Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/5f99b2c0-a5d9-339c-825e-94a6f461f236.roa
File:                     5f99b2c0-a5d9-339c-825e-94a6f461f236.roa (raw, json)
Hash identifier:          FHigtMKT5ncUIxzz+cc3+UbOnZD3x8EGyjpbqrraGLg=
Subject key identifier:   86:34:39:F3:27:8F:76:86:D5:6F:C3:95:62:4C:B0:E8:F3:C5:1B:F8
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F43285848A228004A7BD6E49E1E6ED980
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/5f99b2c0-a5d9-339c-825e-94a6f461f236.roa
Signing time:             Wed 22 Jan 2025 22:08:26 +0000
ROA not before:           Wed 22 Jan 2025 22:08:26 +0000
ROA not after:            Tue 22 Apr 2025 21:08:26 +0000
asID:                     15164
IP address blocks:        104.218.132.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a2:28:00:4a:7b:d6:e4:9e:1e:6e:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jan 22 22:08:26 2025 GMT
            Not After : Apr 22 21:08:26 2025 GMT
        Subject: CN=2dda3ce5-c148-42ba-bf31-5d13461b503b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c7:bc:d2:1b:bc:dd:e5:6e:ab:9b:7e:fd:9b:
                    a7:63:f5:ea:7c:1e:69:b8:61:84:34:17:28:73:98:
                    46:f6:29:43:e3:1c:4b:d8:c1:bf:6e:a1:c4:97:fe:
                    3e:b3:d2:9e:4f:bd:ca:8a:73:5c:36:42:ad:b7:0d:
                    f2:82:6c:9e:eb:ef:64:f4:ff:09:91:74:0e:b2:a6:
                    92:f7:60:ad:b7:57:fd:2d:2e:ef:a4:14:9e:07:85:
                    28:77:95:db:27:1d:17:08:12:63:05:e4:6d:e1:7b:
                    ed:b3:a0:57:2f:26:2f:80:a3:5c:f7:ff:cf:d9:89:
                    d7:17:1e:b5:72:27:ad:a6:82:f0:73:eb:2f:11:2d:
                    5c:78:60:c1:fd:8a:22:f3:23:16:a8:24:7f:21:70:
                    84:60:de:b7:ae:42:51:cb:ee:b4:f3:5c:c4:c3:0a:
                    10:69:7b:a6:09:34:14:3a:de:30:0f:7b:2b:f1:4d:
                    32:8b:e8:86:9c:e0:14:27:48:06:91:cd:94:fe:99:
                    4b:c6:d0:38:c5:c9:ec:f0:d6:e7:77:21:20:36:76:
                    ed:1f:e7:69:3d:d9:af:1f:2b:26:46:9e:de:fd:b3:
                    cd:b2:92:5f:ec:e6:e8:0e:f4:56:6d:d3:73:74:f9:
                    10:88:8b:86:ec:5d:7b:0a:97:ce:ac:bc:db:24:d0:
                    fd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:34:39:F3:27:8F:76:86:D5:6F:C3:95:62:4C:B0:E8:F3:C5:1B:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/5f99b2c0-a5d9-339c-825e-94a6f461f236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:6b:f7:d0:1f:13:11:bf:47:2f:c0:65:f0:cf:88:f4:51:75:
         1b:aa:ce:be:35:7f:13:98:34:be:f1:9b:85:43:27:67:45:33:
         42:21:f3:10:8f:1b:5d:6b:5d:62:8e:92:36:ec:2d:29:33:bb:
         3f:cf:f1:01:11:6b:f8:71:ee:3c:58:fa:69:43:5e:d7:74:9d:
         ec:f2:dc:6e:7c:17:84:c6:53:be:8d:36:03:de:e0:0a:36:41:
         fa:71:29:aa:34:b1:1c:05:e3:87:ee:ed:b9:af:cb:82:56:84:
         d8:5e:9f:d2:87:17:eb:e7:c8:c0:99:f6:7f:47:50:eb:1a:b9:
         e7:25:48:60:60:cc:43:58:5d:da:3e:f5:20:fe:d8:62:c3:7d:
         47:30:9c:eb:d7:a6:2b:ed:ae:6c:fb:57:f3:06:dd:c2:fc:6d:
         fa:f5:f6:63:4c:85:fa:f7:83:70:f3:7a:3d:d2:87:e4:4d:b5:
         49:a6:f9:67:4f:2a:98:cb:1b:ed:14:4c:b8:89:9c:89:9d:8e:
         c2:ed:d1:6a:53:7f:8d:e3:17:2a:64:3f:81:91:52:82:b0:27:
         22:45:f6:87:5b:e2:aa:0e:ea:55:6b:2b:67:dc:4c:ff:b7:b1:
         f3:a0:de:08:57:b2:73:e8:22:1e:b5:aa:3c:8a:1d:8a:51:46:
         db:68:07:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiiKABKe9bknh5u2YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1
OTg4MB4XDTI1MDEyMjIyMDgyNloXDTI1MDQyMjIxMDgyNlowLzEtMCsGA1UEAxMk
MmRkYTNjZTUtYzE0OC00MmJhLWJmMzEtNWQxMzQ2MWI1MDNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMe80hu83eVuq5t+/ZunY/XqfB5puGGENBco
c5hG9ilD4xxL2MG/bqHEl/4+s9KeT73KinNcNkKttw3ygmye6+9k9P8JkXQOsqaS
92Ctt1f9LS7vpBSeB4Uod5XbJx0XCBJjBeRt4Xvts6BXLyYvgKNc9//P2YnXFx61
cietpoLwc+svES1ceGDB/Yoi8yMWqCR/IXCEYN63rkJRy+6081zEwwoQaXumCTQU
Ot4wD3sr8U0yi+iGnOAUJ0gGkc2U/plLxtA4xcns8NbndyEgNnbtH+dpPdmvHysm
Rp7e/bPNspJf7OboDvRWbdNzdPkQiIuG7F17CpfOrLzbJND9QwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIY0OfMnj3aG1W/DlWJMsOjzxRv4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0
NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvNWY5OWIyYzAtYTVkOS0z
MzljLTgyNWUtOTRhNmY0NjFmMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi
MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl
NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3
ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaNqEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKVr99AfExG/Ry/AZfDPiPRRdRuqzr41fxOYNL7xm4VDJ2dFM0Ih8xCP
G11rXWKOkjbsLSkzuz/P8QERa/hx7jxY+mlDXtd0nezy3G58F4TGU76NNgPe4Ao2
QfpxKao0sRwF44fu7bmvy4JWhNhen9KHF+vnyMCZ9n9HUOsaueclSGBgzENYXdo+
9SD+2GLDfUcwnOvXpivtrmz7V/MG3cL8bfr19mNMhfr3g3Dzej3Sh+RNtUmm+WdP
KpjLG+0UTLiJnImdjsLt0WpTf43jFypkP4GRUoKwJyJF9odb4qoO6lVrK2fcTP+3
sfOg3ghXsnPoIh61qjyKHYpRRttoB/s=
-----END CERTIFICATE-----