Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/ad35477a-7b33-3abf-a97f-75b5a8927582.roa
File:                     ad35477a-7b33-3abf-a97f-75b5a8927582.roa (raw, json)
Hash identifier:          3brjkTIWGx9pfqWPTMNsuvGDRZaO1Tfq0ksCZQmHcVA=
Subject key identifier:   37:F8:5E:A8:53:26:72:EF:00:1F:85:AA:2F:46:60:8B:A9:F9:93:9C
Certificate issuer:       /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial:       010D0C9F43285848573ACEAF8C7230A7B44F92C0
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/ad35477a-7b33-3abf-a97f-75b5a8927582.roa
Signing time:             Fri 27 Dec 2024 02:00:40 +0000
ROA not before:           Fri 27 Dec 2024 02:00:40 +0000
ROA not after:            Thu 27 Mar 2025 01:00:40 +0000
asID:                     398210
IP address blocks:        168.220.180.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:57:3a:ce:af:8c:72:30:a7:b4:4f:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
        Validity
            Not Before: Dec 27 02:00:40 2024 GMT
            Not After : Mar 27 01:00:40 2025 GMT
        Subject: CN=3561b13a-2692-4740-a1c8-8fbdf8e5f5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6e:3d:0d:16:6a:41:1a:e2:db:0b:46:66:21:
                    bb:e9:cf:fb:56:d9:21:92:1c:7c:c8:f2:20:a4:a4:
                    17:37:4c:ae:58:39:56:ab:05:3c:65:12:d8:5a:93:
                    ba:25:74:9a:a1:6d:02:dc:2f:fa:bc:2d:10:8f:d0:
                    65:18:ff:3e:81:58:11:25:9e:bb:d1:74:b3:ae:ae:
                    3d:f9:a0:c3:f7:6c:22:15:08:f5:41:5b:2d:e2:44:
                    54:ef:bc:87:54:e0:86:35:e5:5f:5e:f0:9f:12:cd:
                    ce:c5:27:91:c0:5e:d7:6a:d4:22:f4:74:ed:7a:58:
                    eb:fc:f8:14:12:83:e8:05:c9:20:f1:5b:ae:db:f3:
                    f4:bc:7f:77:0a:bc:6f:d1:b1:6d:d0:51:48:86:7e:
                    e7:f1:16:42:a7:f7:94:c1:78:61:13:e5:9e:6e:1c:
                    2b:f6:a9:28:40:92:4c:f1:c3:cd:7a:83:e1:aa:c7:
                    4c:fd:70:f0:2c:2f:b6:99:f1:ef:a3:1c:76:23:b5:
                    11:d8:ae:d1:5c:e6:d0:45:e4:58:97:c3:82:73:3f:
                    ee:f1:65:c8:ea:15:03:42:06:27:f5:97:84:6f:f5:
                    03:70:c5:1b:03:1d:db:cb:88:b8:56:89:63:3d:bd:
                    05:ff:56:43:6c:29:b9:b0:d7:55:ba:93:8f:af:3a:
                    c3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F8:5E:A8:53:26:72:EF:00:1F:85:AA:2F:46:60:8B:A9:F9:93:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/ad35477a-7b33-3abf-a97f-75b5a8927582.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl

            X509v3 Authority Key Identifier:
                keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ac:1c:f0:b2:da:0c:4a:7a:b2:5e:65:2a:00:16:38:53:87:
         6a:21:e0:86:f9:7e:02:6d:46:69:cb:c2:e0:ec:05:4f:31:fc:
         df:b7:ef:da:9f:0d:95:f8:6b:22:dd:93:db:d5:9b:1a:c1:24:
         bf:75:50:14:4b:fc:4f:3e:2c:4a:4c:7b:cb:b8:16:77:b2:73:
         9e:68:08:b6:1b:01:c9:ff:04:6c:c7:bf:4f:21:b8:21:43:48:
         c7:2e:69:2b:87:97:bc:9e:35:9d:14:da:03:63:fc:ff:e9:89:
         0d:5f:94:e1:66:4c:dd:7d:08:4d:e1:1e:06:50:9a:0d:b7:91:
         8a:5c:17:70:01:16:49:2f:8a:1b:24:2d:dd:0b:eb:58:1b:bf:
         9f:cb:a9:ab:7f:01:f5:f7:fe:0b:4a:95:19:9c:c8:f8:ef:e2:
         de:72:de:66:b1:c5:dd:cd:08:4f:58:35:12:1c:81:81:5d:c6:
         8d:db:73:ac:36:09:ec:de:c5:b6:0f:33:68:71:bb:e0:8b:fc:
         99:3d:30:e1:7a:63:36:48:a6:6a:e5:91:7f:e9:1b:3b:2d:f1:
         57:5a:d2:92:98:24:1b:e0:de:fd:48:7a:26:68:de:5d:5b:17:
         cb:c1:3d:21:8b:4c:0c:ce:0c:a9:30:7d:c2:92:77:d9:8e:b5:
         1b:01:ed:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhXOs6vjHIwp7RPksAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw
ZmFhMB4XDTI0MTIyNzAyMDA0MFoXDTI1MDMyNzAxMDA0MFowLzEtMCsGA1UEAxMk
MzU2MWIxM2EtMjY5Mi00NzQwLWExYzgtOGZiZGY4ZTVmNWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG49DRZqQRri2wtGZiG76c/7Vtkhkhx8yPIg
pKQXN0yuWDlWqwU8ZRLYWpO6JXSaoW0C3C/6vC0Qj9BlGP8+gVgRJZ670XSzrq49
+aDD92wiFQj1QVst4kRU77yHVOCGNeVfXvCfEs3OxSeRwF7XatQi9HTteljr/PgU
EoPoBckg8Vuu2/P0vH93Crxv0bFt0FFIhn7n8RZCp/eUwXhhE+Webhwr9qkoQJJM
8cPNeoPhqsdM/XDwLC+2mfHvoxx2I7UR2K7RXObQReRYl8OCcz/u8WXI6hUDQgYn
9ZeEb/UDcMUbAx3by4i4VoljPb0F/1ZDbCm5sNdVupOPrzrDCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDf4XqhTJnLvAB+Fqi9GYIup+ZOcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4
YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvYWQzNTQ3N2EtN2IzMy0z
YWJmLWE5N2YtNzViNWE4OTI3NTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj
ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw
MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2
YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNy0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAASsHPCy2gxKerJeZSoAFjhTh2oh4Ib5fgJtRmnLwuDsBU8x/N+379qf
DZX4ayLdk9vVmxrBJL91UBRL/E8+LEpMe8u4Fneyc55oCLYbAcn/BGzHv08huCFD
SMcuaSuHl7yeNZ0U2gNj/P/piQ1flOFmTN19CE3hHgZQmg23kYpcF3ABFkkvihsk
Ld0L61gbv5/Lqat/AfX3/gtKlRmcyPjv4t5y3maxxd3NCE9YNRIcgYFdxo3bc6w2
CezexbYPM2hxu+CL/Jk9MOF6YzZIpmrlkX/pGzst8Vda0pKYJBvg3v1IeiZo3l1b
F8vBPSGLTAzODKkwfcKSd9mOtRsB7bE=
-----END CERTIFICATE-----