Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ccf97975-0cfa-3323-b088-de336c248425.roa
File:                     ccf97975-0cfa-3323-b088-de336c248425.roa (raw, json)
Hash identifier:          heTH1Z4ErTkwOf7d20MHgXC+SJlHTvtqI5j4kv9EQUg=
Subject key identifier:   94:5E:E5:4D:02:BC:C8:9A:85:F2:8C:F6:6C:94:BF:5D:53:AA:A8:C4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848811B1573AE71424A9596D3A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ccf97975-0cfa-3323-b088-de336c248425.roa
Signing time:             Sat 11 Jan 2025 02:00:39 +0000
ROA not before:           Sat 11 Jan 2025 02:00:39 +0000
ROA not after:            Fri 11 Apr 2025 01:00:39 +0000
asID:                     16625
IP address blocks:        23.49.144.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:81:1b:15:73:ae:71:42:4a:95:96:d3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 11 02:00:39 2025 GMT
            Not After : Apr 11 01:00:39 2025 GMT
        Subject: CN=725d44d8-5d5c-45b6-93b4-c2e92da43fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:34:3f:52:84:8e:66:45:e4:3d:3d:b4:d7:b2:
                    f6:c9:c7:fc:8b:a8:f8:b2:74:62:45:40:35:7d:39:
                    ab:64:74:82:69:4e:26:59:14:5c:0e:8e:86:31:67:
                    ef:02:9d:c4:36:f2:73:34:e9:7b:a2:7e:11:63:e4:
                    60:62:42:7e:d3:2d:60:cc:37:91:65:f6:2f:66:6b:
                    ec:7a:d2:56:3f:3e:c6:e6:2d:cf:1a:f6:b3:09:ac:
                    28:74:f1:03:22:09:03:25:1f:0c:5f:23:ab:62:00:
                    c6:17:eb:0c:1e:db:7f:50:22:3e:13:8b:44:e2:a1:
                    d0:f3:93:80:d1:4f:26:b8:40:b4:ff:f3:c6:07:d8:
                    86:1a:20:f5:1f:a9:3a:89:1b:da:61:96:e2:7c:79:
                    17:33:7d:4c:32:98:c9:fa:9f:d1:55:2c:1d:a7:7d:
                    81:1d:e8:5d:89:be:09:2f:a9:19:3a:d6:69:af:d7:
                    ea:2f:ce:39:02:54:8b:0d:43:a5:56:16:a3:2d:17:
                    fb:38:31:3e:c9:98:f4:5c:ac:f3:ac:e1:28:12:8b:
                    93:a2:cb:e9:22:ac:5c:8a:c8:4c:1c:cb:48:88:81:
                    a8:f9:04:ae:01:ab:e4:a5:a2:c9:f6:9b:f9:8e:9f:
                    a2:38:9d:af:61:dd:15:c4:ba:d7:ff:c3:22:9c:9f:
                    f6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5E:E5:4D:02:BC:C8:9A:85:F2:8C:F6:6C:94:BF:5D:53:AA:A8:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ccf97975-0cfa-3323-b088-de336c248425.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.49.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:d3:7f:96:b6:f3:48:60:c4:8f:c4:83:48:d9:4c:ed:82:23:
         32:f7:38:1b:5f:e3:a1:2c:30:21:eb:67:ed:1b:2b:b5:d0:42:
         d8:78:f2:32:fa:45:c9:04:5e:21:02:ed:cc:1f:b2:52:a3:24:
         b6:60:c5:ab:21:86:ab:96:03:55:f2:cd:73:1c:57:d7:17:6c:
         65:5b:fc:d9:fe:2d:19:9c:04:6c:a3:a9:92:5d:aa:1e:33:38:
         6a:4b:f8:33:c1:de:cd:88:46:f2:5e:21:e3:bd:1c:55:9a:30:
         ad:72:7d:e4:7c:20:33:44:8d:fe:63:81:88:4f:49:54:5d:ea:
         fd:da:09:72:60:d9:82:45:58:e2:82:8b:43:f9:15:18:5f:b7:
         0d:93:02:ae:45:1c:e5:57:b6:8c:bb:42:68:4a:e1:3a:1c:db:
         b8:35:32:1b:9a:aa:4a:04:75:9e:8f:22:3c:62:20:fd:d0:34:
         57:0d:80:db:77:ab:bb:70:18:20:59:ce:d4:37:97:fb:71:23:
         6c:75:d8:13:26:72:63:1b:ea:b5:3f:3d:4d:db:06:70:bd:60:
         8a:6d:37:db:13:fb:0f:77:a4:10:f9:2e:9a:d7:36:0b:14:28:
         c7:98:c1:97:a9:05:6d:2e:80:54:ed:43:e7:ab:08:14:69:c2:
         f0:95:fc:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiBGxVzrnFCSpWW06AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDExMTAyMDAzOVoXDTI1MDQxMTAxMDAzOVowLzEtMCsGA1UEAxMk
NzI1ZDQ0ZDgtNWQ1Yy00NWI2LTkzYjQtYzJlOTJkYTQzZmRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTQ/UoSOZkXkPT2017L2ycf8i6j4snRiRUA1
fTmrZHSCaU4mWRRcDo6GMWfvAp3ENvJzNOl7on4RY+RgYkJ+0y1gzDeRZfYvZmvs
etJWPz7G5i3PGvazCawodPEDIgkDJR8MXyOrYgDGF+sMHtt/UCI+E4tE4qHQ85OA
0U8muEC0//PGB9iGGiD1H6k6iRvaYZbifHkXM31MMpjJ+p/RVSwdp32BHehdib4J
L6kZOtZpr9fqL845AlSLDUOlVhajLRf7ODE+yZj0XKzzrOEoEouTosvpIqxcishM
HMtIiIGo+QSuAavkpaLJ9pv5jp+iOJ2vYd0VxLrX/8MinJ/2DwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJRe5U0CvMiahfKM9myUv11TqqjEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2NmOTc5NzUtMGNmYS0z
MzIzLWIwODgtZGUzMzZjMjQ4NDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzGQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADnTf5a280hgxI/Eg0jZTO2CIzL3OBtf46EsMCHrZ+0bK7XQQth48jL6
RckEXiEC7cwfslKjJLZgxashhquWA1XyzXMcV9cXbGVb/Nn+LRmcBGyjqZJdqh4z
OGpL+DPB3s2IRvJeIeO9HFWaMK1yfeR8IDNEjf5jgYhPSVRd6v3aCXJg2YJFWOKC
i0P5FRhftw2TAq5FHOVXtoy7QmhK4Toc27g1MhuaqkoEdZ6PIjxiIP3QNFcNgNt3
q7twGCBZztQ3l/txI2x12BMmcmMb6rU/PU3bBnC9YIptN9sT+w93pBD5LprXNgsU
KMeYwZepBW0ugFTtQ+erCBRpwvCV/L0=
-----END CERTIFICATE-----