Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e39392e33322e302f31392d3139203d3e2035363530.roa
File:                     3137322e39392e33322e302f31392d3139203d3e2035363530.roa (raw, json)
Hash identifier:          iW3ZLObrh/o56dOqMHbFeMlgEj2AAxOfroyHTb1M+9w=
Subject key identifier:   5F:2B:6F:D0:86:BA:24:A0:03:52:9A:6E:A8:76:33:D8:17:F8:87:E8
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       4B6B2A8BC98ACB55E6BA9EA44B7A7BC2DD41C409
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e39392e33322e302f31392d3139203d3e2035363530.roa
Signing time:             Wed 19 Feb 2025 05:08:49 +0000
ROA not before:           Wed 19 Feb 2025 05:03:49 +0000
ROA not after:            Wed 18 Feb 2026 05:08:49 +0000
asID:                     5650
IP address blocks:        172.99.32.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6b:2a:8b:c9:8a:cb:55:e6:ba:9e:a4:4b:7a:7b:c2:dd:41:c4:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Feb 19 05:03:49 2025 GMT
            Not After : Feb 18 05:08:49 2026 GMT
        Subject: CN=5F2B6FD086BA24A003529A6EA87633D817F887E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ba:f1:89:03:7b:8c:f8:e9:58:25:17:ce:98:
                    ff:56:2a:f3:7b:d9:22:72:62:01:9f:63:0e:b5:d8:
                    bb:7f:c1:bf:87:cb:1d:57:84:28:a2:86:23:51:3c:
                    43:ab:96:8f:86:45:50:3a:d7:92:f5:69:52:ef:e4:
                    a8:07:3f:f2:dc:68:dd:c3:ce:3a:d5:6b:b9:e6:b2:
                    16:2b:15:2b:8f:b0:3c:8e:fc:be:c3:53:fe:43:d4:
                    a1:ea:8d:e5:c9:ee:db:e0:39:80:70:80:de:65:e9:
                    a6:3b:a1:f1:6c:e3:cc:ee:d7:2d:c3:cf:c1:b6:4f:
                    01:e2:09:fc:15:22:8e:ba:3c:54:d8:2a:08:ca:86:
                    ef:2a:d1:ab:0f:eb:86:a2:28:29:cb:9e:6f:27:60:
                    97:df:a1:5b:78:7f:92:f1:a5:50:b8:ff:d5:95:37:
                    d7:bc:cc:77:d9:ca:88:62:b0:b4:bb:3e:2a:e4:b0:
                    76:59:6c:cb:6f:5c:58:31:ea:12:2f:6f:68:32:52:
                    37:96:b9:a9:0b:15:8d:d6:6b:25:51:56:2e:a5:c5:
                    44:c4:22:09:23:37:5a:c9:5c:f3:1b:d5:9c:1c:33:
                    31:3f:3d:3d:03:cc:87:e1:cd:6b:0b:c0:b3:5e:98:
                    64:78:13:38:ac:59:75:ba:8e:ed:94:bb:2b:06:56:
                    6d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2B:6F:D0:86:BA:24:A0:03:52:9A:6E:A8:76:33:D8:17:F8:87:E8
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e39392e33322e302f31392d3139203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9e:e5:14:f2:50:63:2e:70:72:97:89:50:c1:7f:21:e7:99:48:
         63:2e:ae:57:2c:64:3c:50:d0:ae:92:6f:52:e9:92:09:b8:27:
         93:33:6c:9e:a0:26:0f:bf:31:9d:28:d1:47:bc:f1:62:e2:8b:
         c6:ed:84:8d:01:e1:6f:58:42:a3:1d:2e:2d:b0:b9:74:52:6e:
         65:c2:c0:52:07:f2:cc:ea:cf:42:f0:69:a4:c9:96:84:a3:2a:
         57:af:35:1c:cc:4f:33:29:bc:49:1a:f8:eb:de:a0:87:cf:1c:
         83:df:6a:fb:f7:00:5d:10:6b:52:b9:2f:38:87:9a:fc:da:8e:
         eb:62:cf:ab:ae:c8:92:e9:bc:4d:b9:f3:4b:3a:30:ad:85:ae:
         61:b1:87:ef:06:f2:95:2e:ae:99:a8:5d:aa:f9:14:af:e9:28:
         64:c4:b7:a4:aa:33:4d:96:e0:74:76:1b:79:97:4a:6d:ab:f5:
         34:ac:58:eb:9b:1b:da:50:46:39:2f:09:00:e5:60:af:4a:47:
         d6:69:16:35:8a:4c:9c:15:5d:44:7a:36:20:97:d1:14:7b:d4:
         38:6e:c6:73:00:8c:d0:6b:8c:66:a2:98:4f:97:58:9f:a0:44:
         a4:b3:9a:8d:0d:ff:06:14:4e:36:bf:d8:ad:be:66:9f:86:af:
         00:ec:71:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----