Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ce5601fe-e061-3205-80ed-165a3269ddb3.roa
File:                     ce5601fe-e061-3205-80ed-165a3269ddb3.roa (raw, json)
Hash identifier:          1JJ8SXqs6wlAQxMbwctrSfG/R56QlcDgjOiF80zblrg=
Subject key identifier:   81:FD:59:65:CA:FD:FC:56:88:D8:10:18:A7:37:D0:A4:EE:99:5F:47
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F432858495EEEE3994E7794267B12AD00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ce5601fe-e061-3205-80ed-165a3269ddb3.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     989
IP address blocks:        8.8.244.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:e3:99:4e:77:94:26:7b:12:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=bee3fed1-1a34-4993-90c5-160e5a6ecebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:05:bb:bc:b0:4e:66:fb:4b:b6:cc:d1:9a:25:
                    48:84:fe:3b:97:bd:13:e6:ab:85:e7:18:9e:38:d8:
                    eb:2f:44:d7:b6:ee:fb:75:9b:5c:40:ca:78:7f:32:
                    d1:36:8b:66:82:a5:23:ce:52:0c:0a:6c:17:2b:39:
                    6c:71:db:36:d8:e4:4c:96:50:5b:5f:96:44:30:47:
                    12:28:40:2d:bc:03:6c:a0:81:0c:99:85:99:23:16:
                    e3:09:06:f3:e5:5b:d1:21:5d:61:1d:14:e1:17:f1:
                    02:36:1f:b7:87:9c:0c:c3:b2:66:89:d1:76:5e:57:
                    4a:bd:c2:1b:26:14:95:1c:28:1f:ee:8b:2b:16:c8:
                    4b:7b:ea:ca:da:32:52:17:92:1f:00:f3:75:1d:aa:
                    4f:14:87:0b:d2:9a:29:2e:14:0a:da:4f:35:5d:95:
                    1a:7f:13:f0:60:4c:d2:d1:80:54:e0:f8:ea:d2:2e:
                    16:b6:b7:e8:80:c0:1a:75:e3:08:21:26:46:66:f4:
                    1c:e3:2b:32:0d:68:4c:b9:e6:47:c7:03:e5:ca:e9:
                    4d:9e:b7:01:36:3d:3f:e7:b9:5a:93:c5:5c:43:b3:
                    2d:ae:49:0e:c1:d3:6e:0f:e2:83:40:1f:85:4f:d4:
                    62:1c:70:c7:48:5b:bd:82:f8:5b:b4:47:68:b8:23:
                    5c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FD:59:65:CA:FD:FC:56:88:D8:10:18:A7:37:D0:A4:EE:99:5F:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ce5601fe-e061-3205-80ed-165a3269ddb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.8.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ba:19:6f:96:40:e5:62:2d:3e:d7:a5:a6:a1:fd:82:df:4c:
         0f:82:55:b5:48:71:69:54:2c:2d:ea:f9:b8:bb:13:67:1a:70:
         9b:7c:c7:37:cc:f1:2f:0c:2f:5b:f9:a7:8d:7f:3a:e0:43:a7:
         86:95:fa:f2:5f:59:e9:db:09:ec:0d:f7:01:e0:89:48:d7:2f:
         cb:ae:38:11:1f:f2:64:13:fa:a7:8a:c9:84:c3:88:a3:04:12:
         d5:75:fb:ae:ba:5d:05:c2:90:9e:1a:f9:13:b3:4a:d1:69:d7:
         80:32:01:c2:2d:53:11:51:dd:af:14:38:b4:50:00:d2:65:57:
         92:f2:15:1b:d1:d5:c1:bd:9b:03:be:8a:a6:6b:85:3c:78:d5:
         e9:1c:34:95:40:cf:9c:5f:db:ec:88:ae:e9:bd:85:f3:aa:d0:
         ef:18:c7:db:f2:3e:d3:d5:0f:b8:4d:84:01:fb:e3:03:11:22:
         34:7d:00:62:15:12:10:48:0a:e6:c8:bd:3f:c1:2c:59:83:5f:
         ea:1b:8b:6e:5a:82:79:a5:83:d5:14:c0:41:06:30:b1:0a:2c:
         61:97:79:f2:13:00:bd:78:8e:c6:c4:3d:51:c7:cf:7b:22:67:
         5e:f5:7e:de:7c:0f:4e:3d:28:53:18:d7:47:fc:6b:cc:28:60:
         73:00:77:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----