Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/d0e44e2d-6917-3ba6-a4af-5a90716462a1.roa
File:                     d0e44e2d-6917-3ba6-a4af-5a90716462a1.roa (raw, json)
Hash identifier:          /+npMqP4gDz1t0nSavuQC8E/tlxc06fAfJLBi3v3LNw=
Subject key identifier:   21:8F:0F:80:C2:CB:DC:5A:5D:DB:DA:E6:AA:F2:D1:11:97:34:71:6B
Certificate issuer:       /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
Certificate serial:       010D0C9F43285848EF6158D096A7D9DCF7224E40
Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/d0e44e2d-6917-3ba6-a4af-5a90716462a1.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     62707
IP address blocks:        142.202.192.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:58:d0:96:a7:d9:dc:f7:22:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=cf9e6edc-0880-4bb6-ab6a-50236b73881f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b0:20:ec:9c:0e:e1:51:d6:2a:da:95:19:09:
                    47:36:76:75:9e:bd:84:93:18:c1:9f:e1:b8:09:cf:
                    12:3e:87:bf:bd:ac:49:e8:1e:e7:53:5a:ca:83:51:
                    d4:f8:4d:51:7a:6d:10:eb:10:a1:14:62:ce:77:84:
                    2d:9d:53:43:7c:7b:65:0d:0e:94:b2:0f:30:88:b2:
                    ea:ef:49:d0:77:7e:86:e7:7a:ee:11:b4:ff:e2:97:
                    0f:7c:b3:e0:b1:25:1a:50:82:64:b7:b0:ab:87:f6:
                    a1:2e:6d:ea:1a:0b:1c:d8:58:8c:55:49:3f:1f:04:
                    0c:59:9f:83:4b:2c:2c:e9:6e:1c:d2:a8:16:bc:56:
                    fa:b8:89:ed:06:06:03:86:64:e4:0b:b2:6c:fa:94:
                    18:09:5b:bc:e8:d1:05:dc:c5:a4:ca:51:bc:a4:51:
                    ea:10:39:04:a6:a5:0f:6a:6b:26:7a:d0:db:af:9a:
                    d3:8d:f3:57:af:94:72:44:0f:71:0d:32:38:ef:35:
                    45:c7:dd:ae:fe:26:eb:78:3c:20:6f:79:57:ae:f6:
                    8a:72:32:43:ea:31:c2:d4:57:1c:c9:87:f6:7d:fb:
                    b4:f1:c9:32:7c:ec:bb:a0:58:5c:80:35:b6:73:ee:
                    e4:54:cf:4a:29:01:42:6a:99:61:d9:76:3d:84:33:
                    5b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8F:0F:80:C2:CB:DC:5A:5D:DB:DA:E6:AA:F2:D1:11:97:34:71:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/d0e44e2d-6917-3ba6-a4af-5a90716462a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl

            X509v3 Authority Key Identifier:
                keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:47:08:22:fd:9a:34:37:e1:ab:a7:1a:f9:8f:25:b4:18:18:
         e5:f1:c0:3b:91:f5:7f:f1:28:64:ca:bc:92:fe:35:da:46:72:
         20:c4:62:f0:93:26:22:09:c3:d2:e7:e9:4d:7c:c6:b7:28:94:
         70:bb:1c:d6:98:79:e8:c3:66:2d:f5:78:87:b0:85:cb:57:c7:
         5c:b0:d8:4f:5a:ad:02:39:ba:c8:48:02:43:28:41:63:90:5a:
         b4:93:03:5f:75:74:85:10:2f:06:3f:db:c9:7f:f7:b8:f6:de:
         ea:ff:14:82:f2:d4:6d:e5:f1:6f:80:92:5f:12:8a:2e:0f:54:
         a8:67:ca:02:87:d8:57:39:1f:0b:ee:2a:27:33:eb:19:ad:c8:
         c5:e3:6a:84:73:1d:63:f8:3a:9d:f8:f3:22:a1:ba:69:28:1c:
         a6:ed:29:8c:a3:38:6c:78:4c:29:2b:46:03:60:9f:a8:91:76:
         de:81:db:6d:40:40:de:01:54:f3:8e:8f:bc:a1:bc:16:2e:d9:
         16:5c:31:d2:da:fa:62:a3:42:88:f4:e3:eb:d1:5b:f4:90:d7:
         7c:58:90:f6:c1:68:ac:f4:34:52:24:2f:3b:3e:7e:e9:51:e4:
         25:35:e1:fa:ba:34:70:8e:f5:40:a3:31:1c:d2:cf:f9:bd:2f:
         4f:61:34:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----