Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/2d68a7fd-3dac-3b03-955f-a88fddcf8bbf.roa
File:                     2d68a7fd-3dac-3b03-955f-a88fddcf8bbf.roa (raw, json)
Hash identifier:          cwInMJNYmAh6hozUdfkSHZZ8SpIOKlLSmy6xXwZrfVo=
Subject key identifier:   CE:99:D9:5B:E1:CA:7E:94:BD:83:28:57:40:62:24:58:17:B8:52:A2
Certificate issuer:       /CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355
Certificate serial:       010D0C9F43285848960B5157C0D238CF07E3B050
Authority key identifier: 10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/2d68a7fd-3dac-3b03-955f-a88fddcf8bbf.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     2381
IP address blocks:        216.56.252.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:51:57:c0:d2:38:cf:07:e3:b0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=f31eb6f1-6cbb-43fd-8748-ee803b150685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:63:5a:02:88:4a:be:32:42:e7:b1:ec:71:9d:
                    e3:ea:d2:bd:e3:9d:f2:d9:d0:ef:93:2c:45:80:4a:
                    37:aa:05:67:d7:fc:85:b0:46:af:c5:d2:76:4c:29:
                    62:30:d9:f4:f9:bc:ca:74:18:f6:83:68:b8:66:8c:
                    5b:71:fb:ab:d9:b2:77:28:bf:75:07:d7:d5:9e:70:
                    a5:69:57:f3:56:2d:f6:c4:a2:07:ec:80:24:d4:36:
                    39:d3:4c:15:34:af:c6:9e:64:36:3f:42:9c:67:37:
                    b0:f9:b7:42:fc:1a:bb:52:f0:22:ca:80:de:6c:e5:
                    ee:7f:70:45:12:62:c4:89:2b:ca:e8:3b:44:cb:d5:
                    4d:de:6d:9d:b3:77:f0:a6:46:26:44:19:12:b3:af:
                    da:68:69:da:0b:89:ac:ae:dc:61:9f:36:a9:fa:b0:
                    54:06:6c:d8:a8:6d:ab:42:13:2e:17:f1:5f:c1:a1:
                    29:f0:3a:a1:ff:f0:47:bb:68:36:d3:ab:e7:e9:fc:
                    4f:f7:00:96:f5:44:9e:d8:f3:7f:6d:a1:47:0a:b9:
                    50:11:c8:eb:9d:27:f1:97:a1:b1:5f:06:29:fa:f5:
                    11:28:ae:bc:54:c4:49:7a:ca:02:d0:c3:7f:69:3a:
                    7a:83:05:60:a1:e2:83:9f:41:2f:1c:4a:50:5a:af:
                    b6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:99:D9:5B:E1:CA:7E:94:BD:83:28:57:40:62:24:58:17:B8:52:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/2d68a7fd-3dac-3b03-955f-a88fddcf8bbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.crl

            X509v3 Authority Key Identifier:
                keyid:10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.56.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:d9:4c:1f:b0:97:7f:02:c0:d1:36:70:1a:7a:dd:bf:3d:27:
         7c:b5:6e:51:8f:7d:bc:5b:51:f9:21:8d:3a:1e:24:2e:b1:dd:
         ce:a6:87:f4:f1:98:5c:2d:66:26:81:87:a7:7c:a2:3a:cb:0c:
         c4:43:28:4e:d7:fe:da:05:1b:db:52:37:74:0e:39:4b:4e:4a:
         34:5a:47:65:6f:e2:02:b7:00:7b:03:f0:f5:a5:f6:4f:41:00:
         52:25:8a:4a:94:eb:f5:e9:38:ac:c3:1b:e6:b2:a7:f8:dc:05:
         47:e6:a0:ea:8e:98:f8:15:4c:cb:48:f6:07:1b:e1:80:bb:93:
         55:45:e0:bf:ab:95:69:55:54:c0:4a:d7:3f:9a:b0:ea:e8:85:
         2f:df:4a:12:e5:1a:6b:ab:4f:5e:d6:94:2b:18:24:05:87:ac:
         b2:be:e2:8d:bd:96:d5:fd:87:c7:c3:98:43:9f:d2:5b:fb:84:
         ac:54:59:5f:09:88:b6:a3:a6:df:44:24:5a:6e:71:8b:71:56:
         4c:4b:57:57:4d:7a:de:39:19:00:7d:f6:96:62:57:d6:f0:31:
         ea:fd:91:10:16:c6:29:b3:6e:12:43:7b:25:c2:d7:5b:f4:33:
         0b:94:e0:e0:98:70:2c:f9:b4:36:9a:44:04:6a:9f:c2:7b:92:
         46:7e:73:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC1FXwNI4zwfjsFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGZkYTBlMTAtZjZiZi00YzIzLWJmZmItZDRhOWE3MzUy
MzU1MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk
ZjMxZWI2ZjEtNmNiYi00M2ZkLTg3NDgtZWU4MDNiMTUwNjg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmNaAohKvjJC57HscZ3j6tK9453y2dDvkyxF
gEo3qgVn1/yFsEavxdJ2TCliMNn0+bzKdBj2g2i4Zoxbcfur2bJ3KL91B9fVnnCl
aVfzVi32xKIH7IAk1DY500wVNK/GnmQ2P0KcZzew+bdC/Bq7UvAiyoDebOXuf3BF
EmLEiSvK6DtEy9VN3m2ds3fwpkYmRBkSs6/aaGnaC4msrtxhnzap+rBUBmzYqG2r
QhMuF/FfwaEp8Dqh//BHu2g206vn6fxP9wCW9USe2PN/baFHCrlQEcjrnSfxl6Gx
XwYp+vURKK68VMRJesoC0MN/aTp6gwVgoeKDn0EvHEpQWq+2SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM6Z2Vvhyn6UvYMoV0BiJFgXuFKiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZmRh
MGUxMC1mNmJmLTRjMjMtYmZmYi1kNGE5YTczNTIzNTUvMmQ2OGE3ZmQtM2RhYy0z
YjAzLTk1NWYtYTg4ZmRkY2Y4YmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGZkYTBlMTAtZjZiZi00YzIzLWJm
ZmItZDRhOWE3MzUyMzU1LzhmZGEwZTEwLWY2YmYtNGMyMy1iZmZiLWQ0YTlhNzM1
MjM1NS5jcmwwHwYDVR0jBBgwFoAUEFJ7frj3pvQHb8/NWj8S4x3SLMwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZmRhMGUxMC1mNmJmLTRjMjMtYmZmYi1kNGE5
YTczNTIzNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2Dj8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABjZTB+wl38CwNE2cBp63b89J3y1blGPfbxbUfkhjToeJC6x3c6mh/Tx
mFwtZiaBh6d8ojrLDMRDKE7X/toFG9tSN3QOOUtOSjRaR2Vv4gK3AHsD8PWl9k9B
AFIlikqU6/XpOKzDG+ayp/jcBUfmoOqOmPgVTMtI9gcb4YC7k1VF4L+rlWlVVMBK
1z+asOrohS/fShLlGmurT17WlCsYJAWHrLK+4o29ltX9h8fDmEOf0lv7hKxUWV8J
iLajpt9EJFpucYtxVkxLV1dNet45GQB99pZiV9bwMer9kRAWximzbhJDeyXC11v0
MwuU4OCYcCz5tDaaRARqn8J7kkZ+c3g=
-----END CERTIFICATE-----