Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f0dab10e-4582-3cea-9c9b-95e61ade618d.roa
File:                     f0dab10e-4582-3cea-9c9b-95e61ade618d.roa (raw, json)
Hash identifier:          WZRapWbkxjA/V09PnZScm2yxN+GgHRq0XkO879Qxtgg=
Subject key identifier:   91:A0:67:F5:7F:76:7A:A1:07:D4:0F:D2:33:15:81:C4:8C:0B:D5:C5
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F432858493ED3C9A0027DB436B2D24000
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f0dab10e-4582-3cea-9c9b-95e61ade618d.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     11178
IP address blocks:        8.20.186.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:c9:a0:02:7d:b4:36:b2:d2:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=f3d07bd8-e570-498f-a14c-4a5c75debed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:38:36:6d:d5:5b:36:86:e8:d6:2b:98:b0:0c:
                    33:41:3e:36:f1:9d:77:4b:94:5e:a2:47:34:d6:dc:
                    fb:cb:b8:85:8a:4d:34:bd:6d:ed:3f:82:52:0d:b2:
                    a8:dc:74:0f:5e:9f:24:46:bb:0c:c6:01:00:3a:4f:
                    d7:4b:13:68:51:98:96:0e:43:84:ff:18:d3:cc:ea:
                    41:09:28:21:27:01:35:f7:1e:8a:e3:94:45:31:53:
                    ce:1d:46:88:2b:99:66:61:9a:29:93:ea:c7:75:e9:
                    a5:3d:a1:d9:dd:7c:60:81:75:d9:5b:00:2b:04:37:
                    f7:59:12:b6:c1:97:67:4c:1f:b0:65:a2:2f:cd:4f:
                    76:c0:07:bf:90:ea:c7:1c:65:e6:99:85:18:46:21:
                    69:49:cc:b5:c1:ee:14:1e:77:bf:fd:f8:f0:c7:68:
                    d0:15:08:7d:4b:de:65:4d:80:13:68:a8:bd:70:98:
                    88:91:20:16:e4:15:de:26:5c:89:a2:0a:f2:92:de:
                    79:ff:1b:0e:21:2d:27:82:60:ef:1c:c0:4c:9a:ca:
                    17:33:d6:d3:07:a5:74:09:46:2a:fb:d8:30:66:ed:
                    6f:a6:e0:bb:8b:8e:80:4a:aa:ec:45:5e:04:80:bc:
                    ae:0c:fb:47:6e:6e:c5:12:65:31:90:66:ea:68:99:
                    da:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A0:67:F5:7F:76:7A:A1:07:D4:0F:D2:33:15:81:C4:8C:0B:D5:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f0dab10e-4582-3cea-9c9b-95e61ade618d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.20.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:fc:ab:fc:95:6b:c2:68:43:60:7b:8c:5b:cf:7a:75:8a:50:
         fb:95:1a:a0:9c:2b:10:d5:d2:15:e7:68:e1:ea:74:35:cc:9c:
         9c:50:86:a6:22:0d:c1:d9:10:48:5b:c5:75:79:b8:3f:e4:b1:
         17:40:01:1b:e6:15:4a:3b:c9:c4:5f:a9:95:cd:90:87:94:e5:
         85:c7:de:c3:8c:f4:7a:db:86:07:56:85:88:a2:e5:53:65:15:
         c7:bc:5c:cb:6a:6d:fc:64:84:65:d5:75:47:2c:5d:96:b7:15:
         14:76:ac:2c:f5:cd:a4:ee:d2:78:b3:3b:15:00:64:d7:f1:46:
         ae:44:83:df:6e:42:a9:63:65:76:ec:d8:5c:b5:3b:3e:2b:c0:
         d9:e8:46:2a:f9:6f:87:e6:45:20:d7:bf:ea:8e:f1:53:ff:1a:
         29:b0:b2:ac:b1:ee:45:0a:f4:a9:de:c8:4d:a5:a6:1c:18:72:
         5a:3d:24:32:46:7e:04:55:f9:2d:ae:8e:5b:e7:ae:ca:3e:4c:
         1b:02:3f:5d:9d:67:81:1d:c6:4f:8f:b2:25:38:5c:ad:68:dc:
         f6:6a:7d:c0:ba:e8:ff:5e:38:fb:14:a2:9c:0d:72:a4:d2:ec:
         e9:34:03:7f:af:2c:5b:65:30:f3:27:2b:a0:bc:d5:57:94:fa:
         35:ab:67:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----