Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/6b69b583-d314-3cbc-92db-88a1fc81de8f.roa
File:                     6b69b583-d314-3cbc-92db-88a1fc81de8f.roa (raw, json)
Hash identifier:          8yuRI7A44jmJ10txXHlse+4xGxha29x7CKLfugK7mD0=
Subject key identifier:   C5:C7:9C:CD:D7:F4:8D:73:65:5C:E7:96:A1:EE:BC:B2:3E:1B:C3:C8
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285848A99627036A5E606F053B9C00
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/6b69b583-d314-3cbc-92db-88a1fc81de8f.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     395831
IP address blocks:        158.115.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:27:03:6a:5e:60:6f:05:3b:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=bccf454b-059e-422c-a54c-5ad3280c67cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:aa:04:d8:6f:57:e1:4d:ac:9e:54:e7:a5:4d:
                    44:d9:fe:5e:4c:a6:ba:e5:70:f4:e0:44:5f:49:9b:
                    aa:d8:2f:84:30:13:cf:97:41:93:7a:b1:6a:8b:54:
                    cb:4d:bc:5d:51:cb:09:c2:a8:e0:b6:10:a6:51:1d:
                    39:71:08:70:53:99:26:d8:00:5c:ef:58:c1:c5:52:
                    af:88:94:a2:05:e4:fa:b5:7d:1a:2a:45:03:51:76:
                    87:b4:c3:b2:73:bd:6a:24:08:63:cd:70:11:6f:e6:
                    1d:f6:c3:fc:48:7b:e2:f3:05:1c:06:6f:ef:2d:88:
                    34:13:67:11:02:82:21:14:3f:6b:f6:20:ef:cd:5c:
                    30:a6:b9:d4:b5:b5:db:90:01:52:c4:ee:3c:c0:d5:
                    9c:98:ef:0d:55:ba:0f:99:08:a0:c6:48:17:a3:37:
                    6b:d4:fb:29:ba:14:58:fc:1d:69:b6:e3:c9:3f:39:
                    19:97:39:5e:22:a1:fa:b0:e9:b5:86:d7:94:f3:3b:
                    b6:b2:44:21:4a:86:d1:60:26:1a:f8:39:df:63:43:
                    d9:d5:2b:2e:64:99:e1:a2:a0:7d:1f:35:2c:e1:e8:
                    fe:0b:cd:2c:b9:f9:a6:6a:2a:69:29:f8:26:c0:cc:
                    bc:cd:2c:dd:7c:c2:dc:ab:da:30:3c:19:a2:36:a2:
                    8a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C7:9C:CD:D7:F4:8D:73:65:5C:E7:96:A1:EE:BC:B2:3E:1B:C3:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/6b69b583-d314-3cbc-92db-88a1fc81de8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:2f:4b:d9:4e:96:8c:de:5b:e1:a2:0f:a9:d3:b2:7c:71:8f:
         36:3d:d0:50:57:2a:b3:f3:0c:5b:4c:d4:ad:11:fd:32:e8:15:
         c7:8c:8c:7b:10:b3:88:f2:22:91:74:cb:a2:ec:0d:b3:25:84:
         59:55:4d:b5:d0:a0:98:cc:b7:cf:6f:96:23:cb:20:57:47:dd:
         26:55:78:13:61:5c:af:32:a9:5a:3e:2f:59:d8:78:07:bf:cf:
         e0:41:47:b8:e6:f2:22:3a:77:95:9d:3f:c5:e7:6c:96:3e:99:
         83:76:82:87:e2:ca:72:7b:3b:8e:bb:12:ec:3f:35:2b:9d:59:
         a3:bb:98:16:89:49:e5:b5:11:57:9d:2b:bb:c9:45:c8:62:14:
         f8:dc:7a:12:8e:0d:01:11:3c:1a:4d:91:7d:5b:aa:6a:75:df:
         1a:6a:11:25:8d:92:26:17:ca:1a:af:6a:4e:09:8b:03:ea:4d:
         b3:68:59:f9:47:47:de:01:dd:a1:b8:c2:20:16:c8:7b:b5:34:
         76:ae:56:16:12:3f:97:fc:89:1b:ab:07:99:51:e5:7e:fb:92:
         64:8d:67:83:00:10:bb:5e:24:79:9a:f4:40:25:cc:1c:40:97:
         ca:3d:47:3a:0c:f3:31:44:3b:f9:24:48:27:b3:6a:4f:49:a0:
         01:cd:7d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----