Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b2f6facc-c4d1-3969-ac07-931ed27ee223.roa
File:                     b2f6facc-c4d1-3969-ac07-931ed27ee223.roa (raw, json)
Hash identifier:          o+a/WiMYWiwOed9eLUfxonmZrQC5uaMG5ljenOKnt4M=
Subject key identifier:   54:82:44:59:2E:B4:B2:99:93:E9:61:A0:29:A0:0D:0C:19:AB:75:EF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0E60219BEEA57810E6380
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b2f6facc-c4d1-3969-ac07-931ed27ee223.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     395973
IP address blocks:        104.134.130.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:e6:02:19:be:ea:57:81:0e:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=bc46f260-7cc1-4f9c-b6e5-680e6dfd683d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3e:d6:fa:98:6f:39:85:8f:a3:3c:58:53:3c:
                    33:85:7f:31:fb:44:e8:b9:10:2c:35:b0:1d:97:63:
                    77:26:ea:ab:dd:35:e0:1f:76:77:3c:cf:b3:7b:68:
                    d8:59:7a:42:e6:a2:c5:19:72:ad:d0:62:b6:3d:53:
                    09:58:b0:cb:9d:2c:a3:e7:fd:a3:02:c5:26:6a:35:
                    b2:6f:8a:e2:7a:c8:a5:eb:16:dc:71:41:f3:66:94:
                    e1:8d:0d:32:8d:f0:c3:a6:f4:d0:67:81:fe:ac:61:
                    0e:39:ba:16:c3:1c:16:00:65:06:15:df:5a:f2:6d:
                    9a:76:7d:4d:05:eb:ac:82:cf:b3:7c:13:70:47:9e:
                    c4:71:ff:f0:11:d6:17:85:f5:e0:39:9e:e7:7e:0a:
                    bc:17:ce:7e:9d:8c:8a:e6:56:4c:9a:69:04:fa:0a:
                    b3:a5:d8:5d:fe:62:97:33:c8:53:0e:13:0f:26:2c:
                    06:39:00:54:a3:f5:72:50:3a:fb:9b:30:27:2b:ba:
                    9c:29:df:46:3b:b5:a3:f5:42:99:ed:3c:6a:5c:68:
                    60:4e:43:f4:a4:ba:03:64:db:e4:46:43:b9:35:ad:
                    6d:69:31:f6:b6:d2:ab:16:3b:9d:68:b7:ed:86:2a:
                    5a:f2:be:e2:17:84:d6:92:51:38:4f:75:26:d0:19:
                    e6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:82:44:59:2E:B4:B2:99:93:E9:61:A0:29:A0:0D:0C:19:AB:75:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b2f6facc-c4d1-3969-ac07-931ed27ee223.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:a4:01:b9:f8:51:51:a6:88:04:bc:13:9c:6f:dc:06:32:73:
         73:83:bb:c7:e9:7b:4f:40:c1:5e:60:67:b2:16:ba:0a:88:5a:
         f2:d0:1c:0a:92:2a:21:1c:03:77:08:b4:8c:61:62:97:7c:69:
         a0:79:29:a4:50:95:c3:d4:cc:2a:8c:48:53:6a:f3:4f:74:7b:
         00:d6:0a:eb:85:08:98:b6:74:98:25:2a:ca:ce:8f:3a:0f:c3:
         a0:93:f7:61:2a:6c:74:27:02:1f:35:7e:3b:63:ca:1c:86:98:
         74:ed:bc:60:2f:5c:b3:c7:a0:46:d1:b9:c1:1e:ff:b2:27:ab:
         a3:e7:4d:0d:13:2b:52:c8:ca:61:66:2e:bf:f9:c2:dd:a3:f3:
         98:46:82:1c:06:50:18:20:ee:0a:6a:11:5e:88:fe:79:18:8c:
         d0:85:e3:b6:a9:f8:6b:a4:46:24:81:20:85:f5:6e:c5:6a:a1:
         63:f2:05:7a:fc:d0:46:b1:b8:34:ec:49:e1:00:3b:b7:be:01:
         a4:21:78:d6:f0:52:ac:40:56:2e:4b:29:dd:8e:e4:f4:f4:8d:
         3e:bb:da:83:2b:13:0b:44:1c:01:4b:3b:c0:d0:98:a8:dd:e8:
         a8:ef:e0:cf:9f:db:a7:42:db:e0:f6:0b:9e:2e:db:50:27:89:
         60:e4:1d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----