Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/e7681ea2-8291-3000-8a57-dc6bfaead88c.roa
File:                     e7681ea2-8291-3000-8a57-dc6bfaead88c.roa (raw, json)
Hash identifier:          cnRpLbXkV21HpcdljXPcCtkWdS0r0cPZ+PiR2GvUHvk=
Subject key identifier:   B5:87:6C:9A:61:CA:C2:3D:0F:CE:B6:BB:11:B0:08:40:58:E8:C4:C2
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F4328584858A0521B050D68C9936E1880
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/e7681ea2-8291-3000-8a57-dc6bfaead88c.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     18594
IP address blocks:        64.57.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:52:1b:05:0d:68:c9:93:6e:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=8c344439-7124-4e2b-b551-dbabf56524df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:71:83:c0:98:54:b8:a8:85:a3:47:e1:b1:ca:
                    64:b7:00:d1:b9:44:09:4b:aa:67:de:2f:42:df:ea:
                    9d:9f:3c:15:70:7c:d2:32:b5:70:f1:b4:69:4c:9c:
                    6a:ff:76:7a:26:20:98:08:25:bc:b5:bd:22:63:af:
                    e4:93:17:55:27:81:fb:e0:e5:d0:32:61:e8:d4:1d:
                    15:4a:93:00:3c:64:39:e4:32:69:a5:16:ec:7f:79:
                    e5:1f:93:f2:fd:b1:6e:af:98:f9:ee:3a:14:ff:81:
                    4c:24:55:5c:1d:0b:17:b2:03:9c:45:56:39:63:47:
                    9d:8d:c3:08:ad:d1:b0:a3:f6:22:bf:02:79:3f:79:
                    c5:1b:02:01:83:34:35:fe:19:d7:36:51:55:92:c3:
                    b2:7e:6d:a0:c7:8f:55:a0:0d:a0:2c:40:8f:79:b7:
                    0d:2d:85:8d:fd:d4:c2:35:8a:d2:03:b8:45:ff:63:
                    57:43:2c:9f:bb:6b:21:3c:17:9a:c2:88:9a:09:49:
                    18:89:99:e0:f2:97:40:40:62:39:b1:22:8a:79:79:
                    0a:e0:30:ff:84:53:aa:14:a8:b2:d4:8b:3f:f5:70:
                    d3:d0:65:f1:77:f9:34:13:25:06:36:fb:14:69:b5:
                    70:5a:08:b1:1e:aa:e2:53:ab:aa:a9:8b:3d:81:bd:
                    c8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:87:6C:9A:61:CA:C2:3D:0F:CE:B6:BB:11:B0:08:40:58:E8:C4:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/e7681ea2-8291-3000-8a57-dc6bfaead88c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:a0:26:62:60:65:c9:6d:36:33:3a:13:2c:65:d7:51:5e:ac:
         28:d0:fa:ec:cc:5f:fe:ae:94:5c:fc:0c:6a:52:69:97:51:df:
         ec:97:a4:c5:ea:04:3c:42:20:6f:f9:ba:69:05:4d:c2:cc:53:
         e4:53:52:fc:2a:67:0b:92:ed:84:58:9d:87:a9:3e:63:fb:36:
         b8:fe:c8:04:cf:74:c4:8a:e8:85:45:8c:c2:5b:82:e2:a8:58:
         07:49:e6:6d:b9:c5:ea:d9:eb:51:c7:17:f6:3a:01:32:02:4c:
         46:de:6b:36:95:02:31:68:ea:09:cc:22:b8:c8:3b:86:4c:94:
         f4:49:35:6c:df:68:2c:c3:81:4d:a0:88:7d:3f:ca:49:0e:b4:
         bf:f6:50:ea:da:55:95:3c:bd:23:d1:6a:49:87:be:94:41:bd:
         81:a7:2c:0c:71:27:03:b4:e7:f6:36:a5:a7:77:02:ca:8c:54:
         ca:e2:0d:45:5a:ff:12:e3:a0:11:99:21:64:b7:1e:77:99:35:
         54:9a:3b:49:73:5b:31:29:f6:4f:81:49:16:c1:c7:87:45:3a:
         1d:ec:3f:c6:c3:72:bc:87:98:90:a7:fb:b5:3b:5a:a3:96:a0:
         08:5c:33:fe:ea:a0:e3:8c:c9:52:b5:b7:e0:98:9d:f7:ed:01:
         a2:30:cd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----