Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c258e36e-fd95-31f2-b381-fab16f55d8da.roa
File:                     c258e36e-fd95-31f2-b381-fab16f55d8da.roa (raw, json)
Hash identifier:          wCaftBzyQguVl+K4jDxOxuOhKmM8bpaGWoV4z3qHvtA=
Subject key identifier:   2A:25:BB:10:D1:FB:8E:12:BF:E1:BE:80:74:06:39:D6:CE:19:5D:06
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F432858493243DC67AC0569A5BE8AF700
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c258e36e-fd95-31f2-b381-fab16f55d8da.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        158.115.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:dc:67:ac:05:69:a5:be:8a:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=f434d54e-4e74-498e-8e83-a72a864b2607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cb:59:05:9f:e5:40:f9:00:5b:63:0f:d3:87:
                    be:ce:2a:fc:ce:e4:86:fd:fb:41:63:30:d5:89:5b:
                    31:9e:b2:9a:08:50:39:b3:f8:2e:6c:f6:71:f2:95:
                    67:cf:49:c2:ce:44:c3:a8:d8:ea:27:e4:50:c9:69:
                    18:ef:a2:70:fa:bf:54:b9:82:d1:37:a6:01:73:d6:
                    6e:5a:61:5c:9b:61:38:70:0c:1f:3f:c1:1c:6d:e5:
                    48:38:67:d4:36:c9:0f:5a:fe:58:c1:5f:7d:c8:cd:
                    51:27:10:55:0c:b8:0f:90:1c:4b:f6:33:0b:da:f4:
                    8e:e3:b7:32:e4:be:e0:20:92:dc:ae:ef:92:04:0d:
                    40:c8:30:3f:7c:65:a2:29:5e:a1:60:a3:04:f7:7b:
                    7e:cc:a8:eb:64:bd:f4:7f:13:b9:2b:e5:0c:ff:cf:
                    5b:e8:9e:9a:3d:51:14:c0:0d:65:bd:a3:f1:2c:47:
                    9f:b8:fb:c0:09:e4:d6:0f:3d:7a:ef:3c:cb:f6:ae:
                    b7:ab:86:70:7c:b5:c0:8b:14:6d:bc:19:1c:ca:b8:
                    84:7a:17:81:d1:59:86:2f:61:5a:95:76:1c:32:de:
                    58:f4:bc:46:0d:37:e8:f8:87:ec:32:a3:88:4c:7d:
                    ba:ed:cf:92:8d:36:5f:eb:d7:11:a5:d7:52:57:1e:
                    00:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:25:BB:10:D1:FB:8E:12:BF:E1:BE:80:74:06:39:D6:CE:19:5D:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c258e36e-fd95-31f2-b381-fab16f55d8da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:b7:6a:6b:87:91:d0:47:aa:62:a1:61:50:30:ec:b1:3e:fa:
         1a:d8:02:07:02:2d:c1:3b:91:dc:72:ab:47:8f:50:4a:7b:a0:
         96:45:5e:8f:13:3c:2b:a9:25:d1:93:dd:2f:ed:0e:56:8c:d6:
         64:2a:d9:b6:89:37:0c:99:f4:aa:8d:df:3b:4a:50:24:f1:3a:
         9f:a2:78:99:a1:42:f8:83:fc:9e:66:85:ca:d1:1a:ed:27:40:
         d4:2e:6e:46:ab:be:cf:c0:b1:83:85:fb:9c:ad:7d:a0:b7:ea:
         76:44:1c:4f:9d:f6:48:d4:b6:cb:2f:71:a8:29:8b:46:b0:8a:
         ba:a7:3a:72:57:e4:e7:e7:ed:88:0a:3f:69:71:5c:ac:7b:c1:
         4b:3c:22:fd:49:1a:74:ff:83:f3:4f:7f:67:2f:e7:1a:fd:bc:
         0f:79:c8:1e:57:b2:e1:bc:ed:3e:fe:cd:d0:1a:08:32:73:d7:
         be:95:3c:cf:d4:11:b6:b0:98:e7:8d:7c:f2:2f:bc:c5:1c:ee:
         6a:03:6a:40:0d:60:56:c6:34:a9:7a:7b:5a:fe:6d:94:2b:d1:
         30:51:e8:e6:c4:ab:49:4f:ab:63:f4:1b:b3:24:6c:17:1c:fe:
         78:44:44:b7:42:11:58:8f:0c:53:7f:1d:9c:ce:94:11:5d:65:
         49:67:41:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----