Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/aa5258a5-65f3-38a9-aa81-1659d247f3de.roa
File:                     aa5258a5-65f3-38a9-aa81-1659d247f3de.roa (raw, json)
Hash identifier:          8ArJsehx8VKBgHBiTEDjSwfGCVAKxdq65B/hB8crihQ=
Subject key identifier:   1C:33:A7:9E:90:F0:31:5D:C7:38:95:F1:F4:2A:9F:F6:FF:E2:42:B8
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584832F03CEB2D6343030BE65FC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/aa5258a5-65f3-38a9-aa81-1659d247f3de.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     203
IP address blocks:        130.174.46.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:3c:eb:2d:63:43:03:0b:e6:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=e2008402-01ee-4c01-82b6-d4a23e3a0f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:87:99:8b:8f:59:b5:e5:6e:bc:86:ec:4f:e2:
                    6c:0f:6f:83:34:84:36:03:df:9c:b0:c6:96:ae:81:
                    e3:fa:3c:b1:1c:05:c0:ae:92:5c:ab:fd:b9:f9:3a:
                    03:62:02:67:1b:0c:87:ae:7a:44:d3:a3:9a:d0:00:
                    0b:a7:fe:67:a3:3a:c5:96:15:a1:09:2b:5d:31:f1:
                    df:3c:e3:35:8a:5e:93:df:16:dd:c8:a9:e4:4c:60:
                    59:98:80:6e:b4:41:db:2e:2b:10:fc:7c:fb:b0:6e:
                    49:8d:ad:31:69:39:4b:fb:67:ed:a6:f1:31:eb:96:
                    c6:fd:06:11:1f:d6:e9:a5:8e:98:00:d0:31:6b:25:
                    6d:88:a0:e6:2d:bf:f6:56:ec:cd:82:09:9f:9e:ba:
                    e3:c0:0e:59:36:98:ce:b6:63:bf:a3:c9:12:22:d3:
                    97:81:0d:a1:cc:7c:11:38:1d:42:bb:09:7f:e2:f4:
                    32:3a:dc:90:76:2b:0f:89:4c:68:26:7e:31:9d:73:
                    76:74:67:ba:28:4e:63:fc:44:55:59:3a:a4:68:cd:
                    86:30:c3:56:12:84:3f:47:b8:2d:7e:c9:7e:5b:ce:
                    34:b3:56:e6:3a:dc:48:36:aa:00:6a:f9:bf:cd:86:
                    48:6c:95:35:f0:ed:fd:d2:71:81:c2:9b:7d:55:ba:
                    c0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:33:A7:9E:90:F0:31:5D:C7:38:95:F1:F4:2A:9F:F6:FF:E2:42:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/aa5258a5-65f3-38a9-aa81-1659d247f3de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:d0:78:0a:51:25:bd:db:00:62:2a:7e:60:ed:56:80:af:54:
         89:b8:f6:eb:5a:54:fc:e6:4d:9b:b6:48:d1:50:04:61:6e:ef:
         d2:b3:10:c9:17:d2:8a:8e:81:ed:10:f1:24:fe:c1:51:ed:3d:
         b4:e3:fb:db:cb:f8:0a:1f:78:1a:45:e1:a2:31:a4:3a:cb:dd:
         78:14:95:ee:cd:8f:43:66:38:7c:d7:e2:d4:82:78:be:ce:38:
         ed:06:9c:17:73:17:fb:b9:6d:ff:c8:7b:7d:db:18:3c:98:08:
         8d:98:f0:77:37:e9:05:18:ea:70:a7:50:f2:1a:21:bc:af:18:
         28:56:b1:a5:60:45:89:9f:78:80:6e:ce:25:04:27:37:de:2b:
         3a:86:9d:e7:c1:ef:25:e0:39:c6:cc:51:38:dd:86:f5:b7:c3:
         e7:73:52:c0:d7:a4:9b:2f:97:b4:58:3d:aa:36:58:44:f5:90:
         d3:fb:b8:4e:ef:c4:2b:8e:a9:33:84:e6:4b:a3:4d:ad:28:4f:
         ee:c5:53:63:1a:50:83:2a:cc:35:90:a2:bb:2e:06:27:41:f6:
         35:d4:e4:42:2d:87:82:ea:8f:5f:ad:3f:c5:47:12:64:d4:75:
         78:24:4f:9e:55:70:34:b2:56:5c:fe:08:17:89:b9:de:91:19:
         cf:c0:35:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8DzrLWNDAwvmX8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZTIwMDg0MDItMDFlZS00YzAxLTgyYjYtZDRhMjNlM2EwZjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIeZi49ZteVuvIbsT+JsD2+DNIQ2A9+csMaW
roHj+jyxHAXArpJcq/25+ToDYgJnGwyHrnpE06Oa0AALp/5nozrFlhWhCStdMfHf
POM1il6T3xbdyKnkTGBZmIButEHbLisQ/Hz7sG5Jja0xaTlL+2ftpvEx65bG/QYR
H9bppY6YANAxayVtiKDmLb/2VuzNggmfnrrjwA5ZNpjOtmO/o8kSItOXgQ2hzHwR
OB1Cuwl/4vQyOtyQdisPiUxoJn4xnXN2dGe6KE5j/ERVWTqkaM2GMMNWEoQ/R7gt
fsl+W840s1bmOtxINqoAavm/zYZIbJU18O390nGBwpt9VbrAZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBwzp56Q8DFdxziV8fQqn/b/4kK4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYWE1MjU4YTUtNjVmMy0z
OGE5LWFhODEtMTY1OWQyNDdmM2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACHQeApRJb3bAGIqfmDtVoCvVIm49utaVPzmTZu2SNFQBGFu79KzEMkX
0oqOge0Q8ST+wVHtPbTj+9vL+AofeBpF4aIxpDrL3XgUle7Nj0NmOHzX4tSCeL7O
OO0GnBdzF/u5bf/Ie33bGDyYCI2Y8Hc36QUY6nCnUPIaIbyvGChWsaVgRYmfeIBu
ziUEJzfeKzqGnefB7yXgOcbMUTjdhvW3w+dzUsDXpJsvl7RYPao2WET1kNP7uE7v
xCuOqTOE5kujTa0oT+7FU2MaUIMqzDWQorsuBidB9jXU5EIth4Lqj1+tP8VHEmTU
dXgkT55VcDSyVlz+CBeJud6RGc/ANT4=
-----END CERTIFICATE-----