Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/55c10b42-1e3f-391a-803f-94a6efd0d529.roa
File:                     55c10b42-1e3f-391a-803f-94a6efd0d529.roa (raw, json)
Hash identifier:          cKO1OJauvH56tcuVqb7AmpChmi29Uz5gcOndAJtIF7Y=
Subject key identifier:   FD:C9:A5:8E:1C:33:CE:BB:7B:2A:4F:15:7F:83:EF:8D:7E:B2:22:0C
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F432858495529501B2827C5507344E1C0
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/55c10b42-1e3f-391a-803f-94a6efd0d529.roa
Signing time:             Fri 28 Mar 2025 01:00:41 +0000
ROA not before:           Fri 28 Mar 2025 01:00:41 +0000
ROA not after:            Thu 26 Jun 2025 01:00:41 +0000
asID:                     21949
IP address blocks:        173.243.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:55:29:50:1b:28:27:c5:50:73:44:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Mar 28 01:00:41 2025 GMT
            Not After : Jun 26 01:00:41 2025 GMT
        Subject: CN=20e4b282-be2f-455d-b2f5-8eede08afafd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:08:26:db:89:fc:4b:aa:6c:c4:4d:30:53:86:
                    95:f3:da:e0:5f:77:0c:23:e6:7e:3c:31:61:a9:8b:
                    f0:7c:b1:19:ff:dc:3c:18:86:61:56:29:c4:e1:56:
                    85:a2:7c:b7:3d:de:75:fb:9d:11:5e:a3:4f:66:a3:
                    60:63:75:a5:d8:dd:a1:50:85:0d:06:64:dc:1b:0b:
                    7c:42:56:dd:c5:c9:d7:9c:e8:ba:4c:f2:03:f3:91:
                    c3:56:cd:14:b9:d3:23:c6:8a:94:87:8d:18:cb:2b:
                    8a:19:4b:32:73:82:5e:04:3a:46:a1:ed:bc:e8:08:
                    51:8b:10:ea:88:7c:c7:ae:57:a6:9e:66:03:ca:83:
                    c9:b7:d9:38:75:48:36:2c:87:26:d2:50:e2:0a:45:
                    3d:03:7a:5c:e5:2d:0c:14:11:0a:57:b3:81:a9:98:
                    61:74:53:0f:2b:43:c5:15:97:7b:5e:0b:ce:03:d5:
                    61:ab:58:f3:ea:e3:c4:08:21:11:bb:4a:19:8a:36:
                    a1:5a:6f:a5:ed:88:ac:26:95:cf:c8:a4:45:5e:d2:
                    81:cb:95:1a:ae:95:5d:68:88:9e:53:b7:3c:6c:75:
                    6f:41:07:98:a2:0c:c8:9f:da:9e:77:e3:af:15:26:
                    58:66:6d:82:83:7b:28:0b:dd:37:44:a2:d3:c0:c9:
                    2c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C9:A5:8E:1C:33:CE:BB:7B:2A:4F:15:7F:83:EF:8D:7E:B2:22:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/55c10b42-1e3f-391a-803f-94a6efd0d529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.243.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:24:3d:21:6d:27:58:35:e6:0e:64:32:84:7d:0f:fb:57:0f:
         6d:57:24:69:5d:d2:be:5c:8c:28:26:7d:a4:9f:05:a2:5b:32:
         33:c9:1c:bb:94:ca:c6:de:98:b7:61:1c:55:40:42:0b:ec:39:
         07:a7:20:dc:12:db:da:63:f9:a7:42:a4:ff:66:a4:e1:6e:32:
         7a:2b:61:f1:67:52:06:65:06:a5:ce:36:6d:d6:19:07:18:25:
         c2:2c:c6:8e:97:a1:d8:1c:40:7c:0f:98:e0:5b:63:17:d5:a0:
         2a:1a:b2:8c:42:42:34:56:b9:24:95:e1:92:c8:bc:98:87:16:
         85:52:4d:c5:2c:df:3c:b5:8c:8b:8a:2d:e6:ed:40:4a:16:5b:
         2b:6f:3c:e6:7e:92:1f:79:23:3e:82:9b:6c:0f:60:5d:89:b1:
         3a:73:86:95:ef:cd:8a:40:8b:ae:48:70:fb:5b:e2:1a:d5:da:
         37:47:67:85:30:5c:8b:43:81:82:ff:59:09:e1:38:63:bc:2a:
         87:fc:cf:c2:76:37:2e:8f:77:e2:4e:75:aa:6c:49:a9:86:66:
         d0:26:e4:34:55:f2:8a:40:a5:5d:77:df:bc:67:35:56:d0:71:
         43:95:99:bd:da:34:f7:e2:ee:d6:ba:5b:02:8d:6f:2b:13:c5:
         3e:ef:d8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----