Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/419c80ac-fcfe-3fde-ad10-b708ba2e2d49.roa
File:                     419c80ac-fcfe-3fde-ad10-b708ba2e2d49.roa (raw, json)
Hash identifier:          CIAC9SszvMGswVXPnEF5Af0yUrX0tOKNr1UZXQJbZGk=
Subject key identifier:   93:6F:72:06:CB:D7:07:3A:88:1F:95:46:0A:E7:45:72:36:51:9B:0A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847F6910FC6CDB12BBA07B6BC80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/419c80ac-fcfe-3fde-ad10-b708ba2e2d49.roa
Signing time:             Fri 22 Nov 2024 11:01:05 +0000
ROA not before:           Fri 22 Nov 2024 11:01:05 +0000
ROA not after:            Thu 20 Feb 2025 11:01:05 +0000
asID:                     204957
IP address blocks:        172.120.12.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f6:91:0f:c6:cd:b1:2b:ba:07:b6:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 22 11:01:05 2024 GMT
            Not After : Feb 20 11:01:05 2025 GMT
        Subject: CN=87099442-277f-437a-8209-39f7192aaed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:74:6a:5e:d9:be:65:78:ec:df:d1:ec:c4:ac:
                    67:31:e4:5b:2c:94:9f:7d:5d:ca:9b:77:ed:5f:fd:
                    f2:ea:c6:0b:e2:1c:61:44:7a:1d:25:67:15:19:59:
                    8f:80:62:13:25:36:d2:08:9d:27:d3:8b:91:8e:c8:
                    c5:9d:50:02:01:ec:03:b2:25:c6:d6:e3:01:12:c0:
                    de:f8:ef:23:f7:03:3e:9a:7e:a6:be:e1:0c:1a:b2:
                    8a:03:87:35:eb:58:8e:60:d3:c7:32:52:35:9b:95:
                    1a:87:2e:f3:f3:a7:bd:45:85:cc:32:d9:3c:da:26:
                    b3:59:e0:6c:14:8e:d9:32:91:2b:79:57:e9:da:8a:
                    e1:9e:0b:ba:e4:26:e5:94:03:86:45:51:d7:cf:ab:
                    55:b6:fb:19:30:c3:a7:3e:e7:d7:4f:0d:5e:14:57:
                    ca:79:a8:28:d9:b7:12:33:a7:18:e7:c5:32:f2:f1:
                    87:c3:f4:52:08:b1:17:63:1e:19:13:5c:2d:3a:6f:
                    90:5b:bf:39:95:4c:2a:70:00:24:5f:bf:2c:f6:49:
                    2a:0b:ec:f3:95:57:39:4d:a2:bc:5d:f0:c0:e1:11:
                    8f:fc:61:61:21:a7:78:42:83:62:3d:1e:fb:09:01:
                    af:94:12:1d:85:d4:55:bb:c5:38:63:5b:c6:e8:b2:
                    ec:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6F:72:06:CB:D7:07:3A:88:1F:95:46:0A:E7:45:72:36:51:9B:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/419c80ac-fcfe-3fde-ad10-b708ba2e2d49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:96:d0:42:05:d6:b6:f9:0b:ba:a5:ed:19:07:21:51:f1:1b:
         ac:01:5b:8e:9d:e3:6d:eb:f3:76:2d:48:32:29:d2:b1:be:d5:
         8e:2a:83:84:56:6a:fe:f4:99:b3:a5:3b:8f:fb:54:36:a5:83:
         32:51:41:6f:4b:cd:37:86:fb:56:b3:7f:2d:18:aa:0c:b4:c7:
         7b:aa:01:5b:16:0b:c6:13:8b:91:68:20:f2:aa:73:25:d9:a6:
         fa:0b:cb:53:d6:6b:e5:18:a8:2f:68:31:d3:9d:e4:d7:c8:ca:
         53:e3:89:c9:ef:da:f6:de:ab:c3:c0:6e:bf:f8:17:a0:0a:9f:
         af:1b:b7:05:64:5a:7f:23:1b:df:5b:e7:64:ef:47:18:8d:1d:
         fd:17:a4:7f:f9:e2:4c:9a:33:6d:d1:2e:c9:28:16:fd:bf:d9:
         0b:a2:90:29:cc:ec:d0:c4:2c:b3:51:cb:3f:31:c6:b9:4d:9b:
         7b:7b:fd:05:00:52:15:54:bb:33:ef:ca:0b:c0:9b:3f:15:e8:
         77:80:2a:4e:13:d9:6c:53:54:88:43:b0:57:53:91:68:1f:fd:
         c2:a7:77:04:6a:a9:f4:2e:ad:42:84:e3:3f:11:90:c3:9e:c2:
         9b:f4:6d:77:31:b5:f1:c5:5c:96:7a:e9:5c:b5:b5:ad:09:08:
         83:08:3d:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf2kQ/GzbEruge2vIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MTEyMjExMDEwNVoXDTI1MDIyMDExMDEwNVowLzEtMCsGA1UEAxMk
ODcwOTk0NDItMjc3Zi00MzdhLTgyMDktMzlmNzE5MmFhZWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3RqXtm+ZXjs39HsxKxnMeRbLJSffV3Km3ft
X/3y6sYL4hxhRHodJWcVGVmPgGITJTbSCJ0n04uRjsjFnVACAewDsiXG1uMBEsDe
+O8j9wM+mn6mvuEMGrKKA4c161iOYNPHMlI1m5Uahy7z86e9RYXMMtk82iazWeBs
FI7ZMpEreVfp2orhngu65CbllAOGRVHXz6tVtvsZMMOnPufXTw1eFFfKeago2bcS
M6cY58Uy8vGHw/RSCLEXYx4ZE1wtOm+QW785lUwqcAAkX78s9kkqC+zzlVc5TaK8
XfDA4RGP/GFhIad4QoNiPR77CQGvlBIdhdRVu8U4Y1vG6LLsQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJNvcgbL1wc6iB+VRgrnRXI2UZsKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDE5YzgwYWMtZmNmZS0z
ZmRlLWFkMTAtYjcwOGJhMmUyZDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABWW0EIF1rb5C7ql7RkHIVHxG6wBW46d423r83YtSDIp0rG+1Y4qg4RW
av70mbOlO4/7VDalgzJRQW9LzTeG+1azfy0Yqgy0x3uqAVsWC8YTi5FoIPKqcyXZ
pvoLy1PWa+UYqC9oMdOd5NfIylPjicnv2vbeq8PAbr/4F6AKn68btwVkWn8jG99b
52TvRxiNHf0XpH/54kyaM23RLskoFv2/2QuikCnM7NDELLNRyz8xxrlNm3t7/QUA
UhVUuzPvygvAmz8V6HeAKk4T2WxTVIhDsFdTkWgf/cKndwRqqfQurUKE4z8RkMOe
wpv0bXcxtfHFXJZ66Vy1ta0JCIMIPTM=
-----END CERTIFICATE-----