Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/4a7ffbf8-fc17-3caf-a320-6e099b7b6b99.roa
File:                     4a7ffbf8-fc17-3caf-a320-6e099b7b6b99.roa (raw, json)
Hash identifier:          wh/vwss+F9S9OUpI8qadp1EmQztrxDXX79AQwqcZfpU=
Subject key identifier:   DC:81:45:6D:EF:6F:CD:B3:DB:64:B3:0D:99:26:A7:88:F1:FD:DA:91
Certificate issuer:       /CN=cc2b08f9-b3dc-4cf6-870c-a730b860c491
Certificate serial:       010D0C9F432858485F9AE5E40D68A368F39E7E40
Authority key identifier: E1:1F:BF:28:EA:F0:4B:06:8B:E0:2B:51:CA:BD:60:3B:8D:C7:18:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/4a7ffbf8-fc17-3caf-a320-6e099b7b6b99.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     395332
IP address blocks:        23.146.104.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:e5:e4:0d:68:a3:68:f3:9e:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc2b08f9-b3dc-4cf6-870c-a730b860c491
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=5ae7e924-a740-4521-a418-bc17156319aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5c:33:6c:e7:97:85:b8:fe:46:3e:3e:78:58:
                    ee:da:b0:8b:a0:a5:d9:62:a6:42:3d:01:a8:64:f3:
                    06:91:96:2e:f5:a2:b7:b5:59:20:d7:d5:87:75:65:
                    39:d7:8c:ab:e4:d2:6a:37:84:b8:4c:58:20:5d:3c:
                    1e:5f:23:ec:55:49:f4:75:1c:7b:3d:36:ee:98:d5:
                    dd:89:45:33:ce:a9:61:f3:3f:79:58:0d:a1:e3:27:
                    54:02:b5:3b:1e:fc:a8:7a:31:b3:ea:ee:19:51:9f:
                    75:08:d3:13:4d:3e:bd:1d:7a:6d:6b:5c:43:9e:3f:
                    21:92:19:8f:a0:39:97:80:88:15:10:05:52:95:4b:
                    e9:95:eb:20:d0:2e:c8:78:bf:ae:6a:10:4b:36:32:
                    ec:8d:96:e8:6e:e3:c5:2f:47:4f:17:76:b9:bc:4f:
                    9d:bf:9e:d7:d7:8e:7c:b6:96:69:50:3d:d0:87:ad:
                    cf:5d:94:14:1b:44:85:0c:86:09:fa:30:06:09:47:
                    93:3a:06:27:ef:b1:ac:bc:42:ec:cd:f5:01:be:0d:
                    6e:60:f4:a5:5e:e9:ab:d3:4c:40:2d:fc:78:15:4c:
                    93:60:04:d2:3e:78:f3:e4:c0:4b:02:78:24:cc:80:
                    42:2c:16:02:5e:83:66:13:4b:b7:2b:3c:e0:6d:3e:
                    fa:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:81:45:6D:EF:6F:CD:B3:DB:64:B3:0D:99:26:A7:88:F1:FD:DA:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/4a7ffbf8-fc17-3caf-a320-6e099b7b6b99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.crl

            X509v3 Authority Key Identifier:
                keyid:E1:1F:BF:28:EA:F0:4B:06:8B:E0:2B:51:CA:BD:60:3B:8D:C7:18:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:9a:1a:05:c8:bf:24:1a:9d:c6:dc:73:2a:dd:ba:2c:ea:55:
         8b:1d:bc:d2:90:5b:7d:72:e6:c3:b9:3d:22:6d:22:60:a6:d1:
         e5:52:22:14:67:f0:21:3a:2f:cb:e5:ff:c8:32:84:c1:ce:23:
         47:5e:42:19:54:bb:cc:24:5d:16:db:ed:85:74:f1:06:31:21:
         2e:9b:52:9d:89:a9:4a:25:4f:f4:27:1c:54:9a:37:8a:03:cb:
         3c:c9:03:1e:a7:fb:37:55:e6:24:73:bf:5c:d6:08:35:8e:b7:
         32:c2:9c:a9:26:e9:ac:ce:9a:64:56:e1:84:83:24:b6:90:e2:
         75:42:22:fc:ce:ba:7d:43:28:ae:d1:bb:e2:62:08:a1:14:8e:
         7d:2e:7d:ce:bd:17:c0:f5:59:84:36:8a:33:30:c9:1f:62:e1:
         dd:09:05:2f:a5:21:04:87:57:c6:e3:a0:b0:fc:4d:4c:9b:06:
         75:00:ea:b9:41:41:43:21:fe:5a:5d:1d:7a:88:04:9a:11:04:
         0a:02:50:8a:e7:9f:2a:a5:3c:64:25:69:8a:7f:b3:28:72:da:
         b4:fb:3b:aa:51:f7:67:59:6b:47:81:30:3c:d6:0b:42:17:e8:
         0b:1b:cb:84:a0:03:75:bd:0e:04:f7:03:fa:98:ba:60:3a:16:
         b1:4c:6d:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhfmuXkDWijaPOefkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MyYjA4ZjktYjNkYy00Y2Y2LTg3MGMtYTczMGI4NjBj
NDkxMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk
NWFlN2U5MjQtYTc0MC00NTIxLWE0MTgtYmMxNzE1NjMxOWFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1wzbOeXhbj+Rj4+eFju2rCLoKXZYqZCPQGo
ZPMGkZYu9aK3tVkg19WHdWU514yr5NJqN4S4TFggXTweXyPsVUn0dRx7PTbumNXd
iUUzzqlh8z95WA2h4ydUArU7HvyoejGz6u4ZUZ91CNMTTT69HXpta1xDnj8hkhmP
oDmXgIgVEAVSlUvplesg0C7IeL+uahBLNjLsjZbobuPFL0dPF3a5vE+dv57X1458
tpZpUD3Qh63PXZQUG0SFDIYJ+jAGCUeTOgYn77GsvELszfUBvg1uYPSlXumr00xA
Lfx4FUyTYATSPnjz5MBLAngkzIBCLBYCXoNmE0u3KzzgbT762QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNyBRW3vb82z22SzDZkmp4jx/dqRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jYzJi
MDhmOS1iM2RjLTRjZjYtODcwYy1hNzMwYjg2MGM0OTEvNGE3ZmZiZjgtZmMxNy0z
Y2FmLWEzMjAtNmUwOTliN2I2Yjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2MyYjA4ZjktYjNkYy00Y2Y2LTg3
MGMtYTczMGI4NjBjNDkxL2NjMmIwOGY5LWIzZGMtNGNmNi04NzBjLWE3MzBiODYw
YzQ5MS5jcmwwHwYDVR0jBBgwFoAU4R+/KOrwSwaL4CtRyr1gO43HGJgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9jYzJiMDhmOS1iM2RjLTRjZjYtODcwYy1hNzMw
Yjg2MGM0OTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5JoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE+aGgXIvyQancbccyrduizqVYsdvNKQW31y5sO5PSJtImCm0eVSIhRn
8CE6L8vl/8gyhMHOI0deQhlUu8wkXRbb7YV08QYxIS6bUp2JqUolT/QnHFSaN4oD
yzzJAx6n+zdV5iRzv1zWCDWOtzLCnKkm6azOmmRW4YSDJLaQ4nVCIvzOun1DKK7R
u+JiCKEUjn0ufc69F8D1WYQ2ijMwyR9i4d0JBS+lIQSHV8bjoLD8TUybBnUA6rlB
QUMh/lpdHXqIBJoRBAoCUIrnnyqlPGQlaYp/syhy2rT7O6pR92dZa0eBMDzWC0IX
6Asby4SgA3W9DgT3A/qYumA6FrFMbYQ=
-----END CERTIFICATE-----