Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b20f7984-21e2-3119-9b52-ae1970a76a6d.roa
File:                     b20f7984-21e2-3119-9b52-ae1970a76a6d.roa (raw, json)
Hash identifier:          9mhxCSfwlqGDso31HN6JXlxr51lcEp33e5uVQ60zQVU=
Subject key identifier:   6C:17:E3:41:D0:44:9B:20:1C:74:15:F1:40:E0:44:07:7E:C3:06:F7
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584890D925B6D985D41894CF6540
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b20f7984-21e2-3119-9b52-ae1970a76a6d.roa
Signing time:             Thu 16 Jan 2025 17:20:49 +0000
ROA not before:           Thu 16 Jan 2025 17:20:49 +0000
ROA not after:            Wed 16 Apr 2025 16:20:49 +0000
asID:                     4766
IP address blocks:        75.127.73.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:d9:25:b6:d9:85:d4:18:94:cf:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Jan 16 17:20:49 2025 GMT
            Not After : Apr 16 16:20:49 2025 GMT
        Subject: CN=781f0d90-e593-4071-bcd7-7bdb495ca36e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:86:69:de:5d:78:0a:d3:2a:59:aa:e7:bf:63:
                    7e:70:bf:2d:59:17:f9:d2:0e:1e:03:67:af:5f:25:
                    67:07:5f:0a:dc:da:98:5f:3e:f2:49:65:cd:8a:b6:
                    76:03:b2:af:87:8f:0b:1a:06:37:74:0e:b9:42:a1:
                    26:fa:b3:db:41:54:6a:1d:25:02:9b:2c:61:98:e1:
                    0c:c0:49:ac:d1:0c:e0:0f:09:a3:be:a5:62:92:cb:
                    66:c0:ea:fa:0e:96:a4:b1:4e:57:d3:4f:9a:c5:c1:
                    ec:ac:d1:22:7e:40:4e:41:22:bd:0c:b2:77:06:d0:
                    8c:4d:39:70:4e:7c:69:84:53:2a:2c:0e:26:39:7e:
                    47:a7:fe:6c:f3:94:3b:a9:8e:a5:b5:dc:32:0c:74:
                    37:9b:53:8d:dc:f6:ec:e5:42:81:a5:ec:d2:dd:77:
                    e7:cc:a1:19:53:2b:2b:bf:65:87:12:b2:4f:64:2e:
                    a4:fc:56:da:fd:ca:d7:37:8e:32:b3:51:3d:2a:a5:
                    74:03:87:a5:0f:33:e7:33:77:ad:9d:4f:8d:8f:a6:
                    e6:f2:64:d7:c5:df:ed:74:25:74:06:5b:af:00:23:
                    b9:0c:e6:a4:f4:29:37:12:56:29:fa:53:d3:3d:df:
                    ee:82:2d:b4:ff:d8:24:1c:73:cd:dd:07:c2:b2:f0:
                    af:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:17:E3:41:D0:44:9B:20:1C:74:15:F1:40:E0:44:07:7E:C3:06:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/b20f7984-21e2-3119-9b52-ae1970a76a6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.127.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:c6:25:eb:43:cf:fc:2b:4b:4e:fe:e5:da:c3:bb:70:53:d3:
         25:2b:8e:2c:f7:99:d4:28:5c:5b:b0:18:bb:f3:4e:17:9b:85:
         e9:27:ea:30:f4:c6:cf:1f:5d:f3:09:aa:0a:76:26:70:15:4f:
         e8:6a:cd:3b:16:98:e6:79:6e:2d:0a:89:d6:88:9a:f5:f5:fc:
         88:aa:12:cb:82:5e:47:44:83:39:44:fc:44:99:e5:43:2f:65:
         79:9e:9a:fe:da:18:c7:eb:b4:6e:04:40:43:b0:9f:76:8c:e8:
         f7:a5:2d:ad:cc:7b:54:fa:53:24:5b:40:20:e1:9c:f3:70:7b:
         2a:ac:e4:fa:9a:2b:df:cc:b1:a9:db:54:63:e5:9f:91:41:2a:
         77:5b:2c:53:6b:15:dc:79:3d:07:c0:ff:55:c9:9e:64:08:f0:
         27:49:52:b2:6a:15:28:91:2a:15:31:a1:4c:60:73:b0:bf:59:
         29:78:11:05:93:0c:6f:bf:4f:c4:0d:46:73:f8:5e:2c:26:9e:
         65:7f:b9:a5:f7:bb:2a:b0:52:07:7d:00:1a:2e:11:7b:ab:63:
         5c:4d:a9:c3:f4:1b:35:36:b2:47:31:a2:4a:80:e8:af:4b:74:
         fc:fd:b0:29:e5:76:1d:1a:19:78:d9:7f:53:59:50:80:72:87:
         4a:05:61:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQ2SW22YXUGJTPZUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk
ZjgwMB4XDTI1MDExNjE3MjA0OVoXDTI1MDQxNjE2MjA0OVowLzEtMCsGA1UEAxMk
NzgxZjBkOTAtZTU5My00MDcxLWJjZDctN2JkYjQ5NWNhMzZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oZp3l14CtMqWarnv2N+cL8tWRf50g4eA2ev
XyVnB18K3NqYXz7ySWXNirZ2A7Kvh48LGgY3dA65QqEm+rPbQVRqHSUCmyxhmOEM
wEms0QzgDwmjvqVikstmwOr6DpaksU5X00+axcHsrNEifkBOQSK9DLJ3BtCMTTlw
TnxphFMqLA4mOX5Hp/5s85Q7qY6ltdwyDHQ3m1ON3Pbs5UKBpezS3XfnzKEZUysr
v2WHErJPZC6k/Fba/crXN44ys1E9KqV0A4elDzPnM3etnU+Nj6bm8mTXxd/tdCV0
BluvACO5DOak9Ck3ElYp+lPTPd/ugi20/9gkHHPN3QfCsvCvOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGwX40HQRJsgHHQV8UDgRAd+wwb3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh
NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvYjIwZjc5ODQtMjFlMi0z
MTE5LTliNTItYWUxOTcwYTc2YTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj
NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0
ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5
MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS39JMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAHGJetDz/wrS07+5drDu3BT0yUrjiz3mdQoXFuwGLvzThebhekn6jD0
xs8fXfMJqgp2JnAVT+hqzTsWmOZ5bi0KidaImvX1/IiqEsuCXkdEgzlE/ESZ5UMv
ZXmemv7aGMfrtG4EQEOwn3aM6PelLa3Me1T6UyRbQCDhnPNweyqs5PqaK9/Msanb
VGPln5FBKndbLFNrFdx5PQfA/1XJnmQI8CdJUrJqFSiRKhUxoUxgc7C/WSl4EQWT
DG+/T8QNRnP4XiwmnmV/uaX3uyqwUgd9ABouEXurY1xNqcP0GzU2skcxokqA6K9L
dPz9sCnldh0aGXjZf1NZUIByh0oFYbE=
-----END CERTIFICATE-----