Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/24d8cf79-ed97-311a-8d75-70c16944c2c1.roa
File:                     24d8cf79-ed97-311a-8d75-70c16944c2c1.roa (raw, json)
Hash identifier:          5W7BiTVGgBrnRVH67rpDK3KNmdWaZfI3m4bmgx2NRPY=
Subject key identifier:   03:D5:33:5B:39:5E:51:92:3F:CD:4F:BA:DC:12:57:17:A9:19:4A:96
Certificate issuer:       /CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Certificate serial:       010D0C9F43285848FD56AD306A6B9F758A2E7AC0
Authority key identifier: 65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/24d8cf79-ed97-311a-8d75-70c16944c2c1.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     0
IP address blocks:        206.130.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:ad:30:6a:6b:9f:75:8a:2e:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=596aea45-5ce5-4c51-bc11-92270a9d4eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:58:34:e9:4a:27:6e:f6:3a:6f:54:5c:2b:23:
                    39:ed:c1:3d:78:90:fe:81:34:7c:f3:81:15:40:0e:
                    e2:22:b1:63:42:7a:d3:5d:5c:2f:ea:68:a1:06:05:
                    25:4c:40:19:f7:d7:c8:e0:1b:65:a8:ab:6c:6c:78:
                    aa:f0:f4:ad:af:8e:50:1d:aa:6f:2b:5b:4a:48:cb:
                    6d:39:65:53:13:fe:0e:32:76:9d:4d:5e:1c:ff:e3:
                    e7:d7:db:1a:47:3c:1e:31:4a:c9:ee:57:22:33:2e:
                    8d:8c:49:6e:a6:a6:f3:23:d0:db:67:05:e9:ec:82:
                    83:63:df:8d:19:6b:0d:a4:e1:fa:c5:b4:a7:e0:a6:
                    96:f8:b6:bc:b7:91:67:06:c7:be:05:81:cc:05:20:
                    38:9c:0b:89:45:48:b2:3b:86:7b:eb:de:c4:c0:e1:
                    ad:f7:9e:e5:5a:89:c0:1b:f4:37:3a:14:fe:a0:04:
                    60:9f:66:a4:9f:e6:b4:db:da:a5:5a:55:b5:18:93:
                    de:90:b5:7c:a0:c6:08:5a:28:36:64:87:b4:6a:14:
                    b4:7c:6b:55:5a:5f:de:56:3f:25:01:88:e3:54:c7:
                    00:31:85:54:4e:77:2e:3e:cc:8e:95:34:f0:e6:ee:
                    93:9d:7f:87:58:93:b3:9c:b2:e4:55:d5:01:49:6c:
                    84:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D5:33:5B:39:5E:51:92:3F:CD:4F:BA:DC:12:57:17:A9:19:4A:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/24d8cf79-ed97-311a-8d75-70c16944c2c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl

            X509v3 Authority Key Identifier:
                keyid:65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.130.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:05:4a:04:ce:bc:ef:88:e1:32:8f:ac:d8:15:96:4b:d5:b7:
         6d:aa:31:d6:88:f7:8b:4e:ea:5c:87:4d:a6:83:9e:2a:6c:b7:
         26:9f:9c:8a:be:30:48:64:cf:01:e6:1a:9c:80:4e:34:9b:11:
         6b:4c:84:c3:fd:ec:f0:01:27:1f:1e:ff:23:9d:69:af:74:1b:
         fb:c2:5a:f7:1e:f4:f6:ba:95:e3:b2:a4:d5:cf:1f:a4:91:26:
         81:bc:97:43:71:4a:9c:af:dd:f5:e2:1b:f7:c6:0d:92:bb:57:
         a2:1e:59:2f:93:96:32:4d:f7:9e:1f:47:20:e7:57:f5:6e:e9:
         fa:fe:5b:1f:23:26:0e:99:7e:1f:30:a8:9f:55:1d:4a:83:47:
         0e:c5:db:84:fb:a1:f2:9c:af:3e:ca:5f:25:09:e7:9e:c7:4e:
         5b:14:f1:80:d1:e7:c0:de:51:7f:5a:87:c0:19:be:d3:da:22:
         d0:be:37:fb:6f:d3:52:b2:70:3a:93:43:b8:82:ff:64:69:64:
         99:8c:1f:9e:84:41:d0:3e:8d:f4:42:24:41:48:c4:a7:02:1c:
         4c:d1:22:9b:2d:90:f1:2d:fa:76:67:05:2c:c1:4b:fb:e9:d0:
         91:d7:be:78:45:67:58:3d:92:ca:eb:22:fe:46:e3:a6:d8:5f:
         4d:b2:bf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----