Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/1ba5d9dc-1a6b-3803-a368-2f3a824bcfd4.roa
File:                     1ba5d9dc-1a6b-3803-a368-2f3a824bcfd4.roa (raw, json)
Hash identifier:          h+njDEHnQa/pTO31/43QrD4JmFQtmo92jrAbBN8ixN0=
Subject key identifier:   15:05:E3:25:EB:F7:A9:CB:54:CE:9F:13:86:58:9A:37:B6:7C:9E:67
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F432858483F801CA0E8A63E360BBA8500
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/1ba5d9dc-1a6b-3803-a368-2f3a824bcfd4.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     13414
IP address blocks:        199.16.159.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:1c:a0:e8:a6:3e:36:0b:ba:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=5f1ee165-0f28-4c35-b4ca-5dc2f69f9080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:05:96:08:b4:d3:cb:63:8e:8d:90:b2:2e:95:
                    03:49:ff:5e:2d:ff:79:b9:a8:af:fd:84:69:8f:74:
                    46:11:57:9a:0e:47:f7:f1:1f:c4:56:0d:e0:5e:bd:
                    58:cc:a7:33:ea:b6:6b:0a:c3:67:8f:4f:12:76:47:
                    a8:c6:1f:7e:52:14:2d:eb:c1:99:95:41:b4:f1:84:
                    4d:59:fe:99:f6:b7:a0:e0:28:3b:37:34:7c:e2:b8:
                    a1:ae:1e:9e:2d:65:6f:ad:de:41:fc:7f:6a:52:82:
                    d5:8b:61:c2:e8:79:a3:ae:c4:c7:6f:f4:93:cb:34:
                    b5:b3:23:64:1e:0d:30:14:cf:2c:ce:6a:03:1a:75:
                    32:d9:4d:3c:13:37:10:85:30:03:0a:41:e4:0c:b4:
                    da:94:f3:11:2a:66:7c:9e:a0:2f:bb:5b:30:53:a6:
                    ce:c9:1b:cf:10:d6:59:5a:f1:19:a6:ac:fd:b8:b6:
                    55:1b:04:29:bb:63:2c:f3:80:5c:34:fe:aa:ba:6c:
                    49:61:a2:e9:f9:f7:73:80:da:ed:a9:51:67:62:77:
                    a3:2c:59:d4:01:da:df:ce:f9:a9:33:3d:9a:13:1c:
                    53:8f:46:d9:5e:6b:a5:94:dd:e6:fe:a0:f2:72:89:
                    24:48:1a:f2:e0:b4:df:d3:6b:51:f4:9e:85:56:4a:
                    15:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:05:E3:25:EB:F7:A9:CB:54:CE:9F:13:86:58:9A:37:B6:7C:9E:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/1ba5d9dc-1a6b-3803-a368-2f3a824bcfd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.16.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:17:a3:78:dc:79:a9:52:6a:5f:83:eb:7d:b4:6c:53:c6:34:
         53:23:23:7f:21:ec:0f:19:f6:ef:08:92:0e:6b:8e:e8:2e:d3:
         f5:99:19:6e:48:a3:f4:fd:c4:f6:6d:4c:6c:79:b1:12:bd:e3:
         d0:da:83:97:6b:92:11:f0:55:47:7b:ff:8c:ed:aa:51:2e:f8:
         3a:d4:01:48:fc:b5:6e:a7:ab:e5:c3:21:8f:8a:c0:41:c1:e1:
         0d:f7:4e:0d:b0:f5:12:e7:a5:53:c1:9c:ee:20:09:f3:6b:f7:
         10:fa:65:02:e3:54:47:14:d4:be:64:2b:e3:90:f1:46:a7:e9:
         70:d3:db:72:5c:d3:b2:bb:40:33:0e:13:39:8f:1c:91:41:43:
         1b:a2:d2:f9:ee:5e:e5:09:9a:68:43:4d:38:4e:63:a3:43:45:
         97:ae:ea:ad:e7:c1:d7:66:6f:bb:58:0f:0e:68:02:64:82:8c:
         a6:2d:77:2a:76:13:b9:de:ee:54:88:56:7f:c2:fa:78:fc:8a:
         ea:e2:00:2a:60:02:c5:f6:92:0c:45:30:ce:2e:e8:ba:d3:99:
         c1:2e:37:84:a5:e6:ac:6e:fd:92:de:92:41:ed:f4:7a:80:fc:
         57:5f:01:62:b0:a0:58:2e:19:2c:a2:dc:6b:d4:7c:6d:f5:74:
         32:a6:73:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg/gByg6KY+Ngu6hQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy
NTc2MB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk
NWYxZWUxNjUtMGYyOC00YzM1LWI0Y2EtNWRjMmY2OWY5MDgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwWWCLTTy2OOjZCyLpUDSf9eLf95uaiv/YRp
j3RGEVeaDkf38R/EVg3gXr1YzKcz6rZrCsNnj08Sdkeoxh9+UhQt68GZlUG08YRN
Wf6Z9reg4Cg7NzR84rihrh6eLWVvrd5B/H9qUoLVi2HC6HmjrsTHb/STyzS1syNk
Hg0wFM8szmoDGnUy2U08EzcQhTADCkHkDLTalPMRKmZ8nqAvu1swU6bOyRvPENZZ
WvEZpqz9uLZVGwQpu2Ms84BcNP6qumxJYaLp+fdzgNrtqVFnYnejLFnUAdrfzvmp
Mz2aExxTj0bZXmullN3m/qDycokkSBry4LTf02tR9J6FVkoVLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBUF4yXr96nLVM6fE4ZYmje2fJ5nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3
YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvMWJhNWQ5ZGMtMWE2Yi0z
ODAzLWEzNjgtMmYzYTgyNGJjZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3
YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi
MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh
NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxCfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG8Xo3jcealSal+D6320bFPGNFMjI38h7A8Z9u8Ikg5rjugu0/WZGW5I
o/T9xPZtTGx5sRK949Dag5drkhHwVUd7/4ztqlEu+DrUAUj8tW6nq+XDIY+KwEHB
4Q33Tg2w9RLnpVPBnO4gCfNr9xD6ZQLjVEcU1L5kK+OQ8Uan6XDT23Jc07K7QDMO
EzmPHJFBQxui0vnuXuUJmmhDTThOY6NDRZeu6q3nwddmb7tYDw5oAmSCjKYtdyp2
E7ne7lSIVn/C+nj8iuriACpgAsX2kgxFMM4u6LrTmcEuN4Sl5qxu/ZLekkHt9HqA
/FdfAWKwoFguGSyi3GvUfG31dDKmc0w=
-----END CERTIFICATE-----