Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/faa2ef74-f3ac-358c-9428-0eb061b7e349.roa
File:                     faa2ef74-f3ac-358c-9428-0eb061b7e349.roa (raw, json)
Hash identifier:          X+52iR+WC0O3dC5LEpcTcMfAgijPhgKiXmsONnm1Y5Q=
Subject key identifier:   40:04:C2:2B:59:0B:FF:B1:E0:49:82:04:FE:DD:A4:8A:6A:10:39:FB
Certificate issuer:       /CN=1a319486-03d5-4fb1-997e-228350330847
Certificate serial:       010D0C9F43285848A400C34A0DB974B46CA85C80
Authority key identifier: A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/faa2ef74-f3ac-358c-9428-0eb061b7e349.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     46983
IP address blocks:        23.157.200.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:c3:4a:0d:b9:74:b4:6c:a8:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a319486-03d5-4fb1-997e-228350330847
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=2659d619-df1a-47d3-b509-dcfdb368c35b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bc:c2:74:22:74:3e:b7:0c:9c:60:27:b9:bf:
                    5d:9c:eb:95:c0:68:af:c4:e9:25:e3:e5:f2:38:52:
                    f7:a6:8f:dc:cb:fd:c7:da:92:d4:a2:b4:fd:79:d4:
                    7c:9d:c3:90:00:e4:cb:0a:98:85:2d:91:48:5f:af:
                    4d:cc:9a:90:08:4a:87:09:e3:ab:30:bb:38:9f:3c:
                    ca:1b:eb:54:50:78:cf:c8:7d:85:5e:36:7c:e3:48:
                    95:44:62:13:9a:41:97:28:47:00:e5:e2:e5:12:fe:
                    42:a6:d6:77:09:59:1d:0c:54:40:da:67:95:b3:19:
                    54:20:1b:88:0e:32:da:c3:c1:ac:94:c2:12:4a:76:
                    f8:a3:df:40:74:64:08:92:9e:9f:cf:c7:1d:94:49:
                    3b:fc:fe:48:18:7b:6c:04:41:c9:31:75:e7:bf:98:
                    62:66:22:8a:25:21:2c:34:26:3c:67:20:6d:09:f2:
                    15:8a:3c:1a:07:db:36:d3:2c:96:45:d7:a6:7a:33:
                    15:44:64:7d:a9:e5:5b:d8:e0:6d:5c:a6:9c:79:3c:
                    f3:a1:21:00:ef:e9:70:9b:c6:7f:65:36:78:16:7f:
                    e2:a1:d4:98:61:e8:a2:75:c7:ba:d2:eb:a5:c9:0b:
                    81:dc:09:10:b3:0e:1c:08:85:a5:23:42:f7:a3:31:
                    97:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:04:C2:2B:59:0B:FF:B1:E0:49:82:04:FE:DD:A4:8A:6A:10:39:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/faa2ef74-f3ac-358c-9428-0eb061b7e349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl

            X509v3 Authority Key Identifier:
                keyid:A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:f6:3b:d7:a8:0d:3f:de:4e:c5:00:91:55:37:c9:2d:ea:76:
         2b:bf:6a:af:48:6a:c2:f1:55:b7:4c:89:a3:f8:e7:36:82:1c:
         13:0a:33:1f:5b:41:c1:92:bf:b4:33:29:6b:e9:67:51:2e:7d:
         9b:17:50:a5:0c:bc:e8:93:26:2c:d4:38:a1:ad:db:af:c5:ae:
         a5:93:2c:07:ee:49:18:d3:5c:5a:13:80:13:95:f5:e9:5b:cf:
         47:75:8c:c5:22:42:01:fc:6f:fe:7e:4f:46:bd:70:26:f1:f9:
         fb:69:89:09:b6:12:7d:78:e0:b8:98:50:f8:55:e4:a8:1b:8c:
         76:ae:96:82:1c:71:90:8c:9d:10:2c:d8:0e:63:4e:8a:6d:31:
         e6:25:21:de:0a:c4:33:7f:fd:9c:9d:f5:5a:95:06:93:2f:1d:
         8b:80:23:18:be:9a:66:86:e3:fd:81:c9:b5:71:82:2c:0f:b7:
         e9:f5:c1:4c:fb:04:37:2e:12:3f:e9:e6:54:20:97:1d:35:29:
         5e:07:9d:50:d2:15:b8:2a:49:ac:75:f1:12:0e:8d:04:3a:c0:
         34:62:49:96:b8:bb:36:ef:a5:51:b6:bc:7c:dd:fa:0f:6a:a7:
         b6:f7:93:1c:f1:a3:a9:bd:19:3c:13:ee:82:3a:e7:86:1b:d8:
         79:1a:b3:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAMNKDbl0tGyoXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWEzMTk0ODYtMDNkNS00ZmIxLTk5N2UtMjI4MzUwMzMw
ODQ3MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk
MjY1OWQ2MTktZGYxYS00N2QzLWI1MDktZGNmZGIzNjhjMzViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7zCdCJ0PrcMnGAnub9dnOuVwGivxOkl4+Xy
OFL3po/cy/3H2pLUorT9edR8ncOQAOTLCpiFLZFIX69NzJqQCEqHCeOrMLs4nzzK
G+tUUHjPyH2FXjZ840iVRGITmkGXKEcA5eLlEv5CptZ3CVkdDFRA2meVsxlUIBuI
DjLaw8GslMISSnb4o99AdGQIkp6fz8cdlEk7/P5IGHtsBEHJMXXnv5hiZiKKJSEs
NCY8ZyBtCfIVijwaB9s20yyWRdemejMVRGR9qeVb2OBtXKaceTzzoSEA7+lwm8Z/
ZTZ4Fn/iodSYYeiidce60uulyQuB3AkQsw4cCIWlI0L3ozGXEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEAEwitZC/+x4EmCBP7dpIpqEDn7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xYTMx
OTQ4Ni0wM2Q1LTRmYjEtOTk3ZS0yMjgzNTAzMzA4NDcvZmFhMmVmNzQtZjNhYy0z
NThjLTk0MjgtMGViMDYxYjdlMzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWEzMTk0ODYtMDNkNS00ZmIxLTk5
N2UtMjI4MzUwMzMwODQ3LzFhMzE5NDg2LTAzZDUtNGZiMS05OTdlLTIyODM1MDMz
MDg0Ny5jcmwwHwYDVR0jBBgwFoAUojoUY2Szy8/8gGpP64Xxl3Adxp0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xYTMxOTQ4Ni0wM2Q1LTRmYjEtOTk3ZS0yMjgz
NTAzMzA4NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACj2O9eoDT/eTsUAkVU3yS3qdiu/aq9IasLxVbdMiaP45zaCHBMKMx9b
QcGSv7QzKWvpZ1EufZsXUKUMvOiTJizUOKGt26/FrqWTLAfuSRjTXFoTgBOV9elb
z0d1jMUiQgH8b/5+T0a9cCbx+ftpiQm2En144LiYUPhV5KgbjHauloIccZCMnRAs
2A5jToptMeYlId4KxDN//Zyd9VqVBpMvHYuAIxi+mmaG4/2BybVxgiwPt+n1wUz7
BDcuEj/p5lQglx01KV4HnVDSFbgqSax18RIOjQQ6wDRiSZa4uzbvpVG2vHzd+g9q
p7b3kxzxo6m9GTwT7oI654Yb2Hkas0c=
-----END CERTIFICATE-----