Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/09697f00-cefa-3648-870e-bcf9c1a372ce.roa
File:                     09697f00-cefa-3648-870e-bcf9c1a372ce.roa (raw, json)
Hash identifier:          LjsnpjQeuOS1pMzIYY2Ch/vLlRHgE43NlM5gnadrpt4=
Subject key identifier:   E7:09:0C:C4:19:A1:D4:0B:52:D5:C6:30:7B:C9:8C:42:05:C9:3D:35
Certificate issuer:       /CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
Certificate serial:       010D0C9F4328584953C40F00220C6C6C5BC62A80
Authority key identifier: 31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/09697f00-cefa-3648-870e-bcf9c1a372ce.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     47050
IP address blocks:        173.224.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:0f:00:22:0c:6c:6c:5b:c6:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=d2b8764a-597f-42b6-8c92-1a5fde727a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:71:fc:f8:72:90:90:76:cf:4a:7b:1b:72:a7:
                    ee:27:a7:26:c6:c0:a1:56:b4:9f:14:70:e0:f6:3e:
                    c3:24:61:9d:b9:15:e2:9b:de:66:7c:ab:87:19:62:
                    ea:6b:cb:4d:4b:63:f8:2e:bb:fb:f2:c5:52:70:78:
                    3f:0f:c3:30:ca:35:a4:c0:7e:5b:9d:e1:51:13:b1:
                    9d:d5:2a:1f:93:63:b9:ae:a7:51:88:64:f4:99:78:
                    3b:f7:fc:c2:6a:92:5c:da:a7:bb:bd:5f:f2:4c:87:
                    53:2e:b3:70:16:7d:09:51:f2:58:bb:43:77:13:45:
                    c3:1f:12:23:da:b3:3a:98:3e:f0:46:a7:fe:9d:35:
                    22:0a:bd:6b:31:30:1d:50:2d:ba:d8:35:f2:cb:10:
                    82:e2:4c:2d:0d:29:2f:ca:6f:bc:97:73:cd:d3:8d:
                    f0:2c:ae:df:be:98:b6:80:4c:90:fb:e6:30:65:47:
                    b3:33:56:bd:4e:d4:79:bc:32:7e:dd:b1:44:ae:62:
                    b5:d3:66:d0:12:fe:e7:27:e4:cf:f0:62:0e:2e:d3:
                    cd:c3:85:94:20:73:ef:cb:7b:e7:8b:8b:fd:d1:a8:
                    73:74:7c:d2:ab:5e:65:1d:c0:08:26:aa:2a:7b:ba:
                    82:f3:ca:7f:97:d2:95:6f:61:be:55:ba:8d:ed:30:
                    79:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:09:0C:C4:19:A1:D4:0B:52:D5:C6:30:7B:C9:8C:42:05:C9:3D:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/09697f00-cefa-3648-870e-bcf9c1a372ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl

            X509v3 Authority Key Identifier:
                keyid:31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.224.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:4d:ba:aa:f2:68:d8:f6:70:cc:3a:5f:f3:a0:96:e9:9e:e8:
         0d:21:58:f4:79:1a:6c:84:79:4c:33:36:b7:ae:d7:1f:3d:73:
         64:7c:07:41:f4:3e:e3:dd:3d:df:18:38:95:36:da:29:31:5b:
         22:47:86:ba:53:6d:3a:8d:a0:8f:ca:43:1e:e9:32:65:f8:f8:
         29:b5:2f:d0:e1:a9:26:5e:86:2c:a2:e8:99:d9:66:15:b5:c3:
         a6:e7:f4:6d:39:20:e6:a3:fc:78:aa:41:f1:5d:a5:cb:96:cd:
         ec:5d:50:3b:82:f1:05:76:22:c7:47:33:6e:1c:cd:c7:64:46:
         60:6b:5a:9b:1b:0a:01:4a:04:4b:4b:3a:88:36:4c:87:69:0c:
         0a:92:04:c4:c9:2c:e8:14:e5:23:35:59:29:e7:b1:01:a9:9c:
         a5:9f:dc:01:eb:e8:6e:03:26:66:c0:e0:a5:c6:c2:18:2d:c8:
         64:2f:66:fb:c2:50:a8:75:56:1f:fc:6e:f9:41:ae:3e:69:33:
         5c:1b:75:88:b2:3f:c2:86:2b:c7:ac:b5:a1:dc:07:53:20:10:
         f2:4d:31:c3:49:3e:a1:75:0b:9f:fe:c7:3d:82:f0:ea:62:3d:
         4e:d7:2a:c0:2f:17:29:8b:66:13:fa:13:70:da:e6:f6:b2:ca:
         65:43:80:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----