Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/71e25789-552e-32cd-b357-f5031b3e5994.roa
File:                     71e25789-552e-32cd-b357-f5031b3e5994.roa (raw, json)
Hash identifier:          FYPLT/qvilGuGUbD+YxFQHF+XVtivG6OUhCqqYlwGxc=
Subject key identifier:   26:F2:0C:DF:E0:2C:C7:E4:E9:11:2E:C0:56:ED:42:56:9F:6D:FE:EE
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848BFEBD80D37EFDE0EAD5A8380
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/71e25789-552e-32cd-b357-f5031b3e5994.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     15169
IP address blocks:        104.134.222.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:d8:0d:37:ef:de:0e:ad:5a:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=1c5327d8-cb3f-4e0b-807d-657868e6ac77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fa:ee:78:07:f3:a3:f5:8e:7b:e7:b7:47:f9:
                    77:4b:47:70:ad:09:4d:b4:fd:eb:13:85:73:40:33:
                    0f:b7:30:cc:b7:36:9e:24:aa:92:15:5d:ba:66:cf:
                    3c:a7:b1:77:8e:b1:7b:a9:6e:3f:c7:ca:e0:2f:81:
                    b3:86:68:32:d8:32:49:04:6a:f6:8d:f7:c6:d6:f7:
                    39:0f:94:8f:71:b9:70:32:7f:06:d9:37:8a:70:bf:
                    5c:ee:92:cb:74:f4:f2:8f:99:16:85:eb:a4:56:6f:
                    65:3e:67:d1:4b:be:8c:cd:2d:c8:93:8f:fd:76:32:
                    75:97:c6:55:e2:91:d1:ce:df:05:29:67:1a:3e:46:
                    9c:ca:96:60:8d:2f:72:d8:e2:07:2b:95:30:8d:1b:
                    c3:b3:86:93:e6:74:a5:2c:35:f5:c0:67:98:af:e6:
                    c5:9b:97:1a:32:02:cd:37:81:c3:1a:b7:10:9e:40:
                    4f:58:86:0e:e0:0b:2b:ca:99:4f:94:b2:f2:7e:a5:
                    2d:dc:95:a5:de:49:29:57:6a:14:9a:63:b8:4a:ec:
                    cc:f7:2d:73:38:d5:46:5e:19:9d:30:56:14:60:09:
                    5a:64:e3:79:d6:7e:8c:23:3a:a7:34:ee:24:11:d5:
                    76:a7:66:9d:d9:81:9a:c3:06:8e:5a:c2:f6:ae:2a:
                    86:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F2:0C:DF:E0:2C:C7:E4:E9:11:2E:C0:56:ED:42:56:9F:6D:FE:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/71e25789-552e-32cd-b357-f5031b3e5994.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:e9:23:24:6f:02:b1:51:9a:97:27:d7:47:fb:f4:09:4d:7d:
         4a:00:ae:62:ac:01:04:31:ec:af:30:45:0f:28:da:f5:af:d6:
         47:a2:c8:d4:84:ee:82:64:8e:c3:9c:22:83:41:79:5e:84:53:
         42:61:b1:87:a7:e4:de:41:55:ef:84:ba:06:08:f8:0b:ab:da:
         c6:61:31:db:de:3c:3d:13:8b:39:22:b1:e8:b9:40:c0:3e:1d:
         a2:73:44:a0:e8:fd:17:01:b8:40:aa:87:32:f1:ef:09:ad:4d:
         c4:aa:11:2e:4f:18:4f:18:5f:68:6e:d4:41:b4:98:9d:d6:ce:
         dd:78:34:1f:7f:52:86:1b:e9:e0:72:ae:97:dd:53:55:d6:1a:
         80:8f:56:97:ca:e6:63:84:39:3b:30:ae:9a:72:65:7d:3b:c5:
         92:6f:64:04:49:5c:08:7c:c9:9a:d9:80:1b:58:a4:ec:9a:a9:
         b3:75:ff:bf:97:db:bd:92:ca:da:9c:71:ac:9d:d8:ca:b8:f6:
         8c:0a:49:5c:f1:d4:ab:9d:3f:1c:29:3f:65:db:cd:de:4e:bc:
         65:13:b0:db:6d:f2:2c:4b:96:e3:53:12:69:0b:0c:aa:49:85:
         10:c9:ec:3c:36:67:82:b8:68:23:db:b8:17:df:1a:a3:f1:2c:
         4c:09:4a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----