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTvQIVXTpJ3NQLmyBEMlfDr/BELoXbb2lqQv
lBvfJOgOtm+KAh7pyJuF18lJbgawlTRObgsF9FEJ+NxBVR30mDz59xqSFJoHIYSd
2wmzMeF/0jB7+k6PMTzW6wye12/UDS5FG83cGMT2/MRDhw/JnEZlvbD/pN9Ma8vm
N4HenBF1gz3jk5SON5Q2mBYzjwq0EFUpOIvD9tZX9c+S1UtVKpR/UakCpUIF4Gde
xGwZiQ6V4Sm++pFJxrv1H9V1FkkNNlK4WGAR5KDtecFy25ENPv7uhN9OBG/u6vCq
xdlg65/B+vGJa973uyhtUJOkvar4yiqx/OqmQNew5DnC6BJHFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAZDuAv4sAYhjyyQACScuekclEMAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMThmOThiMWYtMTNjMS0z
ZmI0LTljMDQtNDVjMDYxODUyOWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhLoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJSEkqx3746AOjjLt0eQ/PEC7Vam7g+EAEcaUnGVBdB6vR/eR8gz5K82
QirV8AEiV0BcSzzOeY84na0ae738CSL/CDPpcnB4BRQEdiIcoJOCB2J7I+G2ZqKO
CiAJwBVuWOHlDsqX5yn3e6tRQfgX1VdqkGJufxZre5W6ymV6LnI0dy0eYOyUSWo+
Hp0WCSmJWKBYyFHsTT65l4n4zVh+gk4cYYqHjkB1RNi7cNRngD0brmYMIX8zdhvR
hWVbbVal4cRyHE9C3MV5imhEN3U0dYWDu5RjHUto2MA1NDbQl6bK3tjsKBkfQ4mF
/UtNGu9ffaY9OfLCBmruRXfOhuii1Us=
-----END CERTIFICATE-----