Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/e844c0b8-a684-329d-81ac-fc6b2622d28b.roa
File:                     e844c0b8-a684-329d-81ac-fc6b2622d28b.roa (raw, json)
Hash identifier:          ofyBrDVM+Mz8QfGKLDHILwcHtIQL/GWeD1KtLYh3SaE=
Subject key identifier:   DC:D4:B9:51:D3:4B:45:85:55:34:CF:84:61:2F:77:97:12:7C:ED:F5
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285847E62B42709C61BD7455E98980
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/e844c0b8-a684-329d-81ac-fc6b2622d28b.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     32381
IP address blocks:        207.126.158.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:42:70:9c:61:bd:74:55:e9:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=4870ac18-5c1d-4c87-98e5-890e68a47839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d8:aa:dc:8c:e2:ed:29:c5:38:e5:b8:dd:c6:
                    fc:66:ff:ff:b1:1d:76:03:d6:a2:c1:e7:15:6d:f9:
                    7f:73:d3:42:64:56:1e:da:9e:0d:58:ea:c3:9e:25:
                    90:27:23:c8:6b:65:63:94:6c:e5:05:c7:22:f5:f2:
                    6d:ea:f1:b3:eb:6c:66:78:e8:29:99:19:a7:82:66:
                    c3:5e:16:c6:68:87:4f:fe:45:63:1b:43:e7:22:35:
                    c7:c5:39:f2:42:6b:9b:94:64:05:49:98:89:a4:15:
                    5b:a5:7b:5a:55:d2:99:a5:bd:a4:c6:6a:9a:ff:51:
                    09:ab:e0:a3:b4:a6:49:d8:02:13:99:94:12:cf:9d:
                    1e:b2:46:ea:b2:7e:51:64:2d:e8:3b:ca:07:fa:4d:
                    77:cd:42:45:95:b1:67:75:f1:1c:bd:8b:8d:af:61:
                    68:3c:21:5f:4e:8c:50:49:55:70:a6:07:73:45:72:
                    30:1f:60:af:6d:31:5d:60:55:14:4f:85:fa:2b:05:
                    f1:4d:05:38:19:ac:cd:97:0c:05:f2:ac:11:2f:44:
                    bf:f1:95:6c:75:78:24:e9:0d:9c:1c:46:f0:27:68:
                    b8:f5:8b:b2:a4:e5:86:d2:b2:b6:f9:7f:e5:8c:9b:
                    2d:ec:66:8d:ae:ba:b6:ee:c7:e3:3a:3e:8c:54:87:
                    3f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D4:B9:51:D3:4B:45:85:55:34:CF:84:61:2F:77:97:12:7C:ED:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/e844c0b8-a684-329d-81ac-fc6b2622d28b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:a8:34:e4:37:4f:f5:27:1c:25:0e:13:d1:51:04:29:98:52:
         93:1b:25:14:da:92:d0:9e:0d:be:d2:67:ba:59:df:14:38:a6:
         d5:3e:88:1d:58:9b:4d:1b:d8:a0:f9:40:bd:c7:b8:21:c1:c6:
         b5:64:75:09:5e:07:8f:93:a8:38:4a:47:ec:3b:a2:84:13:d5:
         f7:17:20:4b:e2:c6:4a:a6:12:d9:9a:82:45:bb:a1:44:85:8f:
         04:94:9c:18:70:b1:7d:f5:f0:fb:44:e3:52:0a:cf:d8:64:6c:
         ec:42:6e:e4:b5:4f:5c:48:24:4a:0c:df:62:b2:78:2d:75:31:
         80:51:26:10:23:9c:97:00:30:6a:f9:c1:55:87:74:50:e3:24:
         c5:c6:c2:f9:86:3a:75:73:2e:e3:1a:4b:f2:ee:7d:a3:96:58:
         c2:c9:52:0c:bf:91:10:13:ce:b8:20:29:34:79:69:6a:39:89:
         06:45:18:bb:98:68:b4:52:df:07:8c:11:af:95:27:86:2d:bb:
         65:01:88:f7:49:21:81:51:e0:cb:90:7e:3c:0c:a8:5a:95:82:
         11:11:5a:41:b6:10:f3:3c:16:7c:87:fb:12:f7:0b:40:e4:7e:
         c2:7e:34:07:31:e2:e9:c8:68:86:9d:82:76:49:5d:0e:55:aa:
         51:00:df:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmK0JwnGG9dFXpiYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm
ZjYxMB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
NDg3MGFjMTgtNWMxZC00Yzg3LTk4ZTUtODkwZTY4YTQ3ODM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktiq3Izi7SnFOOW43cb8Zv//sR12A9aiwecV
bfl/c9NCZFYe2p4NWOrDniWQJyPIa2VjlGzlBcci9fJt6vGz62xmeOgpmRmngmbD
XhbGaIdP/kVjG0PnIjXHxTnyQmublGQFSZiJpBVbpXtaVdKZpb2kxmqa/1EJq+Cj
tKZJ2AITmZQSz50eskbqsn5RZC3oO8oH+k13zUJFlbFndfEcvYuNr2FoPCFfToxQ
SVVwpgdzRXIwH2CvbTFdYFUUT4X6KwXxTQU4GazNlwwF8qwRL0S/8ZVsdXgk6Q2c
HEbwJ2i49YuypOWG0rK2+X/ljJst7GaNrrq27sfjOj6MVIc/IQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNzUuVHTS0WFVTTPhGEvd5cSfO31MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3
YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvZTg0NGMwYjgtYTY4NC0z
MjlkLTgxYWMtZmM2YjI2MjJkMjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi
NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji
ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi
MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz36eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADSoNOQ3T/UnHCUOE9FRBCmYUpMbJRTaktCeDb7SZ7pZ3xQ4ptU+iB1Y
m00b2KD5QL3HuCHBxrVkdQleB4+TqDhKR+w7ooQT1fcXIEvixkqmEtmagkW7oUSF
jwSUnBhwsX318PtE41IKz9hkbOxCbuS1T1xIJEoM32KyeC11MYBRJhAjnJcAMGr5
wVWHdFDjJMXGwvmGOnVzLuMaS/LufaOWWMLJUgy/kRATzrggKTR5aWo5iQZFGLuY
aLRS3weMEa+VJ4Ytu2UBiPdJIYFR4MuQfjwMqFqVghERWkG2EPM8FnyH+xL3C0Dk
fsJ+NAcx4unIaIadgnZJXQ5VqlEA3xE=
-----END CERTIFICATE-----