Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/129ee52b-609d-36d9-a5ac-1108e0b0d2bd.roa
File:                     129ee52b-609d-36d9-a5ac-1108e0b0d2bd.roa (raw, json)
Hash identifier:          G5Ve9O9mWyZZpr2gyiWUJNGlKGVZ9n7GPTuLu95+VEk=
Subject key identifier:   EA:92:07:F9:EE:18:64:C1:3A:1A:1A:AC:EA:79:B1:6C:F0:14:CA:F1
Certificate issuer:       /CN=dd638a66-157d-4b37-b487-c2b5f4dbe940
Certificate serial:       010D0C9F4328584845158581BD782592FEB49C00
Authority key identifier: F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/129ee52b-609d-36d9-a5ac-1108e0b0d2bd.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     14618
IP address blocks:        144.86.202.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:85:81:bd:78:25:92:fe:b4:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd638a66-157d-4b37-b487-c2b5f4dbe940
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=099f8c12-399a-4929-b435-226bce61f505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4d:a1:5e:34:90:74:98:1a:b5:b4:f5:62:53:
                    90:ed:ff:1c:ef:37:d0:65:34:82:cb:2e:37:e0:33:
                    7b:fa:33:48:47:3f:58:9b:ef:a1:45:50:e5:e1:17:
                    9c:2f:49:f4:9a:28:31:e5:2f:d9:5f:80:23:35:52:
                    97:41:93:81:21:94:24:a6:4d:a7:5a:d2:3a:48:fe:
                    1b:22:b6:c1:e9:d6:c2:d1:31:31:59:33:cd:84:a9:
                    b5:51:77:82:d8:27:29:28:ca:7d:bc:89:02:9b:bb:
                    ce:e5:23:d7:40:ae:c5:25:63:54:1b:4d:75:38:db:
                    ed:7f:64:c6:98:24:92:50:5b:c5:22:dc:64:ba:3d:
                    89:b1:88:07:df:b1:76:2f:9b:6a:1e:30:b2:0f:68:
                    e9:4f:e6:36:02:33:f3:2e:0a:86:d8:c6:82:dd:0c:
                    93:f3:ba:74:84:69:68:cd:f7:3c:cd:77:35:5f:06:
                    ee:95:0b:09:63:b3:bb:55:ce:a6:75:f7:0c:04:8b:
                    1b:42:73:3a:24:c8:5d:e9:8c:73:e8:b6:e4:73:55:
                    8c:97:13:c5:6b:cd:f5:4a:c6:9c:b0:6f:a6:66:b2:
                    79:c5:d6:c5:48:43:d3:cc:4a:4f:57:8f:03:d6:f4:
                    d8:24:6d:3c:f5:81:f5:f3:a1:f1:9a:66:8d:c0:67:
                    2f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:92:07:F9:EE:18:64:C1:3A:1A:1A:AC:EA:79:B1:6C:F0:14:CA:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/129ee52b-609d-36d9-a5ac-1108e0b0d2bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl

            X509v3 Authority Key Identifier:
                keyid:F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.86.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9d:dc:f8:14:02:e7:90:6b:8a:9c:9f:3c:6d:8f:54:8f:1b:
         1b:c1:71:33:fe:94:f2:c2:2e:c8:72:7a:fa:92:d9:8d:30:b3:
         ad:20:26:fa:47:92:c0:e7:56:9a:5f:38:40:ab:a8:38:82:50:
         92:82:ce:c9:95:2d:4b:7c:0d:58:b0:a8:44:ac:43:e8:eb:37:
         ce:20:0b:41:f2:07:89:fd:88:22:34:63:a4:4f:a1:04:79:1d:
         93:45:bc:ad:a2:66:ff:c2:a9:98:4e:ed:df:57:ce:e6:91:90:
         1c:97:04:9d:a7:1c:93:c4:86:05:f9:48:d2:97:97:f9:30:e1:
         d8:f1:18:1d:5f:1c:2a:9d:24:c7:08:3d:a6:4c:f5:28:40:d3:
         fe:1f:ca:97:0c:55:04:5a:fa:a9:1a:dd:e9:6b:5c:c8:a7:fa:
         87:da:34:00:60:56:41:c8:32:04:f4:69:bc:2f:53:1f:d4:2e:
         e0:b0:b4:84:96:5d:0d:94:eb:c5:ee:7b:5d:9b:c9:56:19:bd:
         ea:5c:26:63:c4:55:6f:f3:ee:4e:23:7b:2e:8c:10:a5:8c:b2:
         f5:a0:83:b1:49:63:71:52:77:36:ec:64:3b:72:41:dd:da:7e:
         93:91:7b:9a:e1:df:9a:e3:5b:01:9c:38:01:93:1c:75:c5:4a:
         26:17:f5:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFFYWBvXglkv60nAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGQ2MzhhNjYtMTU3ZC00YjM3LWI0ODctYzJiNWY0ZGJl
OTQwMB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk
MDk5ZjhjMTItMzk5YS00OTI5LWI0MzUtMjI2YmNlNjFmNTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo02hXjSQdJgatbT1YlOQ7f8c7zfQZTSCyy43
4DN7+jNIRz9Ym++hRVDl4RecL0n0migx5S/ZX4AjNVKXQZOBIZQkpk2nWtI6SP4b
IrbB6dbC0TExWTPNhKm1UXeC2CcpKMp9vIkCm7vO5SPXQK7FJWNUG011ONvtf2TG
mCSSUFvFItxkuj2JsYgH37F2L5tqHjCyD2jpT+Y2AjPzLgqG2MaC3QyT87p0hGlo
zfc8zXc1XwbulQsJY7O7Vc6mdfcMBIsbQnM6JMhd6Yxz6Lbkc1WMlxPFa831Ssac
sG+mZrJ5xdbFSEPTzEpPV48D1vTYJG089YH186HxmmaNwGcvDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOqSB/nuGGTBOhoarOp5sWzwFMrxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZDYz
OGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1ZjRkYmU5NDAvMTI5ZWU1MmItNjA5ZC0z
NmQ5LWE1YWMtMTEwOGUwYjBkMmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGQ2MzhhNjYtMTU3ZC00YjM3LWI0
ODctYzJiNWY0ZGJlOTQwL2RkNjM4YTY2LTE1N2QtNGIzNy1iNDg3LWMyYjVmNGRi
ZTk0MC5jcmwwHwYDVR0jBBgwFoAU8SMlgUkCtMcqnJBtJsWQEnyWtlIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kZDYzOGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1
ZjRkYmU5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkFbKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADOd3PgUAueQa4qcnzxtj1SPGxvBcTP+lPLCLshyevqS2Y0ws60gJvpH
ksDnVppfOECrqDiCUJKCzsmVLUt8DViwqESsQ+jrN84gC0HyB4n9iCI0Y6RPoQR5
HZNFvK2iZv/CqZhO7d9XzuaRkByXBJ2nHJPEhgX5SNKXl/kw4djxGB1fHCqdJMcI
PaZM9ShA0/4fypcMVQRa+qka3elrXMin+ofaNABgVkHIMgT0abwvUx/ULuCwtISW
XQ2U68Xue12byVYZvepcJmPEVW/z7k4jey6MEKWMsvWgg7FJY3FSdzbsZDtyQd3a
fpORe5rh35rjWwGcOAGTHHXFSiYX9Qc=
-----END CERTIFICATE-----