Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/37ad82d5-143a-3bdc-ad14-f446d445e7c2.roa
File:                     37ad82d5-143a-3bdc-ad14-f446d445e7c2.roa (raw, json)
Hash identifier:          dIjgbt5v9M80usDW4Xc3S6CIbMSidEHeqAkZWLKXpjs=
Subject key identifier:   1C:79:07:F0:8B:2D:56:99:24:76:66:66:C1:AF:38:AE:44:E9:35:42
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285847EE8A3CAA398F67850334BB80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/37ad82d5-143a-3bdc-ad14-f446d445e7c2.roa
Signing time:             Tue 19 Nov 2024 14:00:39 +0000
ROA not before:           Tue 19 Nov 2024 14:00:39 +0000
ROA not after:            Mon 17 Feb 2025 14:00:39 +0000
asID:                     32381
IP address blocks:        208.117.254.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:8a:3c:aa:39:8f:67:85:03:34:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Nov 19 14:00:39 2024 GMT
            Not After : Feb 17 14:00:39 2025 GMT
        Subject: CN=c8bc995f-5e53-43cf-a494-4a21678e7df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2a:e4:d5:64:4b:40:3f:22:ac:49:6e:ec:75:
                    33:37:b2:dc:fb:36:24:05:48:bc:6d:f4:4c:eb:38:
                    c6:93:12:01:14:f7:f5:60:09:48:10:f2:3d:cf:53:
                    f1:ec:70:e0:e2:77:68:c7:4e:2d:f5:85:1b:90:a2:
                    6e:6e:8b:82:07:fb:18:47:8c:03:9a:c3:fc:e9:41:
                    2e:b3:10:ae:03:cb:d2:10:37:47:39:64:9a:9b:39:
                    55:6a:66:84:fe:15:d0:d9:d8:81:e4:49:6c:ea:b7:
                    b1:f0:74:a0:c4:97:6a:b7:c4:e1:08:d4:97:ab:27:
                    5a:c7:d2:6e:1c:b1:fe:92:e6:a2:fc:05:25:41:07:
                    0f:02:a5:fb:d3:d5:07:82:40:61:2e:a2:4f:3e:72:
                    f1:61:34:49:f9:3a:8f:c7:5b:d5:9c:ba:9a:0d:a3:
                    41:db:96:49:90:24:c1:7c:e9:90:b7:c3:2d:7f:a5:
                    fe:11:45:d4:dd:40:cc:12:31:53:53:86:16:03:91:
                    03:c9:54:bb:37:9c:d6:c1:a7:39:fa:74:56:3a:78:
                    cd:dd:17:4c:e6:f9:0a:7b:30:5f:fe:bd:d1:2b:c8:
                    e2:52:2b:06:76:dc:1d:75:9f:77:f1:d4:76:03:12:
                    58:08:f2:19:ad:3a:f5:8f:c4:a5:dd:27:25:51:3d:
                    d4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:79:07:F0:8B:2D:56:99:24:76:66:66:C1:AF:38:AE:44:E9:35:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/37ad82d5-143a-3bdc-ad14-f446d445e7c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:a9:f1:d1:b5:0c:39:60:97:87:99:65:81:eb:07:2d:05:fd:
         d3:9a:b7:8e:5c:a3:f2:57:24:ae:43:f5:3f:ef:0c:89:d4:58:
         22:6f:0c:c1:e4:06:d1:7f:e5:26:68:da:a6:e2:b5:21:28:83:
         48:11:96:37:ba:00:07:06:38:50:c3:f3:bd:37:bb:58:3d:e4:
         bf:69:43:fb:d1:f7:68:1f:03:f8:f1:a8:04:a6:4a:87:2c:78:
         ca:bf:08:87:c2:88:b4:09:88:ca:6f:6e:77:5d:97:97:f9:e7:
         d0:cc:d0:43:68:86:77:ec:c6:cb:72:f8:d4:59:55:5a:bb:7e:
         0f:db:f6:7f:5e:a9:67:be:0f:34:ca:8d:36:e8:75:dc:67:f2:
         16:80:e0:f5:2f:29:b5:64:5b:54:f6:f7:35:73:a9:4f:da:05:
         9c:e4:02:6c:a9:81:94:b4:9f:00:23:38:96:73:ea:61:bd:49:
         21:6a:86:b3:89:98:64:ba:2b:f8:d1:f3:c8:5b:a1:0a:85:d1:
         2e:c0:5a:a0:6e:af:00:96:b8:10:05:91:fd:82:8a:bd:29:a7:
         1d:06:c6:87:b5:0d:94:a3:22:48:c1:9c:26:95:cf:27:8e:10:
         51:10:e8:65:74:62:a6:ab:3c:bb:e9:d4:74:a7:e2:fc:79:1d:
         25:16:b3:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfuijyqOY9nhQM0u4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTI0MTExOTE0MDAzOVoXDTI1MDIxNzE0MDAzOVowLzEtMCsGA1UEAxMk
YzhiYzk5NWYtNWU1My00M2NmLWE0OTQtNGEyMTY3OGU3ZGY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkirk1WRLQD8irElu7HUzN7Lc+zYkBUi8bfRM
6zjGkxIBFPf1YAlIEPI9z1Px7HDg4ndox04t9YUbkKJubouCB/sYR4wDmsP86UEu
sxCuA8vSEDdHOWSamzlVamaE/hXQ2diB5Els6rex8HSgxJdqt8ThCNSXqydax9Ju
HLH+kuai/AUlQQcPAqX709UHgkBhLqJPPnLxYTRJ+TqPx1vVnLqaDaNB25ZJkCTB
fOmQt8Mtf6X+EUXU3UDMEjFTU4YWA5EDyVS7N5zWwac5+nRWOnjN3RdM5vkKezBf
/r3RK8jiUisGdtwddZ938dR2AxJYCPIZrTr1j8Sl3SclUT3UNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBx5B/CLLVaZJHZmZsGvOK5E6TVCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvMzdhZDgyZDUtMTQzYS0z
YmRjLWFkMTQtZjQ0NmQ0NDVlN2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HX+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGup8dG1DDlgl4eZZYHrBy0F/dOat45co/JXJK5D9T/vDInUWCJvDMHk
BtF/5SZo2qbitSEog0gRlje6AAcGOFDD8703u1g95L9pQ/vR92gfA/jxqASmSocs
eMq/CIfCiLQJiMpvbnddl5f559DM0ENohnfsxsty+NRZVVq7fg/b9n9eqWe+DzTK
jTboddxn8haA4PUvKbVkW1T29zVzqU/aBZzkAmypgZS0nwAjOJZz6mG9SSFqhrOJ
mGS6K/jR88hboQqF0S7AWqBurwCWuBAFkf2Cir0ppx0Gxoe1DZSjIkjBnCaVzyeO
EFEQ6GV0YqarPLvp1HSn4vx5HSUWs/8=
-----END CERTIFICATE-----