Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/68c3e179-83ba-37b3-a535-05d541d0cf2b.roa
File:                     68c3e179-83ba-37b3-a535-05d541d0cf2b.roa (raw, json)
Hash identifier:          vvOeywD76oCm1bUhjcIVE3KSVMg5vLQ61flQ1PWa+yk=
Subject key identifier:   29:EE:B0:B4:36:EB:A0:63:76:D6:8D:20:D2:18:19:AC:3A:4B:CB:FD
Certificate issuer:       /CN=a5013bd8-fc34-4ad4-8dc8-516bdd8bc765
Certificate serial:       010D0C9F4328584800AF7F3A804E83C198A27D00
Authority key identifier: 3C:D1:9E:69:77:A5:96:FF:7A:1C:C6:7B:50:98:68:49:55:CF:4B:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/68c3e179-83ba-37b3-a535-05d541d0cf2b.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     33739
IP address blocks:        204.16.33.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:7f:3a:80:4e:83:c1:98:a2:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5013bd8-fc34-4ad4-8dc8-516bdd8bc765
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=e9ab8346-84cc-475e-8229-8bba13a8398e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:8f:2b:b2:5f:24:62:0a:04:66:c1:30:e8:8b:
                    2b:e4:3c:6f:74:fe:9e:c3:15:97:27:a0:a6:61:f8:
                    9d:7d:0c:5f:0f:bb:b2:25:7e:65:6a:87:8f:b4:35:
                    74:ca:53:61:50:8c:0f:0e:13:e7:a2:cb:e3:3c:c1:
                    0e:d2:2b:1e:12:ef:e4:a2:e0:53:3c:04:8d:9e:d5:
                    1b:30:68:72:f1:05:b8:4f:1a:3d:3a:bf:1d:ec:36:
                    e5:03:bc:b4:c4:89:67:01:a6:25:53:5a:44:a4:59:
                    60:40:8f:ec:d6:d4:2c:a2:fa:10:f8:de:6a:6c:32:
                    89:4b:57:22:7f:30:04:84:b1:5e:ce:f2:da:d2:f3:
                    01:0a:a9:35:5d:13:10:89:80:94:55:61:d2:28:11:
                    a1:5a:db:94:15:85:a4:4b:e4:df:6d:72:30:d2:50:
                    f4:9d:6b:2e:52:6e:f3:36:d6:36:b1:5d:e2:cb:ce:
                    41:06:da:bb:82:eb:12:c5:6c:2b:9e:fe:57:87:03:
                    2a:2b:42:2e:a8:1e:e1:89:60:94:b7:31:4c:1d:46:
                    a4:6d:8c:6b:a7:91:6c:ea:22:80:8d:65:63:a5:c8:
                    e0:d2:bb:a9:35:e1:91:45:97:84:bf:6c:b7:73:a3:
                    31:a6:9a:fb:55:05:09:7d:93:21:62:da:f7:fe:4b:
                    2d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EE:B0:B4:36:EB:A0:63:76:D6:8D:20:D2:18:19:AC:3A:4B:CB:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/68c3e179-83ba-37b3-a535-05d541d0cf2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D1:9E:69:77:A5:96:FF:7A:1C:C6:7B:50:98:68:49:55:CF:4B:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.16.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:21:7e:c1:62:55:78:0a:ed:eb:11:ec:fa:5e:91:4f:e8:36:
         7a:d8:9e:d7:e2:8a:eb:73:a2:26:56:44:9c:a8:16:ec:99:97:
         a7:11:d0:42:49:0a:66:7f:b8:06:a2:66:97:cb:74:fd:cb:68:
         9c:d3:82:f9:8f:a8:b8:50:45:15:71:67:bc:03:ba:0e:28:ac:
         43:72:cb:ba:a3:92:5d:17:3c:27:9a:38:d0:a4:44:72:e2:fc:
         cb:ee:c4:d0:42:07:5e:4e:c8:6e:38:5b:9f:b3:88:e4:81:91:
         fc:b2:af:05:0f:fd:9b:4e:69:22:a4:38:27:9e:45:8f:a3:81:
         a0:88:05:2c:11:a2:45:7f:5a:81:34:17:b1:24:42:4b:e9:34:
         49:59:ff:37:a4:88:db:82:56:4a:24:a4:6b:90:22:be:68:0d:
         54:0d:27:10:fe:dd:56:2f:0e:7c:ca:91:7c:13:f9:f5:b0:60:
         17:15:9b:e6:f5:61:07:52:59:aa:a4:65:ee:14:8f:69:e0:31:
         f7:4e:7e:65:15:ae:31:e7:10:70:27:14:16:b6:b7:3f:5a:0d:
         80:79:a1:ec:c5:12:42:5c:74:d3:0c:9f:08:ef:02:09:4e:f7:
         d6:f6:24:27:a5:bd:4c:28:a0:35:c8:99:b2:ec:c5:6c:11:32:
         ce:7a:45:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgAr386gE6DwZiifQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUwMTNiZDgtZmMzNC00YWQ0LThkYzgtNTE2YmRkOGJj
NzY1MB4XDTI0MTEyNjAyMDAyNloXDTI1MDIyNDAyMDAyNlowLzEtMCsGA1UEAxMk
ZTlhYjgzNDYtODRjYy00NzVlLTgyMjktOGJiYTEzYTgzOThlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+48rsl8kYgoEZsEw6Isr5DxvdP6ewxWXJ6Cm
YfidfQxfD7uyJX5laoePtDV0ylNhUIwPDhPnosvjPMEO0iseEu/kouBTPASNntUb
MGhy8QW4Txo9Or8d7DblA7y0xIlnAaYlU1pEpFlgQI/s1tQsovoQ+N5qbDKJS1ci
fzAEhLFezvLa0vMBCqk1XRMQiYCUVWHSKBGhWtuUFYWkS+TfbXIw0lD0nWsuUm7z
NtY2sV3iy85BBtq7gusSxWwrnv5XhwMqK0IuqB7hiWCUtzFMHUakbYxrp5Fs6iKA
jWVjpcjg0rupNeGRRZeEv2y3c6Mxppr7VQUJfZMhYtr3/kst5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCnusLQ266BjdtaNINIYGaw6S8v9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTAx
M2JkOC1mYzM0LTRhZDQtOGRjOC01MTZiZGQ4YmM3NjUvNjhjM2UxNzktODNiYS0z
N2IzLWE1MzUtMDVkNTQxZDBjZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTUwMTNiZDgtZmMzNC00YWQ0LThk
YzgtNTE2YmRkOGJjNzY1L2E1MDEzYmQ4LWZjMzQtNGFkNC04ZGM4LTUxNmJkZDhi
Yzc2NS5jcmwwHwYDVR0jBBgwFoAUPNGeaXellv96HMZ7UJhoSVXPS6kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTAxM2JkOC1mYzM0LTRhZDQtOGRjOC01MTZi
ZGQ4YmM3NjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBAhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABohfsFiVXgK7esR7PpekU/oNnrYntfiiutzoiZWRJyoFuyZl6cR0EJJ
CmZ/uAaiZpfLdP3LaJzTgvmPqLhQRRVxZ7wDug4orENyy7qjkl0XPCeaONCkRHLi
/MvuxNBCB15OyG44W5+ziOSBkfyyrwUP/ZtOaSKkOCeeRY+jgaCIBSwRokV/WoE0
F7EkQkvpNElZ/zekiNuCVkokpGuQIr5oDVQNJxD+3VYvDnzKkXwT+fWwYBcVm+b1
YQdSWaqkZe4Uj2ngMfdOfmUVrjHnEHAnFBa2tz9aDYB5oezFEkJcdNMMnwjvAglO
99b2JCelvUwooDXImbLsxWwRMs56RZE=
-----END CERTIFICATE-----