Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/6d57df06-9ab3-3524-814f-3dcd86e2506b.roa
File:                     6d57df06-9ab3-3524-814f-3dcd86e2506b.roa (raw, json)
Hash identifier:          DYeSfQSc6VNk5VLtpOJmFxVqhlnO0FUVqZBtK7rBwZA=
Subject key identifier:   E9:4B:11:2F:8E:AC:A7:EA:C4:EE:CE:66:F4:71:AE:1F:C2:F6:E8:8F
Certificate issuer:       /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial:       010D0C9F432858480245FA744A0CE275BE6352C0
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/6d57df06-9ab3-3524-814f-3dcd86e2506b.roa
Signing time:             Tue 26 Nov 2024 15:39:30 +0000
ROA not before:           Tue 26 Nov 2024 15:39:30 +0000
ROA not after:            Mon 24 Feb 2025 15:39:30 +0000
asID:                     293
IP address blocks:        192.188.29.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:45:fa:74:4a:0c:e2:75:be:63:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
        Validity
            Not Before: Nov 26 15:39:30 2024 GMT
            Not After : Feb 24 15:39:30 2025 GMT
        Subject: CN=c06bfda7-7626-4479-8edc-31fa71dde9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:83:88:d6:f8:2f:c3:5f:8d:e5:18:c5:18:ad:
                    06:d0:e3:8a:01:ea:e5:ad:6a:db:99:b7:97:03:5a:
                    46:b4:5d:0c:11:8f:ce:90:65:80:b8:06:0b:ac:fc:
                    fc:bf:70:f2:30:0c:31:c4:b4:e9:b7:96:a7:81:80:
                    86:ed:3b:81:a9:79:dc:33:74:2f:9d:8a:db:46:c3:
                    bb:04:46:24:19:6c:cd:c8:5e:30:7d:e3:75:f8:f7:
                    fb:e5:72:23:37:f9:ac:c7:8b:95:a6:0d:c1:8f:1a:
                    56:ae:a1:d8:10:1d:38:c6:5f:39:7d:aa:04:7c:a8:
                    93:f7:72:1d:f2:0f:85:b5:37:c1:15:02:d5:eb:49:
                    8a:f2:11:a7:92:d4:ad:41:e5:e8:5d:8b:8e:28:c1:
                    81:e9:ff:ba:aa:72:67:f4:8e:4c:5a:f3:b1:ec:ad:
                    b4:42:32:11:46:e6:77:b6:eb:f8:3c:ed:b3:11:92:
                    a6:4e:ba:19:81:25:a7:7a:e5:d9:b5:08:9d:82:57:
                    67:6a:d5:48:f1:2e:10:df:a3:4b:92:ba:9d:5a:a2:
                    9f:83:33:d7:11:2a:86:14:1f:cb:08:6f:7e:99:50:
                    c1:10:60:fe:e9:51:d8:f0:db:9d:32:02:56:9b:1e:
                    e5:46:ca:70:2d:84:d2:ca:4c:a6:12:62:cb:70:41:
                    d7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4B:11:2F:8E:AC:A7:EA:C4:EE:CE:66:F4:71:AE:1F:C2:F6:E8:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/6d57df06-9ab3-3524-814f-3dcd86e2506b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl

            X509v3 Authority Key Identifier:
                keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b5:f1:b2:05:6c:37:f6:2b:84:92:63:ff:a8:ea:63:35:fe:
         38:ac:d2:05:af:23:10:c2:ba:2d:a2:52:b9:38:09:b8:6d:ab:
         2f:c7:a1:3b:22:0e:28:9f:38:c4:54:68:74:41:7c:bf:cb:25:
         0b:25:21:7a:61:c8:56:2f:c2:c7:53:38:6f:14:2f:0c:e7:cf:
         9d:03:d6:dd:e8:39:b1:fe:13:3f:d4:0a:01:57:d5:ab:4c:61:
         1e:6c:c6:66:62:92:80:a1:47:88:9c:af:d4:00:94:d8:51:af:
         31:08:45:ab:71:fe:d6:f2:df:c3:96:77:65:4a:f7:a8:cf:21:
         99:72:26:10:47:24:29:d5:cd:2a:d0:e0:18:37:4c:79:30:67:
         7f:80:8d:e7:4f:75:47:c5:b0:67:d4:46:6a:d5:ab:b5:65:d3:
         6d:30:14:87:57:dc:3e:91:4f:19:26:71:aa:7d:d1:60:13:7a:
         5d:c4:6d:5d:c8:e0:10:31:ac:ac:8f:08:d8:f0:6d:a7:6a:03:
         8c:76:3a:66:00:6e:70:e5:77:d5:bf:85:84:28:13:7d:15:01:
         b1:57:d5:c9:d0:36:9c:d7:dd:d6:b7:c2:0b:e3:8a:08:29:8f:
         e5:af:34:c3:8f:18:e9:fa:c5:7c:3a:8a:03:11:f7:3b:e9:77:
         12:84:83:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgCRfp0Sgzidb5jUsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz
ZmM1MB4XDTI0MTEyNjE1MzkzMFoXDTI1MDIyNDE1MzkzMFowLzEtMCsGA1UEAxMk
YzA2YmZkYTctNzYyNi00NDc5LThlZGMtMzFmYTcxZGRlOWU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYOI1vgvw1+N5RjFGK0G0OOKAerlrWrbmbeX
A1pGtF0MEY/OkGWAuAYLrPz8v3DyMAwxxLTpt5angYCG7TuBqXncM3QvnYrbRsO7
BEYkGWzNyF4wfeN1+Pf75XIjN/msx4uVpg3BjxpWrqHYEB04xl85faoEfKiT93Id
8g+FtTfBFQLV60mK8hGnktStQeXoXYuOKMGB6f+6qnJn9I5MWvOx7K20QjIRRuZ3
tuv4PO2zEZKmTroZgSWneuXZtQidgldnatVI8S4Q36NLkrqdWqKfgzPXESqGFB/L
CG9+mVDBEGD+6VHY8NudMgJWmx7lRspwLYTSykymEmLLcEHXuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOlLES+OrKfqxO7OZvRxrh/C9uiPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2
ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvNmQ1N2RmMDYtOWFiMy0z
NTI0LTgxNGYtM2RjZDg2ZTI1MDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl
MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw
M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2
MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLwdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEC18bIFbDf2K4SSY/+o6mM1/jis0gWvIxDCui2iUrk4Cbhtqy/HoTsi
DiifOMRUaHRBfL/LJQslIXphyFYvwsdTOG8ULwznz50D1t3oObH+Ez/UCgFX1atM
YR5sxmZikoChR4icr9QAlNhRrzEIRatx/tby38OWd2VK96jPIZlyJhBHJCnVzSrQ
4Bg3THkwZ3+AjedPdUfFsGfURmrVq7Vl020wFIdX3D6RTxkmcap90WATel3EbV3I
4BAxrKyPCNjwbadqA4x2OmYAbnDld9W/hYQoE30VAbFX1cnQNpzX3da3wgvjiggp
j+WvNMOPGOn6xXw6igMR9zvpdxKEgzo=
-----END CERTIFICATE-----