Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/ffe87092-b879-3f9d-9f0d-df6a7c7104bd.roa
File:                     ffe87092-b879-3f9d-9f0d-df6a7c7104bd.roa (raw, json)
Hash identifier:          D3JfiDhrKP5GWxNBr9ScHz4xhXJnEE5kImSA18PIHv8=
Subject key identifier:   F5:AE:14:B3:1D:11:6E:41:7A:D2:0B:48:44:F4:54:04:64:24:BD:15
Certificate issuer:       /CN=496c1a5a-5b64-430a-8aea-c56d0c350c78
Certificate serial:       010D0C9F43285848DEA133DFE1672AF89CDB9AE0
Authority key identifier: B9:0F:46:C6:6F:88:E8:09:43:D8:DB:34:63:F0:1B:9A:C2:8E:1C:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/ffe87092-b879-3f9d-9f0d-df6a7c7104bd.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     26938
IP address blocks:        208.76.32.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:33:df:e1:67:2a:f8:9c:db:9a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=496c1a5a-5b64-430a-8aea-c56d0c350c78
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=c1828850-9faf-4e17-943a-35962c1810d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1b:1a:e3:aa:d4:fc:95:31:69:c0:33:ed:c1:
                    ca:7f:dd:e3:12:bb:be:cc:c2:dc:e6:7e:f5:a9:15:
                    f6:63:26:fb:da:1d:14:70:c5:06:aa:98:c8:aa:01:
                    1f:f9:f9:b1:ad:d5:d7:c8:f0:7b:66:3f:fd:1c:7e:
                    af:7b:53:05:de:93:49:08:18:4f:c2:11:dc:9b:ad:
                    63:42:87:64:84:10:21:b5:5b:fc:0b:69:35:82:fe:
                    7b:d5:42:58:59:52:a6:ba:36:e3:b7:fb:54:4e:7b:
                    f5:f3:d2:8f:f5:b4:85:df:68:f8:ad:01:50:02:4c:
                    a3:c0:28:56:2b:e5:22:12:b7:32:dd:37:96:04:95:
                    bc:d1:e5:de:33:f1:1b:78:e8:50:e0:1f:f8:c1:0e:
                    2d:88:c0:e1:b3:67:54:e3:09:9c:df:80:60:7f:fa:
                    79:35:09:d4:c6:6a:00:24:df:56:54:12:59:f1:18:
                    35:fb:b2:40:91:59:ff:7f:11:5b:98:94:fb:c8:85:
                    71:0b:cd:43:45:7c:13:f5:1a:35:6a:1e:1f:06:d4:
                    b1:b3:e3:96:ac:f8:38:0f:00:53:f6:62:22:29:e6:
                    47:b3:55:5b:94:ee:06:12:cc:ba:cc:d1:3a:ee:c5:
                    fc:e2:fe:d3:4f:08:d1:a8:75:97:fe:6c:34:f0:c1:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AE:14:B3:1D:11:6E:41:7A:D2:0B:48:44:F4:54:04:64:24:BD:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/ffe87092-b879-3f9d-9f0d-df6a7c7104bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78/496c1a5a-5b64-430a-8aea-c56d0c350c78.crl

            X509v3 Authority Key Identifier:
                keyid:B9:0F:46:C6:6F:88:E8:09:43:D8:DB:34:63:F0:1B:9A:C2:8E:1C:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/496c1a5a-5b64-430a-8aea-c56d0c350c78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:8e:9b:4a:6d:54:af:22:a0:6b:f9:5a:28:c6:68:2d:d5:6d:
         7f:96:26:e8:34:7b:42:fd:49:24:71:31:c2:5f:ca:75:39:04:
         a0:82:5b:ae:69:e3:23:7a:0d:6d:86:25:cc:1a:67:23:1e:f8:
         f4:14:73:43:08:f8:cf:64:6d:c7:89:de:4b:86:cd:c9:cf:79:
         bc:c0:5d:6f:4b:c3:e0:c3:97:d5:f1:49:b3:60:b9:cd:77:66:
         f0:75:d5:f1:b7:0c:5b:6b:78:e3:2f:a8:41:3f:fc:89:fe:53:
         fa:c3:0f:be:a4:13:47:e5:b6:b9:4c:86:e1:8e:ec:2c:50:8c:
         32:d7:82:c6:12:32:89:5b:da:8a:30:6d:b7:24:26:d2:38:da:
         b1:10:6b:0a:fe:1e:09:5e:b6:c1:2f:52:1c:79:32:81:b6:f8:
         63:fd:76:75:ad:79:13:95:67:f5:88:fa:1a:b2:d8:ad:1a:50:
         99:df:bd:bc:42:e3:15:ee:2c:84:eb:6b:76:94:44:02:a7:98:
         e9:df:3e:c4:5f:1f:2b:4f:fd:63:ef:de:13:01:d4:3b:09:88:
         70:b3:67:d1:90:5b:32:d5:63:57:89:8a:44:93:cc:b6:1d:8b:
         fd:2d:95:4b:38:2b:1c:4e:7e:58:12:7d:30:6c:e5:1c:d5:a7:
         65:06:46:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----