Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/976240a9-240d-3a67-94a0-632337d1ebf3.roa
File:                     976240a9-240d-3a67-94a0-632337d1ebf3.roa (raw, json)
Hash identifier:          9PGYkoMiqL1kJP5scaf0OYH5T9fPV2zpQqOcClLhSvo=
Subject key identifier:   1C:47:EE:32:45:EB:09:BC:68:6E:90:54:87:80:F1:14:3D:3F:31:B3
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848BFEBBEA73ECFD4129780D900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/976240a9-240d-3a67-94a0-632337d1ebf3.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     15169
IP address blocks:        104.134.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:be:a7:3e:cf:d4:12:97:80:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=aee3f948-6a5c-4ff1-bfdb-3880ffe9531e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9f:97:5e:93:62:fa:c2:f3:5e:55:e0:99:5d:
                    7f:76:35:66:57:f5:11:f9:a3:26:de:a8:b2:08:0f:
                    28:30:ec:5f:8e:ff:26:f7:7a:ab:ed:7a:ce:71:3a:
                    52:c7:bc:94:41:dd:a8:fc:12:27:00:4a:93:5a:47:
                    84:ed:fb:22:42:69:73:f5:74:13:95:24:3c:e8:a8:
                    25:ab:e6:e8:1a:fd:58:64:1e:b6:c3:a3:6a:fd:55:
                    cb:db:a0:82:9f:a6:67:86:7c:78:89:3c:d5:75:d9:
                    cb:e8:05:8b:f8:4e:49:86:d4:49:23:47:09:43:6e:
                    db:85:b5:41:89:69:b2:27:c5:8d:a9:7b:d2:8c:03:
                    86:5e:5d:7e:f4:f3:35:2d:eb:8c:53:7e:68:2d:14:
                    6c:74:f7:e3:22:51:1e:86:7c:13:78:e1:d3:85:d4:
                    1e:99:1d:c1:7a:70:72:30:31:a5:db:1a:fc:8f:ce:
                    c9:6c:92:67:b6:f3:00:43:1d:9b:da:d5:53:66:15:
                    24:49:d8:64:f7:06:ef:31:91:f4:80:f5:b0:dd:59:
                    e7:0b:61:53:dd:05:b2:3e:1a:d3:40:d1:7d:49:6b:
                    1b:3b:4b:5a:e7:64:e2:8b:60:7a:bb:ec:97:05:cc:
                    90:c0:10:d6:5b:96:a1:9b:70:9f:7d:bb:ec:dd:89:
                    d7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:47:EE:32:45:EB:09:BC:68:6E:90:54:87:80:F1:14:3D:3F:31:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/976240a9-240d-3a67-94a0-632337d1ebf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:b5:30:bd:f2:55:89:40:0b:a1:ec:b1:25:c8:9c:e7:e3:b6:
         ce:d6:39:ad:fa:c0:fe:38:24:94:02:07:62:bf:a5:36:ac:7c:
         d7:f8:3c:1b:0d:49:de:ab:59:ec:4d:b3:07:4a:0c:65:9d:76:
         6f:a5:13:21:43:ca:a0:8d:e7:cb:ac:64:3b:fc:61:33:c6:38:
         37:68:5d:d1:52:99:e6:3f:ab:9c:33:78:af:8e:2f:40:5b:90:
         c9:63:9b:66:16:60:92:9e:aa:f8:48:25:dc:f3:79:a2:f5:c8:
         e9:d9:09:5c:89:a8:7f:20:7f:95:f1:98:47:00:f6:1d:71:2c:
         d9:ac:56:6f:91:23:e1:07:58:b1:66:1e:44:c1:8c:e9:e9:b6:
         7c:be:ae:66:48:f7:3b:b0:27:84:54:06:fa:8e:2a:6a:cf:f8:
         ec:26:0d:9a:d7:53:68:d4:ed:eb:a2:bd:a6:37:1e:6d:2d:a8:
         a0:c7:2b:29:0d:54:18:f2:87:f4:08:69:b4:9d:b0:98:42:c9:
         c9:38:50:d6:ca:05:5f:cb:6b:9a:9b:55:f8:4a:de:3b:1d:70:
         c9:69:6a:0f:b3:79:92:81:36:d2:c9:44:d5:75:14:cd:31:4d:
         c7:f9:ab:75:a4:3f:9e:5e:e1:0a:7e:87:f6:73:df:ed:87:da:
         94:76:97:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----