Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/fd5dce4c-7a3f-31f9-bc18-f99a17c964e7.roa
File:                     fd5dce4c-7a3f-31f9-bc18-f99a17c964e7.roa (raw, json)
Hash identifier:          Z9afdPZJZhmeYl0mfboFwmY4ky5roIbcFSndD0lstxA=
Subject key identifier:   91:5B:C8:20:0F:0D:9B:22:21:F0:20:C9:8B:5B:61:AA:C7:ED:48:02
Certificate issuer:       /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
Certificate serial:       010D0C9F43285848E0D9E74BCB56243B3F27D510
Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/fd5dce4c-7a3f-31f9-bc18-f99a17c964e7.roa
Signing time:             Fri 14 Feb 2025 09:07:00 +0000
ROA not before:           Fri 14 Feb 2025 09:07:00 +0000
ROA not after:            Thu 15 May 2025 08:07:00 +0000
asID:                     36734
IP address blocks:        66.54.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:d9:e7:4b:cb:56:24:3b:3f:27:d5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
        Validity
            Not Before: Feb 14 09:07:00 2025 GMT
            Not After : May 15 08:07:00 2025 GMT
        Subject: CN=e863c570-9690-44b0-8fa3-d698bce91bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:db:d4:f0:5a:73:f5:26:ca:1c:86:a3:a7:72:
                    75:47:94:d2:b1:69:7a:34:00:13:0c:50:f7:58:e3:
                    11:4b:c0:c7:10:44:c8:52:31:0c:d7:a5:c5:e5:59:
                    a4:21:da:75:ac:c3:b8:18:0c:33:78:a4:01:a7:0f:
                    43:e2:e3:34:f7:4b:9e:1a:04:aa:33:5a:3c:4d:a9:
                    76:e9:51:70:54:49:ca:77:46:b8:80:d1:5b:cb:25:
                    59:95:da:06:c6:b9:1e:6b:5b:2f:e1:a0:41:a2:3a:
                    03:77:cd:2d:7a:98:2d:99:c2:d3:2c:6c:c5:c5:26:
                    1b:fa:d2:92:81:4e:25:ac:db:e4:d3:4e:3f:37:55:
                    bc:9f:9c:28:ab:00:ab:e3:60:d0:31:1e:53:40:de:
                    2a:ec:ef:71:ef:ca:40:10:fe:d9:47:22:9c:18:e6:
                    d5:d9:cc:9c:33:98:9f:aa:46:97:88:31:48:21:18:
                    8d:91:19:67:00:af:c8:ad:d8:9b:77:f4:9a:03:56:
                    79:98:53:b2:cf:04:49:62:83:e0:e9:e0:ba:b5:a7:
                    e5:81:8f:68:5a:50:45:46:9f:c4:2a:cf:e8:9f:e1:
                    60:60:7d:55:90:7d:b4:f3:20:49:2b:4e:c2:98:ae:
                    de:11:ed:8b:76:62:2c:58:41:e8:ce:4c:25:80:d8:
                    7e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5B:C8:20:0F:0D:9B:22:21:F0:20:C9:8B:5B:61:AA:C7:ED:48:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/fd5dce4c-7a3f-31f9-bc18-f99a17c964e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl

            X509v3 Authority Key Identifier:
                keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.54.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:d6:4f:86:ad:73:8a:64:f9:51:38:92:a3:f3:ab:d2:36:5e:
         77:44:f6:dc:da:2c:0a:28:dc:80:ef:2d:1f:f0:4c:8b:70:37:
         98:d1:6b:ac:af:44:e2:a0:13:47:47:d6:48:72:b7:8d:1b:be:
         ec:81:c3:2e:a3:99:c4:a2:cf:49:fa:53:06:de:e9:cf:6f:c2:
         4f:a4:3f:32:69:67:28:7d:bc:b5:35:cd:37:31:09:ad:8b:c4:
         eb:66:9d:e9:77:4c:c2:58:92:68:8c:95:ad:6f:5b:6a:a5:6e:
         fd:f2:a7:4b:2a:0f:f1:16:84:77:b4:55:a3:27:dc:ec:79:f4:
         9d:6e:ab:fa:10:b8:bb:5d:4f:57:79:c5:21:bb:db:39:11:c7:
         25:ee:1a:82:0a:4a:df:e1:37:95:3f:77:3e:d6:9f:f5:1c:77:
         22:b0:7c:9e:01:72:40:f1:41:b6:61:cf:f9:7d:91:3d:be:84:
         ff:2e:ec:71:8d:a6:a8:99:3f:89:0a:43:b1:3e:9a:96:1d:0c:
         98:f7:c6:3c:83:9d:ae:92:06:38:3f:4d:32:09:74:91:5b:1a:
         d1:f8:5f:89:17:4c:8c:54:3e:ae:70:63:32:8e:55:9c:09:d9:
         96:1d:8b:18:ca:df:48:98:d2:39:40:26:1d:af:ed:d6:77:78:
         09:04:b0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----