Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2ffb74d-ed99-3451-a40b-724a9688cf48.roa
File:                     d2ffb74d-ed99-3451-a40b-724a9688cf48.roa (raw, json)
Hash identifier:          KYnAgMb9nWvzqOPC9HAOhxYrSa3+eBOY9rwf+BL92IU=
Subject key identifier:   C7:E0:46:1C:33:E4:76:9B:CF:BC:F2:F7:63:97:97:EF:3C:DE:A6:59
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848424B067027D2AC20128C3D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2ffb74d-ed99-3451-a40b-724a9688cf48.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     22394
IP address blocks:        141.207.226.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4b:06:70:27:d2:ac:20:12:8c:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=c55e0332-9069-4c3d-b723-a81300b1f54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:93:f7:d4:e2:d8:a0:80:72:41:5f:8c:18:7d:
                    f3:9c:8a:11:74:60:8e:31:eb:89:25:20:54:d5:b9:
                    3f:4c:91:7d:70:95:31:9d:47:af:a1:c8:ab:f8:ad:
                    35:f1:f4:47:df:5a:ae:1c:eb:c4:77:43:6f:34:7e:
                    66:26:77:bd:61:10:8b:1c:ca:70:41:5c:60:63:94:
                    0f:a7:3a:3f:f2:41:fa:a2:8b:07:93:f5:28:bc:6e:
                    3f:c1:6d:b5:09:57:55:50:8f:dc:0d:ae:a8:c0:ff:
                    be:7e:de:4d:6d:56:a2:09:f4:92:48:e3:4e:13:c8:
                    4a:6a:c3:f2:d5:0b:09:c7:fe:0a:52:75:63:92:a7:
                    8a:0f:48:e2:46:87:b2:d1:f2:37:79:1b:0f:ca:95:
                    97:5f:de:d5:8b:4e:40:34:f1:8e:89:40:50:9f:42:
                    5d:01:0f:3f:4d:71:63:84:cd:33:3b:a6:89:3c:2c:
                    4c:e3:1f:6b:24:b8:1b:df:de:4c:7b:f1:f5:19:24:
                    1f:4d:3a:ed:1b:04:e9:7b:ca:a4:33:ac:5d:a8:13:
                    58:0b:a5:2c:29:28:b1:43:f0:6e:94:de:84:5e:12:
                    d6:de:90:c5:45:c2:29:ac:23:b1:d4:99:d7:8d:3d:
                    1e:06:ed:29:01:37:cf:e2:a8:de:86:1e:bb:9e:86:
                    79:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E0:46:1C:33:E4:76:9B:CF:BC:F2:F7:63:97:97:EF:3C:DE:A6:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2ffb74d-ed99-3451-a40b-724a9688cf48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.207.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:5c:0c:04:91:1c:34:33:87:af:6c:d7:9b:33:70:a0:bd:09:
         53:cb:d0:29:f9:9b:c9:38:5f:df:aa:29:9c:ab:97:68:ec:4a:
         aa:30:f6:b9:d2:16:2a:53:09:b1:0d:48:58:a8:8a:75:be:fe:
         c5:08:fd:2e:9d:3e:17:72:95:75:51:6f:39:83:41:d6:4c:f4:
         43:ce:7d:b8:f9:8e:0c:91:1a:f4:f4:1a:37:d0:7e:d0:f6:b4:
         ce:6b:c4:83:f2:4a:15:11:49:f4:d7:ea:cf:58:9e:14:f1:df:
         89:9d:44:ba:1d:9f:31:3a:ba:7d:f0:23:dc:95:1f:1a:f8:08:
         55:58:50:70:72:98:83:f8:d0:a1:31:17:29:b7:13:76:d9:24:
         55:9d:cf:2f:8e:b2:b3:e2:13:26:11:dd:05:44:18:35:a1:bc:
         ec:69:d1:2b:da:00:6e:d3:4c:a1:45:3d:6b:55:d2:5f:1f:0a:
         6e:07:ce:54:27:8b:bc:4d:0f:bf:29:cc:bd:11:d8:88:d1:cd:
         b2:30:ee:b4:ef:3a:ca:14:4b:82:67:3d:a6:3f:d5:8f:c4:45:
         7a:f9:73:39:90:14:92:15:97:e5:c3:9f:82:5a:ae:fc:08:d6:
         32:32:ae:ec:35:8b:0f:0b:2a:2c:75:29:3b:0b:64:79:0d:ee:
         0d:75:ef:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhCSwZwJ9KsIBKMPYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk
YzU1ZTAzMzItOTA2OS00YzNkLWI3MjMtYTgxMzAwYjFmNTRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZP31OLYoIByQV+MGH3znIoRdGCOMeuJJSBU
1bk/TJF9cJUxnUevocir+K018fRH31quHOvEd0NvNH5mJne9YRCLHMpwQVxgY5QP
pzo/8kH6oosHk/UovG4/wW21CVdVUI/cDa6owP++ft5NbVaiCfSSSONOE8hKasPy
1QsJx/4KUnVjkqeKD0jiRoey0fI3eRsPypWXX97Vi05ANPGOiUBQn0JdAQ8/TXFj
hM0zO6aJPCxM4x9rJLgb395Me/H1GSQfTTrtGwTpe8qkM6xdqBNYC6UsKSixQ/Bu
lN6EXhLW3pDFRcIprCOx1JnXjT0eBu0pATfP4qjehh67noZ5cQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMfgRhwz5Habz7zy92OXl+883qZZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDJmZmI3NGQtZWQ5OS0z
NDUxLWE0MGItNzI0YTk2ODhjZjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjc/iMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA9cDASRHDQzh69s15szcKC9CVPL0Cn5m8k4X9+qKZyrl2jsSqow9rnS
FipTCbENSFioinW+/sUI/S6dPhdylXVRbzmDQdZM9EPOfbj5jgyRGvT0GjfQftD2
tM5rxIPyShURSfTX6s9YnhTx34mdRLodnzE6un3wI9yVHxr4CFVYUHBymIP40KEx
Fym3E3bZJFWdzy+OsrPiEyYR3QVEGDWhvOxp0SvaAG7TTKFFPWtV0l8fCm4HzlQn
i7xND78pzL0R2IjRzbIw7rTvOsoUS4JnPaY/1Y/ERXr5czmQFJIVl+XDn4JarvwI
1jIyruw1iw8LKix1KTsLZHkN7g1171U=
-----END CERTIFICATE-----