Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/9fb54415-5788-3b27-a587-d451457eee9a.roa
File:                     9fb54415-5788-3b27-a587-d451457eee9a.roa (raw, json)
Hash identifier:          NQmTueLP+jCKULu7/aQNExrtjCTH7tZR4+LBEdDq5Ls=
Subject key identifier:   ED:0A:34:34:BA:25:10:FD:A2:8B:83:95:FA:6D:C9:FB:C3:91:9D:DC
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285849806F18DCD23CAD83F4D99C3C
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/9fb54415-5788-3b27-a587-d451457eee9a.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     54138
IP address blocks:        173.255.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:18:dc:d2:3c:ad:83:f4:d9:9c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=732deeb4-ea1a-4efd-9170-920023dfc661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:77:cd:4f:f8:99:c3:df:76:2d:c7:c3:fc:
                    19:e6:74:db:f2:23:f1:e6:93:40:9a:82:3c:cb:b9:
                    46:8a:0b:c7:84:0e:5c:d5:f6:3b:17:a2:39:16:c9:
                    2c:d4:5d:eb:b2:d0:68:19:cb:b0:53:d1:97:96:c9:
                    01:c4:34:e2:35:51:c2:e9:68:e6:e6:cd:76:ad:90:
                    88:4e:76:87:44:12:a0:6a:dd:f5:24:fe:9d:ae:9a:
                    42:f2:22:2e:e8:76:70:a7:27:f1:b9:92:79:f0:b2:
                    1a:82:1b:13:ab:59:3e:33:a7:35:0c:e9:e6:86:62:
                    83:4a:2d:6f:35:8c:cc:f2:5b:93:ad:34:57:b1:c5:
                    e2:9c:fd:9b:be:b0:af:fe:ad:28:aa:04:cc:8c:8c:
                    c0:e3:70:b5:b3:58:80:12:32:b8:f8:ab:d5:b0:63:
                    63:c1:f7:ce:1e:5d:86:f1:e8:12:4c:74:e2:8e:a8:
                    de:1a:9f:7e:f0:d4:62:b9:20:d8:d8:c7:c2:49:89:
                    03:57:93:ca:80:71:3a:66:df:da:35:0c:f4:ef:ff:
                    5a:d0:8c:db:2c:6b:ee:77:af:b2:5a:f9:be:79:e4:
                    2b:f0:62:83:38:69:6b:5f:d9:7b:92:e1:fd:99:0d:
                    c2:50:ef:64:c6:33:6b:72:37:2b:e8:ae:53:d9:65:
                    b0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0A:34:34:BA:25:10:FD:A2:8B:83:95:FA:6D:C9:FB:C3:91:9D:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/9fb54415-5788-3b27-a587-d451457eee9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.255.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:f2:fe:17:7b:d7:1f:62:4d:d7:52:78:c7:0d:a4:5a:99:93:
         f4:dd:ea:9a:ae:27:b2:f8:15:ac:f3:ee:a1:77:f5:28:4e:dd:
         66:57:5d:36:85:b2:38:dc:47:bf:44:3e:b4:e1:bd:20:54:59:
         02:c4:a8:20:46:75:cd:d1:85:15:b7:d8:5a:70:4b:7a:cd:c4:
         d1:37:31:c6:ed:52:a8:cc:b9:87:3c:b0:60:99:79:e8:f2:c6:
         24:2d:ba:b1:4a:7d:54:01:5e:09:6e:54:73:8a:c0:e8:5c:fa:
         84:f1:b0:53:03:85:79:15:b2:50:1f:a2:de:a7:be:0e:fe:12:
         08:86:46:2e:94:a9:45:52:35:ec:c3:e3:c3:4e:54:9a:d5:ff:
         90:ef:35:92:5e:6c:fe:47:5f:a7:5f:1f:79:76:4a:37:03:c6:
         02:b3:0c:82:fa:b0:19:66:a2:cf:73:a1:b6:c9:e7:72:f2:64:
         48:ae:86:1b:95:72:34:e6:33:97:51:17:7c:48:97:da:82:e0:
         74:a1:33:55:6e:8b:b8:a7:35:8c:d0:1c:98:8b:87:7e:13:fa:
         a3:78:9c:a4:ff:3e:b8:99:e2:d6:42:3d:98:67:34:0e:d2:ce:
         48:70:c3:11:f8:a4:ae:b0:e2:0d:f9:aa:7b:db:4d:9c:6c:e6:
         91:24:98:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----