Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/15d68e3b-7087-3564-8640-8443284552a9.roa
File:                     15d68e3b-7087-3564-8640-8443284552a9.roa (raw, json)
Hash identifier:          8I78Vou4AjlXhtFUma0za0aYFesX1sXKxTL0j/K1BxQ=
Subject key identifier:   77:F0:5B:B6:15:F8:AA:3E:0C:42:6A:55:4E:79:E5:FD:49:F0:A3:8E
Certificate issuer:       /CN=8d499d1b-9023-4410-8b4a-909ca6a083df
Certificate serial:       010D0C9F432858496FAF0769176522AEA9EF3840
Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/15d68e3b-7087-3564-8640-8443284552a9.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     397666
IP address blocks:        162.220.24.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:07:69:17:65:22:ae:a9:ef:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=c894c473-aac6-438c-b5d6-82a4cd08ab2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2f:a8:09:71:7e:50:70:97:9a:ae:e2:ac:6b:
                    1e:2d:ba:07:ad:a0:c3:91:e6:bd:f9:b4:59:c0:7f:
                    f2:2a:8c:0a:7e:17:58:93:32:55:82:cd:bb:21:65:
                    88:21:ce:52:a0:30:87:55:5e:d5:72:cd:52:8e:2b:
                    d6:8d:42:f4:11:f3:2d:49:f7:e8:2c:7a:89:02:bf:
                    99:f0:79:15:2e:20:8c:e4:9f:30:ef:64:91:30:7f:
                    6a:6a:8d:56:8a:55:11:54:6e:a5:f8:e3:49:91:b3:
                    79:46:53:68:5a:40:4b:de:71:c7:45:04:f8:52:ee:
                    66:5a:07:52:54:c2:9f:c0:a2:26:27:f6:75:90:a5:
                    91:3b:76:21:8e:06:5e:58:a2:a6:9c:20:0e:5e:7c:
                    30:97:49:f3:f5:62:d3:67:0f:51:cc:4f:63:21:8b:
                    12:34:13:29:81:7e:f8:86:02:f4:88:79:30:45:86:
                    dc:bb:6b:7c:36:04:72:5f:e8:18:15:2a:da:e1:36:
                    6a:7c:a9:75:c4:3e:42:3a:22:d4:19:35:13:9a:55:
                    1a:f1:c2:66:5e:67:32:cd:4e:6d:35:ac:16:5b:35:
                    af:67:2b:e9:ee:3c:68:a9:74:8e:0e:02:b5:da:bb:
                    d6:f3:2b:4d:2a:66:5b:1d:6f:da:d7:33:a8:e3:f0:
                    7e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F0:5B:B6:15:F8:AA:3E:0C:42:6A:55:4E:79:E5:FD:49:F0:A3:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/15d68e3b-7087-3564-8640-8443284552a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl

            X509v3 Authority Key Identifier:
                keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.220.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:9f:77:72:15:0e:d5:3b:7b:c6:5e:3f:ad:ca:81:6b:14:c4:
         4e:1e:e4:79:91:bc:34:e5:77:3a:e3:1c:0b:07:17:0a:45:93:
         8c:83:ad:f8:d7:74:0d:bb:da:c2:0f:5c:db:67:76:a8:f7:3e:
         90:65:d9:ee:8d:ca:62:5e:bb:0e:63:47:f8:24:84:71:ba:49:
         4e:ba:1c:6e:d5:73:a2:0f:48:0b:62:f9:e7:9d:c4:67:03:d4:
         79:71:50:6e:8f:80:bb:21:0e:c6:49:fa:fa:ca:34:20:2a:95:
         00:a5:71:74:32:dc:f2:3a:bf:24:e6:c4:10:81:ba:80:39:ae:
         d5:4e:b3:f4:05:e3:6a:fa:0f:a6:03:1b:f4:ab:42:df:c5:82:
         a1:a4:8b:96:51:9b:af:6e:6f:8a:c0:63:8e:2f:5c:31:3e:a6:
         f8:51:94:88:b9:eb:fa:8e:43:2d:ac:84:e1:2d:12:40:cb:54:
         1e:31:79:e8:75:1c:38:fa:ff:bb:a7:c8:4c:69:ee:3f:04:fb:
         7a:f5:f9:aa:13:12:30:0d:8a:05:36:75:0d:5d:ab:cf:c4:43:
         19:0f:90:d4:98:5e:43:d4:e3:85:01:1a:66:78:56:dc:5c:41:
         58:6f:f7:4a:14:f6:67:8b:a6:8e:a1:75:e7:db:6e:03:51:49:
         86:13:9b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----