Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/36b4940b-7b79-39c3-8db0-25125c1d4afc.roa
File:                     36b4940b-7b79-39c3-8db0-25125c1d4afc.roa (raw, json)
Hash identifier:          Zv896iGoartSyMkKQ/cU/mbT+p7VS9B204dx2Hqr06o=
Subject key identifier:   96:20:EE:FF:0C:AB:6A:10:C7:52:51:6B:EC:7D:18:A5:E8:A0:AF:54
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848AF2B9C13838502B8DEA57980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/36b4940b-7b79-39c3-8db0-25125c1d4afc.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     41264
IP address blocks:        104.132.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:9c:13:83:85:02:b8:de:a5:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=6176d0ba-2cfa-483a-a22f-275f49240534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:75:d1:e6:e2:8a:97:a7:8e:6a:6a:1f:d1:1f:
                    42:85:e1:f2:d2:98:6d:f8:b4:3e:79:b0:df:9d:80:
                    0e:10:7f:2c:e3:24:ff:9e:b0:8a:48:88:6c:6d:0a:
                    aa:e0:d9:0e:e1:2c:a7:18:84:13:21:1e:e6:ef:ff:
                    00:94:de:6c:26:14:c1:f9:a7:fc:a9:f6:37:8a:c9:
                    bc:aa:61:b9:d3:6b:f9:82:27:af:e3:6f:50:a7:80:
                    de:b4:b2:45:50:62:12:4a:dd:e6:29:49:00:94:43:
                    52:92:e5:7c:3f:34:b7:83:34:bb:38:ce:12:31:0c:
                    66:69:17:84:7f:08:cc:d1:7d:76:5a:79:50:a7:ac:
                    df:77:32:ed:d4:84:eb:09:17:ea:f7:05:86:36:a8:
                    57:86:f8:34:79:d5:11:82:3f:4c:95:50:e6:e8:72:
                    49:4d:c0:59:a4:09:a9:aa:d5:03:89:3f:db:8a:87:
                    f6:3d:07:e7:a1:9a:ee:17:90:f0:6c:2a:e7:db:db:
                    b2:df:d6:b0:67:03:aa:0a:59:0e:30:af:27:2d:79:
                    6e:45:02:15:3a:80:8b:35:8b:f1:1e:58:4e:66:95:
                    b0:06:bb:17:e1:83:78:97:41:cf:8a:ea:95:e1:14:
                    bb:f2:6c:c2:6e:94:e2:85:d3:35:91:68:f4:3b:f2:
                    38:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:20:EE:FF:0C:AB:6A:10:C7:52:51:6B:EC:7D:18:A5:E8:A0:AF:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/36b4940b-7b79-39c3-8db0-25125c1d4afc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:79:83:48:17:f0:ec:62:0b:23:4e:05:63:a2:33:f7:ed:8d:
         95:4b:f5:2b:96:42:d5:34:6b:b4:43:b7:2e:36:91:d5:43:4f:
         b3:22:1a:84:4c:08:08:3a:0b:29:f7:04:b3:61:84:54:c6:bc:
         9a:b6:bc:63:1d:a1:ee:81:64:6a:f5:90:7f:e7:ea:0b:19:d7:
         95:b6:b3:8f:6c:17:97:9b:c6:af:76:8f:03:d0:b1:c1:df:3b:
         f3:87:6e:24:d0:1e:c4:88:9f:cb:4e:20:b4:c4:ff:bb:f6:83:
         21:84:e8:35:e8:33:a2:ec:6b:93:57:28:cb:65:72:41:28:13:
         56:bf:51:d8:24:ee:c9:98:d7:d8:07:21:e1:e1:25:c6:5a:51:
         35:05:48:49:9b:fa:8a:b7:41:7e:ce:dd:f9:ca:20:5e:ad:90:
         a5:1d:9c:e0:0a:df:b6:d1:5c:60:5b:8f:10:e5:ee:f1:40:63:
         d9:80:d8:09:63:95:d4:67:5e:95:21:03:09:6d:ec:aa:54:9b:
         20:d8:a1:37:65:76:6f:fb:bf:e3:e3:40:9b:1a:e8:87:b2:28:
         d7:6a:e5:0a:78:7d:09:b9:be:8e:7c:41:d8:d3:7b:3e:9f:7d:
         7d:44:7f:04:44:bd:05:04:58:f4:6d:0e:c0:28:3e:39:6e:2e:
         a2:32:81:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----