Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/5fd8fa2b-a435-3b8e-9b81-fbabfb38d99c.roa
File:                     5fd8fa2b-a435-3b8e-9b81-fbabfb38d99c.roa (raw, json)
Hash identifier:          tUFwK5UnPTdBqAFxGscWxQ1vjDlnUhfZMv5qRaNkdYg=
Subject key identifier:   BD:98:F4:A4:54:A1:81:73:B1:32:F6:1F:84:0C:83:6F:57:39:27:B4
Certificate issuer:       /CN=42ce9d16-dc85-4007-a59d-6c18d1a42aa2
Certificate serial:       010D0C9F432858492CB21D44AD11F8F77F1DD8E0
Authority key identifier: B6:6F:B4:68:9E:4A:59:AD:81:FA:69:34:12:82:04:39:33:1F:58:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/5fd8fa2b-a435-3b8e-9b81-fbabfb38d99c.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     1299
IP address blocks:        162.250.108.0/24 maxlen: 24
                          162.250.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:1d:44:ad:11:f8:f7:7f:1d:d8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42ce9d16-dc85-4007-a59d-6c18d1a42aa2
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=6e119ba7-3abb-4f11-911f-8b73acdc36ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8f:9b:4f:66:f2:75:67:b7:cb:8f:b6:49:68:
                    2d:86:ef:46:82:07:e3:53:18:d7:6a:25:64:4a:5f:
                    95:e7:11:83:31:cf:7c:90:9c:f5:9d:26:6b:39:8c:
                    df:ba:65:05:ea:81:62:68:0b:43:0d:25:16:75:1e:
                    ab:10:25:35:f1:f3:11:9c:46:39:bb:06:45:a3:e1:
                    da:2c:81:1f:c1:15:a8:99:41:35:a0:51:6a:13:d2:
                    c7:6d:70:e1:16:cd:d7:07:3b:9a:a5:fa:1e:62:8e:
                    23:31:b5:8d:4d:3f:92:74:dd:c8:bb:05:9d:d5:dd:
                    df:f5:0f:93:b8:b4:9f:d6:24:de:f2:fb:bb:75:a9:
                    7f:c2:23:5a:6f:41:23:50:3e:20:aa:46:f4:de:a2:
                    da:27:b3:3d:33:c2:11:98:a2:78:8f:f3:1b:ef:83:
                    42:54:f4:9e:8c:52:89:16:fa:c0:30:25:37:85:b6:
                    e8:5b:ea:e2:c2:4b:b6:b8:ec:8f:97:3c:e2:e4:f5:
                    d4:a0:31:32:cb:43:d5:cc:04:28:83:70:ff:0e:fd:
                    c7:fb:be:3e:4c:b5:7c:2f:cb:72:b4:01:84:f9:51:
                    65:e1:37:4a:91:78:d1:b4:2d:0a:ac:46:bc:01:06:
                    75:57:98:b4:2c:54:91:73:d8:0a:6e:27:7a:38:8c:
                    bc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:98:F4:A4:54:A1:81:73:B1:32:F6:1F:84:0C:83:6F:57:39:27:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/5fd8fa2b-a435-3b8e-9b81-fbabfb38d99c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:6F:B4:68:9E:4A:59:AD:81:FA:69:34:12:82:04:39:33:1F:58:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:0c:f0:98:2c:f2:0e:b8:33:d8:93:ea:75:72:1f:84:1e:26:
         17:6e:42:79:a7:b0:df:46:50:72:81:6a:16:eb:f0:64:e5:79:
         1e:66:bc:7c:59:e4:db:90:aa:3b:6c:83:8e:2c:b7:de:6a:db:
         bb:2f:c0:41:c6:36:a2:54:3c:c6:62:c1:d9:e0:28:2e:fb:f2:
         8f:f9:f1:ab:02:fe:b4:1e:6b:78:e9:1f:a6:2d:0b:9f:3a:cf:
         b6:f8:8a:1a:fd:43:14:09:a3:95:b9:03:94:3d:cf:89:1f:61:
         de:14:cb:60:76:b8:83:ec:d2:66:a4:98:89:a3:ba:f6:72:78:
         25:ec:63:14:28:22:de:ec:b7:d2:cf:70:75:0a:3b:8d:b0:0a:
         8e:98:59:ac:3b:98:8f:73:25:70:02:16:8c:45:23:b5:36:1b:
         48:0e:b0:24:5f:04:bf:42:73:d6:01:71:31:b3:56:0c:c1:66:
         8b:88:87:19:d9:18:c1:12:e7:af:ec:5b:6e:82:f5:00:77:f5:
         9f:bd:68:2d:4a:29:af:5b:e1:74:f9:10:e6:c5:77:af:22:64:
         6b:02:04:51:01:b9:f1:e8:63:47:6e:f7:21:03:08:ec:16:ce:
         7d:27:b9:29:58:45:85:1f:f1:71:dd:a0:88:bd:a0:6b:3c:16:
         46:90:69:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----