Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f385d1d5-4405-3eca-8cda-2d3deec1fc42.roa
File:                     f385d1d5-4405-3eca-8cda-2d3deec1fc42.roa (raw, json)
Hash identifier:          b2DmijRJISnPGJUdmsYUWos2DuawCK94GYOOrDbO7zE=
Subject key identifier:   CD:A8:C9:88:C1:7B:27:9A:A8:08:7C:B2:0E:4C:5D:77:1E:C2:20:5D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285849213425E886B5544F74E454C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f385d1d5-4405-3eca-8cda-2d3deec1fc42.roa
Signing time:             Sun 09 Mar 2025 10:20:34 +0000
ROA not before:           Sun 09 Mar 2025 10:20:34 +0000
ROA not after:            Sat 07 Jun 2025 10:20:34 +0000
asID:                     577
IP address blocks:        50.100.16.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:25:e8:86:b5:54:4f:74:e4:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:34 2025 GMT
            Not After : Jun  7 10:20:34 2025 GMT
        Subject: CN=dcbc9cc1-3de3-499d-8292-13f6c0ed2069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:38:ee:9d:ec:f2:c8:41:29:81:ad:cb:44:0e:
                    c9:42:9a:76:41:3c:1e:3f:c9:8a:c2:f9:f0:5e:6f:
                    2e:55:5c:e9:2e:e9:1a:e3:9c:ad:96:26:8a:a0:67:
                    44:ec:dc:3f:7e:a3:89:cf:c0:7d:54:88:32:54:3a:
                    80:f5:73:7c:e2:d5:d0:97:2a:1a:15:75:ec:6d:bf:
                    8c:8d:9c:5a:9c:04:c3:0a:29:80:b8:df:6f:4d:e9:
                    e2:8b:ef:be:14:f7:6d:be:45:2f:9e:be:5a:f9:2b:
                    de:91:e4:a7:52:83:cc:67:a7:83:48:7d:f3:bb:1b:
                    24:d7:1b:bc:c5:ce:fd:52:3d:01:de:60:9e:5b:c7:
                    b4:02:21:6f:2b:06:0e:1a:18:20:78:d1:39:3c:f8:
                    aa:8a:8d:3d:a1:f3:e0:4e:49:5c:98:c1:9b:b3:12:
                    a9:ca:44:45:29:85:1a:7e:a8:9b:4e:be:3c:f1:6d:
                    bd:d7:20:17:3c:bf:2f:00:f1:09:b0:29:39:be:66:
                    6b:37:22:ea:47:8c:93:86:35:ca:47:30:88:4d:53:
                    e0:1d:a1:aa:08:6d:dc:a1:48:c5:00:5a:76:33:b8:
                    87:a8:a9:97:ec:ff:8e:29:ee:14:b0:c0:a0:1a:64:
                    f4:a6:a2:a3:a3:f3:cb:70:90:28:6c:69:0c:e6:c6:
                    78:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A8:C9:88:C1:7B:27:9A:A8:08:7C:B2:0E:4C:5D:77:1E:C2:20:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f385d1d5-4405-3eca-8cda-2d3deec1fc42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.100.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:aa:cc:3a:cf:c5:9e:94:6f:d8:5f:df:e9:bf:e8:44:7a:df:
         38:9f:32:a3:f4:87:47:f9:e0:c3:6c:20:ea:2d:2d:69:ea:64:
         5f:40:b3:30:ab:8c:46:2d:83:48:19:43:3b:c0:60:97:4c:47:
         b6:09:df:c7:5f:21:23:95:8c:4d:ec:ed:de:e5:f3:29:ce:1d:
         b9:a8:ab:05:51:9d:70:4f:d8:f0:9b:59:ba:95:51:b2:70:c3:
         6c:98:ed:30:51:47:3f:60:83:c4:35:2b:da:7a:05:bd:df:b4:
         69:b1:7b:41:de:c9:6f:fe:41:e1:eb:0f:a9:e8:e9:f1:63:35:
         71:b9:50:69:c0:27:e6:af:c8:7c:38:20:a0:29:57:87:b0:47:
         1e:65:c1:33:f4:91:77:e6:a2:b0:27:92:c4:e4:bc:1a:0d:c0:
         26:a4:a0:38:87:a8:a2:a4:d2:36:c1:70:04:ab:3c:ae:ee:58:
         67:b0:d6:b1:eb:70:9e:34:11:65:46:94:d7:ff:92:5b:79:d3:
         be:87:31:7e:90:dc:b3:94:69:e4:42:35:ac:42:de:21:39:b0:
         10:d3:c1:f6:d4:d4:91:91:c2:71:1a:9c:60:04:a1:f7:41:29:
         b3:ef:b6:ad:cd:0a:6a:4b:e0:c3:23:03:2a:c3:f7:c4:8d:60:
         4b:9c:8d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----