Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e246dc18-ade6-344c-a77e-ec29957b5460.roa
File:                     e246dc18-ade6-344c-a77e-ec29957b5460.roa (raw, json)
Hash identifier:          1F2XxUoI1NQjmHD8BkY5mhWWZkoVqD8xTonYxa9w9Q8=
Subject key identifier:   F8:E0:36:F8:9F:A7:8F:AA:7D:1D:5F:51:2A:00:50:C0:24:4B:7F:43
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037AB91EF4BBB8EAE9DF7300
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e246dc18-ade6-344c-a77e-ec29957b5460.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20115
IP address blocks:        68.189.125.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:b9:1e:f4:bb:b8:ea:e9:df:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=4732f6b6-e181-424c-8cd4-a6045a0803a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:47:58:8d:32:3b:87:ed:ca:cd:3b:f8:f3:78:
                    49:bd:65:34:ce:23:a2:72:35:b2:74:5b:b7:66:55:
                    0f:53:a1:24:5a:b0:f7:0d:c7:b4:eb:15:24:fe:e6:
                    ef:d8:e2:85:17:c9:25:2a:4e:1e:de:70:97:ed:b4:
                    01:87:af:b7:47:d7:9c:6a:60:da:30:66:ce:d8:61:
                    d8:e2:af:27:bf:1b:ba:00:b3:8c:bd:4b:18:ce:f7:
                    5d:0a:29:70:fa:14:4b:d1:82:7d:10:84:65:b4:b1:
                    24:97:81:62:af:dc:b4:66:46:ff:e1:5e:88:06:98:
                    18:6e:cd:1d:45:4e:e0:14:da:c1:3b:98:b7:ae:2d:
                    ca:ea:e9:3a:77:54:53:1f:b6:7c:c7:32:68:83:37:
                    5a:05:fe:7f:66:cb:2e:3a:09:ca:a6:da:d8:4a:ba:
                    0f:93:55:bb:d7:ea:d2:94:da:66:58:6f:f6:a3:17:
                    47:a9:b2:9d:68:29:90:0b:43:92:9d:07:cd:23:1c:
                    e7:28:11:6b:46:9e:be:2e:7c:72:de:14:2c:2d:5a:
                    d9:ce:b3:83:b4:93:25:e5:56:49:35:39:31:0b:f8:
                    38:97:d7:da:19:3e:61:e5:54:3c:98:64:67:38:0d:
                    d4:98:72:3e:1b:04:8a:45:45:14:fc:71:a6:d9:7f:
                    b5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E0:36:F8:9F:A7:8F:AA:7D:1D:5F:51:2A:00:50:C0:24:4B:7F:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e246dc18-ade6-344c-a77e-ec29957b5460.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.189.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:bf:ff:6f:a4:3c:6e:d7:45:31:67:58:55:03:0f:ce:f2:4f:
         bd:11:8a:45:c8:5c:33:f4:db:37:3b:e5:4b:09:08:e1:bc:31:
         2b:cc:99:dc:98:91:b5:da:6a:71:ed:23:17:7a:6f:d2:cb:28:
         c8:fd:b4:50:cc:46:64:e9:86:7c:b8:64:93:ea:e9:ac:dc:a1:
         b0:f7:ab:ca:d4:f6:7e:4a:da:b8:20:bf:2b:79:53:df:d1:90:
         6e:a0:e4:2e:19:d4:b8:72:7a:44:44:2f:c9:fe:ae:ba:15:f7:
         de:9f:67:59:93:b5:2a:e4:5e:ee:65:53:68:1a:a9:34:20:ec:
         09:36:3e:cc:82:73:90:f9:5d:71:0b:92:0b:d5:46:76:06:f2:
         2c:b7:7a:5b:0a:1c:ec:e2:8c:5f:3a:4b:f9:2d:92:34:59:5f:
         8a:f8:9a:15:ee:ce:c8:4c:da:36:92:8e:ed:77:1c:fc:10:11:
         b2:9e:5e:bb:b4:4d:f5:b6:62:cf:e5:19:1d:f5:02:ee:90:4c:
         e0:49:65:c6:ab:de:a4:2c:ec:cb:03:60:b8:3c:e7:c7:28:c7:
         46:3d:45:f4:57:88:16:7d:0f:bb:2f:eb:0d:af:bd:78:c6:e7:
         94:74:bf:22:0b:ac:32:9c:61:f6:b3:08:ac:58:87:46:34:dd:
         e7:52:fe:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDerke9Lu46unfcwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
NDczMmY2YjYtZTE4MS00MjRjLThjZDQtYTYwNDVhMDgwM2E0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0dYjTI7h+3KzTv483hJvWU0ziOicjWydFu3
ZlUPU6EkWrD3Dce06xUk/ubv2OKFF8klKk4e3nCX7bQBh6+3R9ecamDaMGbO2GHY
4q8nvxu6ALOMvUsYzvddCilw+hRL0YJ9EIRltLEkl4Fir9y0Zkb/4V6IBpgYbs0d
RU7gFNrBO5i3ri3K6uk6d1RTH7Z8xzJogzdaBf5/ZssuOgnKptrYSroPk1W71+rS
lNpmWG/2oxdHqbKdaCmQC0OSnQfNIxznKBFrRp6+Lnxy3hQsLVrZzrODtJMl5VZJ
NTkxC/g4l9faGT5h5VQ8mGRnOA3UmHI+GwSKRUUU/HGm2X+1uwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPjgNvifp4+qfR1fUSoAUMAkS39DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZTI0NmRjMTgtYWRlNi0z
NDRjLWE3N2UtZWMyOTk1N2I1NDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARL19MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMS//2+kPG7XRTFnWFUDD87yT70RikXIXDP02zc75UsJCOG8MSvMmdyY
kbXaanHtIxd6b9LLKMj9tFDMRmTphny4ZJPq6azcobD3q8rU9n5K2rggvyt5U9/R
kG6g5C4Z1LhyekREL8n+rroV996fZ1mTtSrkXu5lU2gaqTQg7Ak2PsyCc5D5XXEL
kgvVRnYG8iy3elsKHOzijF86S/ktkjRZX4r4mhXuzshM2jaSju13HPwQEbKeXru0
TfW2Ys/lGR31Au6QTOBJZcar3qQs7MsDYLg858cox0Y9RfRXiBZ9D7sv6w2vvXjG
55R0vyILrDKcYfazCKxYh0Y03edS/m4=
-----END CERTIFICATE-----