Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/f467df7b-a794-3999-8f87-2ca96fd841b3.roa
File:                     f467df7b-a794-3999-8f87-2ca96fd841b3.roa (raw, json)
Hash identifier:          SySoGbrjr9aIE9ncCQ5iu4+PrHXSey9HCgzqsVP3LPY=
Subject key identifier:   5F:16:E3:9B:E0:F0:58:D0:86:76:84:01:75:7A:25:47:B8:6D:4D:4E
Certificate issuer:       /CN=c7990a1d-1dec-4721-b9fc-a68ef45cb3c6
Certificate serial:       010D0C9F432858497F09A804ACE6543B3C1536A0
Authority key identifier: DD:02:37:57:A2:47:56:D3:27:16:ED:37:0E:C5:18:21:7E:F7:0E:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/f467df7b-a794-3999-8f87-2ca96fd841b3.roa
Signing time:             Sat 12 Apr 2025 01:00:48 +0000
ROA not before:           Sat 12 Apr 2025 01:00:48 +0000
ROA not after:            Fri 11 Jul 2025 01:00:48 +0000
asID:                     393746
IP address blocks:        23.186.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7f:09:a8:04:ac:e6:54:3b:3c:15:36:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7990a1d-1dec-4721-b9fc-a68ef45cb3c6
        Validity
            Not Before: Apr 12 01:00:48 2025 GMT
            Not After : Jul 11 01:00:48 2025 GMT
        Subject: CN=9114bab4-2bcd-4f05-a8ff-86401ac74566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b9:41:1d:72:e1:1b:d5:da:63:c0:9d:ea:1e:
                    6a:4c:bf:70:73:1f:86:2e:99:23:88:1d:3d:55:f2:
                    61:f8:1a:e3:33:17:d3:05:1d:29:71:46:a5:bf:3b:
                    b8:42:8c:b9:32:eb:9a:8b:ca:3c:a0:bd:bc:66:97:
                    e5:54:25:35:62:7b:3a:23:99:1b:6c:34:a9:d2:26:
                    da:79:16:ec:bf:65:5e:3d:8e:62:9a:b4:04:a7:88:
                    15:5b:e7:ad:55:88:ee:17:ee:7e:53:04:cf:97:35:
                    51:d4:48:43:28:cf:c9:10:6f:bf:35:a0:f0:7a:78:
                    61:97:eb:ce:47:bf:40:6e:eb:86:00:de:f9:ca:2e:
                    6e:f5:65:75:24:5f:96:97:ba:27:c5:c1:5d:c8:2e:
                    e6:12:94:73:6c:f4:aa:37:e1:59:f2:8a:6a:79:a9:
                    72:a5:d1:47:4c:85:dc:73:6f:10:bc:a7:6e:dd:69:
                    6a:a5:e6:9a:95:1d:1b:74:15:84:37:40:ff:ba:dc:
                    b1:3b:1f:92:51:6d:be:c1:4b:0d:ea:cb:0c:28:58:
                    ee:17:83:3b:7d:72:f7:5f:4d:ef:38:4b:32:ac:58:
                    34:69:93:f6:b7:07:24:8f:c9:ff:16:77:c0:ff:32:
                    e9:74:1c:40:fa:b2:cd:9f:e4:a2:4c:05:cd:f5:5b:
                    3e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:16:E3:9B:E0:F0:58:D0:86:76:84:01:75:7A:25:47:B8:6D:4D:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/f467df7b-a794-3999-8f87-2ca96fd841b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.crl

            X509v3 Authority Key Identifier:
                keyid:DD:02:37:57:A2:47:56:D3:27:16:ED:37:0E:C5:18:21:7E:F7:0E:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.186.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:d0:4c:29:4d:a6:9f:55:3c:fc:97:bc:46:ca:e6:06:99:de:
         3b:e1:6d:99:20:70:84:73:91:bc:f1:f0:1e:97:93:0a:46:62:
         13:da:6d:27:4e:b7:6b:73:47:ba:d0:1d:06:ac:73:a4:21:6e:
         8c:c8:4c:17:de:16:87:87:ab:38:5c:a4:69:b1:0b:fc:ac:89:
         72:d5:1c:ad:a7:c7:48:ad:03:01:99:39:96:e6:78:45:d5:c2:
         28:a9:52:20:df:e6:58:7f:dd:67:9e:d8:28:9c:fb:4a:5e:cf:
         93:57:d4:c0:ac:e1:5a:88:70:54:17:8f:f4:ec:aa:ae:ca:fb:
         4c:e3:78:35:96:5d:3a:e8:27:30:b4:be:81:72:db:9b:91:4f:
         a0:da:c3:a9:0c:86:ed:56:f0:5d:b9:fe:98:8f:36:66:bf:41:
         67:a8:d6:18:0b:83:6a:4a:5a:c6:1d:86:63:df:6c:e9:a3:f3:
         9a:f2:9d:c8:68:e5:3b:0b:07:1e:18:2f:60:25:08:99:0e:41:
         8f:b4:fb:22:16:f0:fa:62:2f:f0:4c:6a:a7:3f:0e:31:c6:57:
         a6:57:fd:17:e3:46:52:5f:03:74:42:d9:dc:b2:b6:60:73:6f:
         02:14:73:7a:95:c2:e4:47:a8:64:d8:3c:c5:02:37:34:63:8a:
         e7:a6:9c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----