Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/950d1e58-7e2f-3c3a-94fc-602dd6903988.roa
File:                     950d1e58-7e2f-3c3a-94fc-602dd6903988.roa (raw, json)
Hash identifier:          e6GPIvT1JqhBy/5OummE7SOyFVLn15tI8uQfWfU5ZM8=
Subject key identifier:   04:77:E0:FD:97:1C:39:B0:45:9C:35:53:10:88:0E:91:E9:C5:6D:3C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848BFEBB661D053E7F30B85FC00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/950d1e58-7e2f-3c3a-94fc-602dd6903988.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     15169
IP address blocks:        104.134.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:b6:61:d0:53:e7:f3:0b:85:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=d3f285c4-5300-4598-bd1d-db16e3b30174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fc:08:7c:a0:0a:fa:86:91:57:6c:08:6f:1f:
                    67:b4:e8:64:54:7a:00:ef:b6:aa:01:be:60:bd:9d:
                    56:9f:2a:83:77:ba:2f:ee:74:eb:39:eb:a0:f9:d3:
                    cf:d3:1e:b5:93:ef:5e:61:53:73:f5:4d:15:5e:d7:
                    9e:d7:42:4e:61:0f:00:13:d3:5a:13:0f:05:f7:70:
                    be:b8:c7:0c:6a:fd:ae:d8:23:56:2b:b8:e6:94:08:
                    e2:6a:61:41:3a:98:e7:4b:36:5f:52:56:6d:69:1f:
                    e3:9e:02:f4:b9:0b:fa:41:91:3f:10:9a:26:1f:a6:
                    57:09:0d:1c:7e:9e:fc:8e:34:32:6c:f7:fc:85:a1:
                    7b:21:20:38:58:68:6b:61:d4:87:3a:56:90:d0:96:
                    8d:ba:d2:42:aa:67:d9:0f:d7:9d:35:13:a1:7e:be:
                    07:5b:b4:a9:84:e0:b8:c7:10:14:f4:1b:7a:0d:c4:
                    9b:aa:60:42:eb:be:f4:d1:d2:58:2a:10:7d:1f:64:
                    fd:eb:b5:15:c2:08:2f:99:21:70:5f:5e:99:c3:69:
                    22:2d:40:71:c5:38:e6:03:b4:83:2a:4e:16:8f:e6:
                    58:7a:98:56:f6:bf:e9:40:41:6a:2f:e2:b6:eb:d0:
                    34:f2:0a:18:41:7c:0b:57:9b:09:9c:98:ac:ed:6a:
                    1d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:77:E0:FD:97:1C:39:B0:45:9C:35:53:10:88:0E:91:E9:C5:6D:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/950d1e58-7e2f-3c3a-94fc-602dd6903988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:38:a6:4f:82:8b:8e:47:2f:13:95:3a:9e:61:db:ec:98:a6:
         ed:ac:62:77:bd:95:ef:07:9f:f1:26:d6:16:28:0d:ee:74:06:
         6e:ae:35:53:82:31:d0:3a:6b:04:34:40:48:fa:6a:04:ab:c7:
         c2:be:0c:2c:87:96:69:fe:89:30:07:7f:70:a7:66:51:7f:88:
         c6:6d:48:f9:b1:c3:ca:5f:4e:98:58:43:d7:db:2f:89:e5:08:
         8c:cb:cb:9f:74:bd:84:79:12:fa:ee:43:be:0a:35:3f:ce:c0:
         4b:8f:e1:d1:04:d8:9b:7f:06:c2:74:db:c3:b0:9c:33:e7:68:
         71:66:e3:2b:ac:5a:19:e1:4f:46:00:30:1d:f2:a1:68:8b:f3:
         8d:fb:8d:ac:3b:5c:2b:b3:28:17:17:5a:a1:b0:99:5f:34:96:
         90:35:30:82:13:8a:d5:54:90:d6:06:01:ee:36:44:fe:6c:f6:
         cf:2f:f3:3d:a2:8b:ac:60:47:90:79:0e:e7:fd:a2:d6:37:37:
         17:7d:93:e4:c9:3b:87:cc:97:08:22:97:7a:2f:1a:6d:48:53:
         05:78:cd:0a:66:3e:b5:fc:7c:46:fb:26:bd:82:b5:1a:ac:3c:
         25:e3:a8:25:c6:44:67:54:e1:8c:59:01:7d:ab:34:4f:39:9b:
         35:b9:79:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----