Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2/1d41505a-addb-3aa8-ac3c-af6315616f55.roa
File:                     1d41505a-addb-3aa8-ac3c-af6315616f55.roa (raw, json)
Hash identifier:          vrTMTSZW1tTkwlnR2KRqb0IRY8whrgPBBVrOMdhtIoo=
Subject key identifier:   C3:51:C9:FE:56:9F:F3:C2:61:62:23:E2:59:B2:41:2A:A0:17:E7:D2
Certificate issuer:       /CN=db54b165-1bfa-4624-b8bc-680c5d3ac9c2
Certificate serial:       010D0C9F43285848E16BE3B612DAAFFD0C5A6600
Authority key identifier: B3:DC:97:63:79:E1:2F:3F:C9:1E:EB:26:1B:68:74:93:66:66:01:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2/1d41505a-addb-3aa8-ac3c-af6315616f55.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     395990
IP address blocks:        168.245.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:e3:b6:12:da:af:fd:0c:5a:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db54b165-1bfa-4624-b8bc-680c5d3ac9c2
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=bb803ca4-2203-4898-a482-7a6f7dd53302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:da:9b:46:28:77:d3:32:21:f1:46:ea:63:19:
                    a4:7f:13:c3:8b:77:ef:bf:f1:66:1e:08:f9:b1:4c:
                    5d:c4:0a:c1:d5:a0:40:79:24:fb:de:74:ac:53:3c:
                    cc:c6:a4:de:d1:10:f5:71:fe:38:8a:70:02:8e:31:
                    ec:bf:3e:8d:54:c4:6b:68:cc:14:71:15:c1:b2:68:
                    17:f8:c2:c7:11:bd:48:d3:cb:d0:79:b9:5c:b2:9f:
                    60:ef:4c:51:56:ea:e2:c3:7a:5d:56:c0:d7:99:0c:
                    c7:ca:9f:d4:21:f0:1f:cd:fc:a6:59:04:b9:04:12:
                    93:4c:9c:59:66:b8:d9:13:72:ae:e1:52:6d:bb:40:
                    0d:f8:05:0e:37:a2:f7:8e:46:a3:6b:6b:8b:05:a8:
                    16:a8:4d:4a:fd:13:22:84:f0:58:5e:80:40:31:50:
                    11:79:c5:bd:bd:ea:d0:9b:5c:67:44:ec:98:cc:41:
                    57:8b:d9:23:63:da:9b:d5:f3:b5:0a:2f:47:4e:87:
                    dd:c7:4b:d6:c1:46:28:20:aa:11:4b:bd:2d:d9:09:
                    be:57:a8:ee:07:c1:e1:5b:93:62:34:c8:0f:bc:7c:
                    65:9c:67:e9:51:fd:92:06:04:d4:be:89:89:50:c1:
                    3a:d9:3c:79:12:64:f2:5a:1a:c6:d1:76:dc:be:05:
                    b9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:51:C9:FE:56:9F:F3:C2:61:62:23:E2:59:B2:41:2A:A0:17:E7:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2/1d41505a-addb-3aa8-ac3c-af6315616f55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2.crl

            X509v3 Authority Key Identifier:
                keyid:B3:DC:97:63:79:E1:2F:3F:C9:1E:EB:26:1B:68:74:93:66:66:01:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/db54b165-1bfa-4624-b8bc-680c5d3ac9c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:38:3f:a7:06:2b:44:88:06:b0:05:82:30:c9:d8:44:72:af:
         a1:fc:f1:17:78:ff:b1:9b:6d:ca:d6:0a:2e:a2:f2:48:4d:75:
         af:fb:8e:34:7d:88:fc:e3:44:47:9a:a6:ae:5d:2c:26:05:22:
         4a:28:ac:f9:a2:78:9a:bd:83:7f:fc:bd:d0:5d:a6:ed:9c:a4:
         4e:a7:d4:50:12:3d:2d:ec:dd:c5:2f:9c:f6:b6:fb:15:d0:73:
         c4:74:f4:cc:b6:5c:f6:9e:41:16:c5:d7:1d:14:eb:92:a3:98:
         32:d9:c0:14:9e:d2:31:ea:b3:7d:e8:7d:55:c1:a9:c7:69:b3:
         44:4d:9d:32:68:c0:87:c5:c1:0d:3c:48:4e:2c:f7:c6:1d:38:
         e4:2f:00:d8:89:06:47:6c:0b:32:c4:70:6e:9c:d5:df:61:9f:
         81:67:fc:25:c8:bc:e3:5c:9a:34:e8:35:4b:8c:20:04:e7:39:
         e5:26:dd:1a:41:36:79:8c:47:7c:49:ee:e9:88:5a:fb:34:1b:
         7e:39:8e:ab:ef:32:66:90:22:a0:1d:06:2d:0b:e5:89:37:69:
         b5:a9:fe:9a:cc:54:45:82:e9:ce:42:39:76:64:8e:52:75:00:
         c0:72:f2:13:88:dc:51:d0:b2:00:9d:40:ba:1e:fd:22:f3:24:
         aa:9d:a5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----