Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/1060af2e-9ce6-3930-9ec2-2d429ed8b239.roa
File:                     1060af2e-9ce6-3930-9ec2-2d429ed8b239.roa (raw, json)
Hash identifier:          xlDnI6yr6ycHFw8Vg8ECbRQfsuA90nila4JYjFRRkZo=
Subject key identifier:   E9:80:B8:26:D5:3D:9D:22:92:63:E3:D6:39:CE:D5:94:5C:40:A8:75
Certificate issuer:       /CN=4bb89156-2bd6-49be-a0a3-c532a34922e6
Certificate serial:       010D0C9F43285848E2D10E7255E58BABE76EC380
Authority key identifier: D7:57:AB:9D:18:95:02:3C:1C:E4:17:5D:9D:27:79:3E:D7:28:DD:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/1060af2e-9ce6-3930-9ec2-2d429ed8b239.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        139.180.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:0e:72:55:e5:8b:ab:e7:6e:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bb89156-2bd6-49be-a0a3-c532a34922e6
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=e26e609c-855f-4463-aadf-14b121e034ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9e:18:be:48:69:db:c1:f6:b9:e3:bc:7e:c9:
                    bf:37:42:c0:9c:07:64:b8:dc:46:6d:0b:22:03:50:
                    93:e6:38:68:2a:3b:5d:e4:78:bc:8f:d5:33:9d:51:
                    a7:18:fe:2f:40:93:a6:2a:65:21:6e:0c:55:37:4f:
                    e0:51:30:e9:d4:8c:6a:14:c1:79:b0:2c:a1:c7:46:
                    0f:a5:89:e8:4e:78:6d:1c:6f:7f:51:21:18:7b:44:
                    14:b9:c4:8f:2e:42:94:c5:f5:a4:d2:e2:51:de:10:
                    5c:92:e0:b2:d2:41:21:b2:0e:e7:54:35:b6:4d:f6:
                    b8:d6:a4:7b:28:4f:86:e5:9c:7e:53:1f:7c:ea:61:
                    b6:79:7e:da:e0:da:19:64:87:e1:fc:f5:05:d3:af:
                    b5:59:56:3f:7e:6b:e1:ec:33:07:12:c5:91:1e:cf:
                    8b:c8:15:0f:d6:5f:26:d3:66:9b:dc:09:e4:ed:b1:
                    87:ff:5d:73:72:1c:0c:c2:b5:07:d9:e1:cd:05:61:
                    7d:7f:ad:d8:f3:73:f0:7d:50:b7:63:f1:a9:19:a5:
                    8c:c8:8b:b4:1a:0c:44:53:1b:d1:80:69:49:fa:f8:
                    50:59:bf:1d:c5:dc:f6:bd:e6:d0:13:b6:ba:77:5f:
                    fb:67:b3:73:f8:8a:10:fe:60:45:01:25:e2:ee:ab:
                    18:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:80:B8:26:D5:3D:9D:22:92:63:E3:D6:39:CE:D5:94:5C:40:A8:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/1060af2e-9ce6-3930-9ec2-2d429ed8b239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6/4bb89156-2bd6-49be-a0a3-c532a34922e6.crl

            X509v3 Authority Key Identifier:
                keyid:D7:57:AB:9D:18:95:02:3C:1C:E4:17:5D:9D:27:79:3E:D7:28:DD:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4bb89156-2bd6-49be-a0a3-c532a34922e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.180.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:62:a9:a7:35:5a:7f:22:42:02:41:08:f6:5c:cc:18:82:ba:
         4b:20:47:3a:cd:7e:e6:21:1c:37:74:1b:5a:6b:6d:4e:28:66:
         93:2e:10:78:53:d9:e7:70:eb:47:10:ee:83:3b:e7:4f:a7:0f:
         bf:49:ee:d6:8b:e3:7a:8d:99:b7:0a:09:47:95:d2:0f:db:ea:
         2b:ec:27:86:0b:e5:d1:c5:df:38:30:49:af:bc:d0:e0:38:3c:
         b6:3d:49:71:48:cc:d8:3c:9e:a9:15:36:ff:5b:80:0f:0d:c5:
         e2:de:53:c3:bd:ef:5b:f6:e1:a2:64:fb:85:10:be:8e:4f:a8:
         a7:e9:6b:e8:df:40:7f:8c:28:ca:7f:43:cd:04:f1:9a:2d:6f:
         04:c0:2e:fc:88:89:95:06:8f:8f:4e:4b:39:57:17:4e:d4:9f:
         75:f5:b2:5d:4f:4e:be:8e:ea:18:56:73:bf:86:6c:e8:a8:a2:
         0c:f4:f2:0d:f4:79:a9:36:26:ad:2b:48:08:2e:4d:d7:8e:62:
         c2:78:8f:21:02:f9:e8:80:f8:1b:48:0e:a6:32:a2:c9:21:1e:
         8f:d8:c0:5a:a4:d1:bc:15:10:ee:76:aa:40:24:f4:2f:8e:f0:
         b6:b0:ac:82:a5:6f:cd:23:27:41:b4:c5:82:03:a1:6d:df:09:
         a0:7c:08:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----