Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa
File:                     d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa (raw, json)
Hash identifier:          liieXnI1yuM71OMESLoS4wK+iCEC9MJ8qLCLb6TLS1Q=
Subject key identifier:   A9:43:96:C7:18:25:9D:FB:0E:F9:C7:3E:0E:DE:B4:7B:F0:0A:A2:08
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F155335CB00CB34A02B92600
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        98.20.32.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:33:5c:b0:0c:b3:4a:02:b9:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=7ff942c7-b493-48ad-82e5-95f071313bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ab:7e:7f:a8:cf:22:e7:3a:f6:b9:1a:a6:ff:
                    fe:20:cb:b9:5b:31:af:09:ca:4e:d7:e8:20:c5:33:
                    49:bd:c9:c1:fe:f1:a3:9a:06:3f:d0:be:ae:c9:44:
                    fc:64:16:9d:04:86:f7:86:6e:74:a6:c5:80:df:22:
                    5a:43:ff:0c:d3:b2:6d:4e:3c:23:c6:a6:e1:d5:fa:
                    66:3d:11:8e:f2:22:00:63:7c:e6:5a:f7:45:f3:75:
                    54:24:f1:32:3c:9b:4d:59:d3:db:96:f2:6a:69:a6:
                    48:90:c8:8c:31:9c:f2:0e:76:d5:c3:2d:cf:7c:61:
                    eb:a9:59:4d:28:35:94:18:21:f7:ed:94:a8:bc:e0:
                    f5:34:6f:cb:64:8a:a6:36:c2:69:19:24:04:4d:d5:
                    8a:5d:b0:49:1b:e2:23:48:cd:08:5b:3e:5d:53:e1:
                    1a:f6:75:c8:58:dc:93:e8:86:93:52:02:d3:4d:69:
                    d6:55:16:4e:6a:49:d2:54:b9:b6:36:55:8e:8d:68:
                    50:b5:4d:bd:62:e3:d2:92:ab:52:32:dc:43:73:54:
                    4f:ca:c4:49:27:a8:60:70:f4:da:45:88:6c:c3:29:
                    ad:1e:17:03:c9:5d:8d:1f:69:f2:ec:f1:03:28:eb:
                    20:32:94:81:98:33:98:11:fd:c1:e4:16:42:9f:33:
                    99:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:43:96:C7:18:25:9D:FB:0E:F9:C7:3E:0E:DE:B4:7B:F0:0A:A2:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.20.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:04:87:de:80:75:d6:8d:ec:a6:00:3b:b6:47:4a:50:ee:12:
         f7:26:c0:aa:65:b6:96:94:25:cf:c2:b1:c8:df:74:1b:18:96:
         3b:02:e6:5a:f7:fb:fe:35:3f:ec:98:01:cf:a7:a5:0b:f3:d1:
         a2:d7:ab:54:e0:6d:06:14:e9:39:5b:9c:a4:b1:c9:79:6f:86:
         1c:a5:c8:3e:da:2e:c6:c5:a6:ee:6e:1b:b1:ff:84:a0:12:ba:
         57:3e:e6:a3:bd:9c:db:bf:54:d6:86:41:4d:57:25:95:4a:39:
         d3:2a:35:18:a4:b8:27:0f:a9:51:25:0a:14:45:87:f3:a1:42:
         c2:f8:c6:92:1d:0e:5c:17:3b:18:04:68:70:ff:18:51:38:4a:
         55:ef:13:3d:85:09:46:ac:dc:eb:92:6f:79:13:a0:5e:13:ce:
         a1:47:31:a5:ba:6d:66:2d:f8:6c:66:83:88:fc:c9:f8:de:8c:
         c2:ff:f1:43:62:aa:90:78:0b:1c:f4:9d:56:b1:3e:9c:08:ec:
         26:00:50:17:4c:f5:23:86:67:2a:9a:79:12:a4:86:93:bc:fd:
         ca:a2:cc:61:97:94:7f:ee:fe:6f:c8:45:84:89:71:db:d3:33:
         3c:79:d1:5c:3d:08:29:aa:9b:af:3e:2d:89:53:7e:f1:02:bb:
         b9:dd:81:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxVTNcsAyzSgK5JgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk
N2ZmOTQyYzctYjQ5My00OGFkLTgyZTUtOTVmMDcxMzEzYmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7at+f6jPIuc69rkapv/+IMu5WzGvCcpO1+gg
xTNJvcnB/vGjmgY/0L6uyUT8ZBadBIb3hm50psWA3yJaQ/8M07JtTjwjxqbh1fpm
PRGO8iIAY3zmWvdF83VUJPEyPJtNWdPblvJqaaZIkMiMMZzyDnbVwy3PfGHrqVlN
KDWUGCH37ZSovOD1NG/LZIqmNsJpGSQETdWKXbBJG+IjSM0IWz5dU+Ea9nXIWNyT
6IaTUgLTTWnWVRZOaknSVLm2NlWOjWhQtU29YuPSkqtSMtxDc1RPysRJJ6hgcPTa
RYhswymtHhcDyV2NH2ny7PEDKOsgMpSBmDOYEf3B5BZCnzOZjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKlDlscYJZ37DvnHPg7etHvwCqIIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDYwOWQ3ZDEtODFlOC0z
NzAzLTlhMTItYTZmOTdhMWJkNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYhQgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABkEh96AddaN7KYAO7ZHSlDuEvcmwKpltpaUJc/CscjfdBsYljsC5lr3
+/41P+yYAc+npQvz0aLXq1TgbQYU6TlbnKSxyXlvhhylyD7aLsbFpu5uG7H/hKAS
ulc+5qO9nNu/VNaGQU1XJZVKOdMqNRikuCcPqVElChRFh/OhQsL4xpIdDlwXOxgE
aHD/GFE4SlXvEz2FCUas3OuSb3kToF4TzqFHMaW6bWYt+Gxmg4j8yfjejML/8UNi
qpB4Cxz0nVaxPpwI7CYAUBdM9SOGZyqaeRKkhpO8/cqizGGXlH/u/m/IRYSJcdvT
Mzx50Vw9CCmqm68+LYlTfvECu7ndgVA=
-----END CERTIFICATE-----