Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/f8aa40e5-2040-3785-9652-fe2f3564c313.roa
File:                     f8aa40e5-2040-3785-9652-fe2f3564c313.roa (raw, json)
Hash identifier:          gq5w0qffKzDpRPXCNfnFvZTnCd+n68o+FukwVOHJ734=
Subject key identifier:   C7:B8:6E:9F:73:5E:D2:A8:77:CC:3C:70:55:FA:9F:18:FF:0D:22:2B
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F432858484D75986711FCAC82B0B0DF00
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/f8aa40e5-2040-3785-9652-fe2f3564c313.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     26744
IP address blocks:        206.180.134.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:98:67:11:fc:ac:82:b0:b0:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=b9f48532-fcc0-4d3a-92ba-c8776cea69f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:61:dc:9c:2b:02:f2:04:2d:9b:5c:d6:4f:79:
                    49:2f:d8:f1:de:4c:89:8e:29:87:85:bf:ef:55:8c:
                    3a:bd:32:36:7d:e9:8a:33:e5:ab:06:2c:dd:7a:62:
                    ff:6b:62:77:b7:bb:66:db:20:c7:c9:15:6f:2c:37:
                    08:f3:0d:2b:32:6c:89:e5:b2:dd:b7:6d:0b:28:4e:
                    82:9d:c6:2b:33:a3:89:17:db:29:2e:77:65:1d:82:
                    20:e7:8b:c6:17:6d:52:bf:29:cb:05:d3:e6:6f:8f:
                    76:89:48:49:01:36:86:18:68:1a:c7:dc:0e:71:5b:
                    a3:11:4e:1c:a4:ea:24:15:2e:31:62:07:43:24:6d:
                    3c:8f:ed:d6:c6:a1:18:6c:c8:49:12:a7:a3:0f:91:
                    2e:3b:10:c9:8a:1b:15:f7:48:28:6a:af:5c:f0:13:
                    5a:7e:6d:0b:ad:53:73:e3:6b:12:e0:47:a2:48:4c:
                    6b:51:97:10:4b:8e:09:9a:3d:8b:e5:09:c8:d4:e3:
                    8e:6b:c0:06:a2:4d:c1:f8:72:68:2b:22:81:d7:a3:
                    18:d5:cb:55:33:a2:ee:c1:99:bd:7b:4b:6a:21:47:
                    55:95:96:ea:f3:3d:2b:3c:4d:d1:c8:db:ac:15:8d:
                    17:2b:81:5e:7d:34:55:8f:2c:8c:cf:9b:a4:31:38:
                    84:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B8:6E:9F:73:5E:D2:A8:77:CC:3C:70:55:FA:9F:18:FF:0D:22:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/f8aa40e5-2040-3785-9652-fe2f3564c313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:0f:2b:53:39:1d:92:46:b8:49:36:f5:86:33:4b:9a:09:c9:
         54:64:92:f9:e4:e2:13:6c:cd:18:d2:ca:ba:8e:8e:bc:0e:1a:
         54:72:43:38:4c:94:93:39:35:6a:ca:cd:16:d1:fc:54:01:d8:
         90:75:58:bf:22:0f:22:31:2f:83:22:74:28:cf:e1:56:04:a7:
         63:d0:c6:f8:79:2a:ba:23:47:47:7c:fd:1b:9e:e5:e8:16:c7:
         fc:31:bd:11:da:72:ef:7c:14:04:40:33:4d:bd:fa:09:db:d1:
         39:d8:bc:e4:de:53:b9:34:a6:e8:81:53:01:84:6a:4f:60:87:
         60:3f:0c:3f:74:90:62:ad:6f:ae:9e:99:e6:2f:8c:a6:a0:8b:
         e0:9f:bd:72:61:fc:aa:7e:9e:b2:e3:f1:24:48:5e:81:ea:c7:
         be:7d:35:17:dd:74:22:c1:b6:04:7f:f8:03:7b:0a:18:65:d8:
         ac:aa:77:9a:2e:29:5d:e6:f1:83:56:1f:19:83:af:0e:1a:8f:
         b1:3e:6e:51:d5:fe:6e:08:de:3a:23:99:36:9d:1b:c0:a7:c3:
         ce:ce:a5:81:6d:2f:56:b0:c0:5a:44:bb:a3:b8:51:95:77:56:
         db:1b:6a:c9:a4:d0:46:83:79:f1:b2:20:2a:47:8a:a6:d6:f6:
         6e:d4:9c:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhNdZhnEfysgrCw3wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz
ZjhjMB4XDTI0MTIyMzE0MDA1MVoXDTI1MDMyMzEzMDA1MVowLzEtMCsGA1UEAxMk
YjlmNDg1MzItZmNjMC00ZDNhLTkyYmEtYzg3NzZjZWE2OWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWHcnCsC8gQtm1zWT3lJL9jx3kyJjimHhb/v
VYw6vTI2femKM+WrBizdemL/a2J3t7tm2yDHyRVvLDcI8w0rMmyJ5bLdt20LKE6C
ncYrM6OJF9spLndlHYIg54vGF21SvynLBdPmb492iUhJATaGGGgax9wOcVujEU4c
pOokFS4xYgdDJG08j+3WxqEYbMhJEqejD5EuOxDJihsV90goaq9c8BNafm0LrVNz
42sS4EeiSExrUZcQS44Jmj2L5QnI1OOOa8AGok3B+HJoKyKB16MY1ctVM6LuwZm9
e0tqIUdVlZbq8z0rPE3RyNusFY0XK4FefTRVjyyMz5ukMTiE7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMe4bp9zXtKod8w8cFX6nxj/DSIrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm
ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvZjhhYTQwZTUtMjA0MC0z
Nzg1LTk2NTItZmUyZjM1NjRjMzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm
ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx
M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj
ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzrSGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEkPK1M5HZJGuEk29YYzS5oJyVRkkvnk4hNszRjSyrqOjrwOGlRyQzhM
lJM5NWrKzRbR/FQB2JB1WL8iDyIxL4MidCjP4VYEp2PQxvh5KrojR0d8/Rue5egW
x/wxvRHacu98FARAM029+gnb0TnYvOTeU7k0puiBUwGEak9gh2A/DD90kGKtb66e
meYvjKagi+CfvXJh/Kp+nrLj8SRIXoHqx759NRfddCLBtgR/+AN7Chhl2Kyqd5ou
KV3m8YNWHxmDrw4aj7E+blHV/m4I3jojmTadG8Cnw87OpYFtL1awwFpEu6O4UZV3
Vtsbasmk0EaDefGyICpHiqbW9m7UnK0=
-----END CERTIFICATE-----