Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/82b61c78-069c-3046-82d7-7ecea8a4fbf6.roa
File:                     82b61c78-069c-3046-82d7-7ecea8a4fbf6.roa (raw, json)
Hash identifier:          Fywi/6gQhr2V7ZbLD7GnJXYOyiR3ANjDLvFk9E25Q0U=
Subject key identifier:   D1:F6:2E:F3:E2:88:44:40:43:9E:DF:59:DB:3C:C3:A8:0E:DF:39:55
Certificate issuer:       /CN=d001dd1f-946b-457b-98d8-41701665309e
Certificate serial:       010D0C9F432858495ABEC3C79E75D347B64BF0D0
Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/82b61c78-069c-3046-82d7-7ecea8a4fbf6.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     23465
IP address blocks:        208.187.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:c3:c7:9e:75:d3:47:b6:4b:f0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=b122f9d9-f3a9-43ac-8d66-3f377e78d110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:92:9c:4b:a0:3e:10:bc:f8:b1:1a:0e:65:04:
                    e5:57:e4:67:43:fb:1f:0f:0e:83:c7:e9:53:54:94:
                    5d:ed:c8:e4:d0:62:6f:a0:12:17:8c:2c:56:cc:4c:
                    a5:4e:ea:ea:a7:fc:43:a5:97:b6:14:3c:6d:35:fc:
                    bf:af:17:fb:a0:64:62:2d:ff:f1:85:b5:b7:a7:ea:
                    8c:ac:88:81:af:90:9d:0b:dc:ca:e4:64:ad:c8:1b:
                    ae:8e:ef:a5:4e:92:b6:30:13:20:e2:04:bf:f8:84:
                    2f:3d:09:fb:4f:6f:4e:31:a6:ec:f0:d8:de:63:0b:
                    f7:58:2c:d3:97:35:80:72:ea:38:0e:68:79:37:25:
                    69:16:31:f4:1a:1e:13:5b:d1:31:ad:c6:5c:46:9a:
                    1e:3e:42:b2:b1:14:14:f8:5e:19:dc:b2:f8:bf:c2:
                    99:3e:bb:b0:21:71:ee:cf:c3:4e:ea:e9:44:d8:47:
                    da:d0:d8:f5:85:7a:31:b7:a7:10:12:46:d9:da:3c:
                    80:89:0e:d8:4f:0e:b0:a3:c9:0c:03:55:94:ee:e8:
                    ff:32:08:af:5a:7d:fb:28:f8:70:63:39:25:0b:be:
                    bd:8d:41:7a:34:99:7d:09:09:77:2f:78:29:e8:1c:
                    21:85:c0:6c:a0:62:71:1c:be:95:88:4b:bd:be:47:
                    75:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F6:2E:F3:E2:88:44:40:43:9E:DF:59:DB:3C:C3:A8:0E:DF:39:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/82b61c78-069c-3046-82d7-7ecea8a4fbf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl

            X509v3 Authority Key Identifier:
                keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.187.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:22:7b:fa:11:f3:18:81:82:82:30:99:ce:4a:2d:f4:b5:3b:
         85:a6:df:ce:3c:d1:32:3e:61:98:49:9d:14:c8:c3:c7:43:7f:
         af:87:cc:02:70:41:7e:53:aa:53:bd:cb:64:f1:9f:bd:50:b5:
         2c:6d:dc:cf:ca:03:b3:23:11:0d:d8:bb:38:8f:5b:85:d8:80:
         a5:b2:66:c9:4d:47:af:1e:ab:15:18:83:8b:ac:e2:1c:4c:50:
         88:d8:c5:60:c7:8a:a5:b2:86:e4:cb:4d:07:c8:4f:f7:a5:aa:
         c5:a2:f1:75:04:d0:25:93:6e:ec:b2:26:73:02:02:b3:c6:1f:
         d0:2b:7e:ac:6b:c0:c5:9a:e6:e0:08:3c:4b:0d:da:a9:cf:18:
         4e:8d:fd:14:89:d9:28:8f:8b:16:0e:7b:99:45:98:ee:d1:af:
         e9:db:30:e0:d5:3a:c4:a6:58:f7:87:a8:cc:b1:8d:6d:84:cf:
         46:66:6b:56:a8:7c:b7:53:8b:7f:49:9d:73:be:b3:ea:51:7f:
         6f:c3:61:45:35:b3:15:20:ab:6a:84:c5:d6:6d:d0:9f:c7:ed:
         31:3f:43:6f:5e:8b:07:d7:b9:3d:14:c0:a3:12:8f:a8:c0:86:
         19:ea:ca:64:7e:f0:cb:44:52:ed:20:7c:1a:c3:5b:f1:cd:09:
         02:f4:a5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----