Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/440e70d1-1e8f-386b-88c2-b0aa50052a98.roa
File:                     440e70d1-1e8f-386b-88c2-b0aa50052a98.roa (raw, json)
Hash identifier:          eZm/W2kNR5R2BJMNuiB3fghs4zk5tCsmo6YedCk/jP4=
Subject key identifier:   F0:F9:72:DC:D1:A2:66:AC:17:8C:B6:0F:95:07:0C:FD:86:1A:B4:E2
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E094ED8339A9BB48C088A680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/440e70d1-1e8f-386b-88c2-b0aa50052a98.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     15169
IP address blocks:        104.196.192.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:ed:83:39:a9:bb:48:c0:88:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=e4d2a38b-a3c1-4e91-9a5e-663000d425a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:78:9f:94:1c:71:73:20:58:c1:a2:7b:b6:a3:
                    3f:4f:2f:06:6b:b1:76:d2:57:ce:ff:8d:55:ab:5b:
                    15:6d:9c:06:aa:5d:7e:6f:e9:fc:53:8c:34:4f:da:
                    bd:5d:2a:fa:8f:5a:ea:7a:b0:21:7e:7e:03:a0:af:
                    9b:88:97:64:cf:97:83:ec:9e:af:02:73:6f:8f:c3:
                    50:b9:1b:d2:45:40:67:08:c5:5d:ed:0d:53:03:0f:
                    e0:e4:c7:72:2a:ef:5b:17:f4:a5:37:fc:27:49:96:
                    67:aa:62:4c:27:40:1f:4f:96:99:e1:f1:fb:c5:f6:
                    bf:1e:82:10:1c:a3:c4:f5:98:60:e6:39:a0:c8:c7:
                    2f:fe:8d:e7:d0:ba:10:48:17:94:5c:bb:1b:68:52:
                    97:5b:fe:a5:ae:c2:82:68:ff:d7:75:21:00:08:21:
                    23:07:4c:1e:d8:62:3d:ce:7c:64:34:f4:c7:e2:b5:
                    cc:fb:53:ad:57:ae:10:fd:5c:75:84:bf:52:7d:fc:
                    69:9e:43:b1:72:32:fa:7c:d1:47:fe:8a:4f:b7:4b:
                    29:4e:e0:15:76:69:ce:54:cd:2f:09:17:84:97:c4:
                    4a:7e:d8:20:ca:2b:6b:1b:bb:9f:ef:74:27:b5:b2:
                    bf:ed:fc:0f:36:0f:da:86:e4:8d:55:bc:ea:6a:d3:
                    d0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F9:72:DC:D1:A2:66:AC:17:8C:B6:0F:95:07:0C:FD:86:1A:B4:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/440e70d1-1e8f-386b-88c2-b0aa50052a98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.196.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:40:6b:d1:07:3c:e0:b2:ab:94:fb:c0:de:ac:3e:a0:6a:95:
         99:08:6f:e5:86:a7:85:1a:d4:05:34:af:4e:e5:bb:37:c8:a0:
         bd:57:66:ae:3c:0f:85:f5:65:eb:cd:49:e5:92:7c:9e:79:e6:
         0a:88:a8:56:79:e7:e9:97:2e:9e:2b:7e:f5:11:c1:f4:a3:db:
         7b:ed:99:b7:71:ed:37:02:00:14:67:8e:b4:e6:d9:e7:a4:d7:
         9e:b2:33:6b:57:8d:99:f5:69:e8:6f:95:e4:80:75:59:5a:4a:
         cf:8e:1a:2c:4d:10:d3:9a:64:d2:94:75:0e:60:f4:89:16:9f:
         4f:e0:ec:99:78:d6:24:a9:7f:ae:12:13:56:d6:de:84:f3:43:
         cf:03:e1:f2:f4:07:9d:e5:ef:20:00:b5:ce:ee:a8:ad:08:25:
         1b:87:fe:6b:c0:35:7c:d9:23:ae:c9:4e:65:03:41:95:f9:57:
         aa:39:3f:a6:66:1a:6e:15:fe:b3:c7:98:cd:92:62:bc:4f:50:
         65:55:0b:58:c4:7b:59:07:d7:2f:39:6f:9a:61:6e:f6:6b:7b:
         09:f1:d6:1e:3b:74:ca:80:26:45:63:0b:42:d1:80:16:62:5f:
         b4:86:bd:fd:8d:2c:da:de:19:1e:f9:2f:bb:1b:82:27:fa:b6:
         26:5b:e3:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglO2DOam7SMCIpoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk
ZTRkMmEzOGItYTNjMS00ZTkxLTlhNWUtNjYzMDAwZDQyNWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HiflBxxcyBYwaJ7tqM/Ty8Ga7F20lfO/41V
q1sVbZwGql1+b+n8U4w0T9q9XSr6j1rqerAhfn4DoK+biJdkz5eD7J6vAnNvj8NQ
uRvSRUBnCMVd7Q1TAw/g5MdyKu9bF/SlN/wnSZZnqmJMJ0AfT5aZ4fH7xfa/HoIQ
HKPE9Zhg5jmgyMcv/o3n0LoQSBeUXLsbaFKXW/6lrsKCaP/XdSEACCEjB0we2GI9
znxkNPTH4rXM+1OtV64Q/Vx1hL9SffxpnkOxcjL6fNFH/opPt0spTuAVdmnOVM0v
CReEl8RKftggyitrG7uf73QntbK/7fwPNg/ahuSNVbzqatPQEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPD5ctzRomasF4y2D5UHDP2GGrTiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDQwZTcwZDEtMWU4Zi0z
ODZiLTg4YzItYjBhYTUwMDUyYTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMTAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABRAa9EHPOCyq5T7wN6sPqBqlZkIb+WGp4Ua1AU0r07luzfIoL1XZq48
D4X1ZevNSeWSfJ555gqIqFZ55+mXLp4rfvURwfSj23vtmbdx7TcCABRnjrTm2eek
156yM2tXjZn1aehvleSAdVlaSs+OGixNENOaZNKUdQ5g9IkWn0/g7Jl41iSpf64S
E1bW3oTzQ88D4fL0B53l7yAAtc7uqK0IJRuH/mvANXzZI67JTmUDQZX5V6o5P6Zm
Gm4V/rPHmM2SYrxPUGVVC1jEe1kH1y85b5phbvZrewnx1h47dMqAJkVjC0LRgBZi
X7SGvf2NLNreGR75L7sbgif6tiZb4zU=
-----END CERTIFICATE-----