Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/201dc264-73e9-3451-a68e-1cafec19dd3f.roa
File:                     201dc264-73e9-3451-a68e-1cafec19dd3f.roa (raw, json)
Hash identifier:          CC4J0K+iRxPpK500SBbJJpEBNKGmMdKyJRJQvjZeGSE=
Subject key identifier:   C6:DC:B4:C2:97:41:71:D6:F0:C5:80:E8:81:2A:FA:41:CF:47:54:63
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0E9DA045B9FF3C5E65980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/201dc264-73e9-3451-a68e-1cafec19dd3f.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     395973
IP address blocks:        104.134.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:e9:da:04:5b:9f:f3:c5:e6:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=df4c048a-7734-4403-bfea-1f01d725eb00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ba:5f:19:36:8e:14:40:6b:e1:6a:d3:df:55:
                    eb:b8:85:6d:28:3b:fc:62:d8:f2:7b:c5:66:42:43:
                    e2:ee:3a:13:55:01:62:79:7c:01:f1:72:dc:59:9e:
                    5e:49:5f:42:1a:3d:af:69:9c:64:22:dd:79:25:82:
                    40:61:fa:6a:69:40:6b:a3:ac:8a:34:05:8d:d5:b9:
                    3a:6e:ed:e0:61:ae:3c:51:f9:23:0f:ad:16:5c:59:
                    11:d0:2b:5e:f4:21:fd:64:d4:df:18:ef:88:77:de:
                    03:80:fd:83:7a:5c:48:4f:6b:65:ef:b2:19:07:6c:
                    b3:cf:83:78:b4:2d:89:0c:d8:d1:8a:12:0b:4e:83:
                    bf:60:96:54:6f:9f:ab:a8:d4:4f:5e:86:ef:38:4e:
                    58:5d:ca:c8:bd:39:18:96:d0:eb:87:1b:bf:3f:5e:
                    49:56:1c:91:89:0f:3f:c5:c5:6d:0b:45:41:30:ae:
                    39:54:bf:f3:4d:18:a1:a7:0a:fa:38:0a:76:42:b8:
                    86:64:82:bb:44:d8:d9:e6:2c:8b:20:58:4f:b3:a8:
                    40:da:2f:f3:7b:14:f8:3c:2f:7e:7b:ea:37:58:76:
                    dd:19:48:49:a5:1e:44:1c:89:85:1f:a5:65:00:58:
                    f7:9b:88:15:17:1f:d8:a0:6e:a4:f1:04:4c:d4:df:
                    58:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DC:B4:C2:97:41:71:D6:F0:C5:80:E8:81:2A:FA:41:CF:47:54:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/201dc264-73e9-3451-a68e-1cafec19dd3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:76:a0:ac:70:65:fa:f1:5e:0c:ca:e2:f7:e2:2c:b7:da:24:
         8e:4e:a5:12:80:d8:ef:e6:8c:12:dd:a8:5e:c0:e4:12:1a:68:
         0e:0d:be:85:40:50:19:c8:ce:40:c6:0d:7b:5a:42:88:e5:8b:
         1c:07:02:e6:5e:04:2a:c4:af:dc:04:fd:03:60:4b:48:60:18:
         2d:e9:e7:72:ce:bb:53:7a:79:10:a0:47:46:3c:dd:ac:b6:d1:
         2a:a5:49:ae:e7:19:5a:e2:bc:2f:31:f3:67:70:a0:b7:32:4d:
         74:8e:43:79:4e:a4:3b:02:2a:f7:73:a2:f9:0f:8f:a8:df:50:
         6f:13:3a:72:80:04:22:d8:b6:96:80:d2:de:a0:c2:7b:0e:69:
         06:38:bb:3e:c3:16:5d:0d:58:05:94:ce:37:35:29:d0:a3:d1:
         a4:a4:07:ef:d0:f2:14:49:60:eb:ac:ad:2e:16:cb:66:fa:b2:
         ec:61:71:be:1e:f7:97:d9:33:22:26:e5:d1:e9:f3:fa:cd:64:
         d3:a3:cd:ca:82:82:62:0b:70:be:e2:2a:6b:f3:49:ab:bf:e4:
         d8:bf:a8:a7:b5:d6:04:a3:6a:b9:31:c2:8f:c7:51:66:43:2d:
         84:a1:83:c2:de:76:67:25:85:b2:6b:c9:d4:c7:6c:26:94:68:
         47:b8:b0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----