Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8658f928-bb2e-351c-baa0-b043397f7b78.roa
File:                     8658f928-bb2e-351c-baa0-b043397f7b78.roa (raw, json)
Hash identifier:          ec90WDXT6gwCYBtjgv05+rEXoByV58ar6f0V0lfdZPk=
Subject key identifier:   66:99:65:CE:CF:5A:AD:EA:73:D4:1D:E1:F3:60:2D:1B:76:92:E0:EF
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F432858494CC940898272075D2503D100
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8658f928-bb2e-351c-baa0-b043397f7b78.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     13414
IP address blocks:        209.237.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:40:89:82:72:07:5d:25:03:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=6bd5e532-fc37-426a-8f6c-b7ca1740d493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f5:8f:df:5c:dc:3c:80:10:95:87:0d:ca:83:
                    eb:bf:2c:13:ea:30:c0:f9:6d:ab:eb:ea:fe:7b:8e:
                    ab:d3:95:7f:f5:e4:e9:68:92:9a:38:66:f2:15:5f:
                    c9:85:1e:5a:0b:b6:f7:a2:a8:17:ba:9e:c7:39:45:
                    2a:a8:af:08:67:d3:fc:26:41:46:14:3b:17:f1:d5:
                    a2:e6:8d:12:b5:85:d7:82:4c:ad:29:50:c3:27:27:
                    17:10:86:40:e5:f5:d3:1b:4f:18:a8:d8:2e:45:39:
                    d6:33:cf:44:dc:b9:4e:33:0d:73:34:a5:81:b8:03:
                    76:71:3c:96:c8:46:ce:00:84:8d:75:fa:b2:63:1b:
                    e5:d8:ad:3e:db:0a:7e:79:fd:9c:c0:87:6f:a8:74:
                    60:79:c1:96:84:47:e3:fa:43:4a:5f:64:1d:9c:18:
                    42:05:dc:a1:60:42:78:96:21:d2:d8:8a:7e:e9:0b:
                    fc:54:50:01:bc:2a:ca:6a:78:90:a7:de:cc:21:5c:
                    8b:2e:fd:d9:c6:d1:02:d1:0e:55:b7:f4:1c:c8:96:
                    7f:4b:00:b1:31:f0:b4:43:35:45:5b:cf:5f:f6:b2:
                    38:cb:d2:ae:6a:84:3d:0a:1e:4c:0b:2a:ef:0f:0c:
                    21:c3:32:e6:d4:6e:b9:66:a9:bd:e6:1d:fc:8f:f0:
                    54:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:99:65:CE:CF:5A:AD:EA:73:D4:1D:E1:F3:60:2D:1B:76:92:E0:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8658f928-bb2e-351c-baa0-b043397f7b78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:3c:c9:8f:5e:0f:55:f5:19:79:36:99:c3:b7:3e:5a:f0:78:
         94:a8:f8:67:4c:8c:b6:bf:e7:b6:bd:00:4b:d7:7b:2b:6b:87:
         7d:1c:bf:a9:4c:00:54:d4:cd:56:25:ea:ba:2d:02:8d:ad:9d:
         aa:28:fd:6d:98:33:82:ec:8b:ce:3a:28:8b:73:ee:19:01:32:
         fc:a0:98:cf:8e:3f:52:cc:24:df:31:10:ea:60:f8:78:60:d8:
         e6:a6:27:b8:27:5c:68:a7:22:3d:68:cd:4a:94:f0:be:cb:1b:
         9e:94:1c:98:df:92:24:0c:74:2f:d6:89:0b:1f:68:79:c8:aa:
         d0:50:9c:cf:c6:bf:28:89:78:4c:c9:30:91:72:7f:6b:74:25:
         0e:ee:46:b9:58:a3:c8:84:19:f7:af:46:77:e6:d9:05:c7:70:
         7e:9c:9a:64:20:d5:ac:ce:0e:71:c6:65:fb:1d:8b:9e:55:2c:
         c6:c1:7b:4a:24:4a:27:a7:4f:01:77:1f:ce:49:bc:4e:e5:cd:
         d0:b3:be:18:b6:b8:d7:2e:7a:b4:ac:48:e0:a0:c9:80:04:f5:
         73:f2:c0:54:4f:1a:7c:42:47:65:c1:c8:67:2a:fd:8b:56:a7:
         6f:42:0c:9c:b9:34:49:b9:61:ab:43:1e:ea:ca:7b:61:13:63:
         5b:9a:1d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----