Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/cca4c895-8628-3308-954a-f3ce21a5b469.roa
File:                     cca4c895-8628-3308-954a-f3ce21a5b469.roa (raw, json)
Hash identifier:          qLqStDzsOVCALdWzNUfHyjMbIzD6vF2fQmAwqDHA6zk=
Subject key identifier:   92:54:9A:99:56:8C:D2:D6:C1:CD:17:94:9C:FC:1A:D3:BB:E9:84:B0
Certificate issuer:       /CN=6c5be2bd-61a2-464a-be54-34e87a4a9584
Certificate serial:       010D0C9F4328584950F9610678326096D6E367C0
Authority key identifier: 8C:C1:42:F4:9C:11:05:F4:E8:B0:7B:1A:7F:C5:2A:C4:77:83:D0:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/cca4c895-8628-3308-954a-f3ce21a5b469.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     31851
IP address blocks:        216.146.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:61:06:78:32:60:96:d6:e3:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c5be2bd-61a2-464a-be54-34e87a4a9584
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=e1f56fce-4052-4625-9d74-afda1d277584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4c:ec:17:1b:09:0f:0f:67:fa:93:6c:02:90:
                    f2:eb:1d:d5:c1:e7:47:57:a0:d0:eb:c3:a5:65:d0:
                    9a:46:a7:ac:09:0e:01:7f:e7:a3:e6:4b:90:a8:3f:
                    3f:3b:b3:d9:52:da:ef:c5:8a:e5:ac:2d:a9:4e:11:
                    7d:0a:ec:0a:9d:5a:73:8a:b4:fb:60:7c:b8:7d:03:
                    a2:0d:9e:5e:f4:2c:ec:d9:cd:21:06:8e:75:c3:bd:
                    58:08:06:e6:d8:95:a5:4b:a8:8c:76:17:94:dc:a0:
                    6b:75:5c:59:d2:0c:62:07:9d:75:3c:10:f5:4e:f1:
                    5f:cb:f7:e6:0d:a5:54:9b:cf:83:0d:b5:a7:80:44:
                    8d:df:2d:0b:82:f9:13:82:1c:83:a1:48:be:4f:70:
                    ba:e1:0b:70:b4:12:7e:05:4d:53:0b:c7:05:56:5e:
                    95:7f:4b:04:20:9d:96:b6:fb:5c:6a:4e:fe:97:62:
                    f1:b7:07:22:b6:b3:00:0d:3d:7b:1a:22:fe:71:49:
                    dc:d3:49:a1:f3:4a:20:91:5b:16:39:20:74:85:95:
                    d0:3e:b0:bc:a0:62:3a:34:7a:70:c3:82:38:5d:a8:
                    1f:17:21:3b:7b:21:dd:7e:f5:6e:37:68:5b:c2:96:
                    12:8a:5d:d6:3a:8e:ec:bf:1b:f9:b5:0b:6b:35:f8:
                    b9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:54:9A:99:56:8C:D2:D6:C1:CD:17:94:9C:FC:1A:D3:BB:E9:84:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/cca4c895-8628-3308-954a-f3ce21a5b469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/6c5be2bd-61a2-464a-be54-34e87a4a9584.crl

            X509v3 Authority Key Identifier:
                keyid:8C:C1:42:F4:9C:11:05:F4:E8:B0:7B:1A:7F:C5:2A:C4:77:83:D0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:73:5b:a9:4c:71:b2:dc:ad:ec:9e:bf:f9:a9:d0:87:c6:b6:
         ad:9f:6c:19:4b:8b:3f:b9:ff:5b:a1:08:37:3c:3a:e6:68:0f:
         0e:4c:11:49:e9:fc:13:33:f0:0c:d2:af:94:92:36:7f:5d:63:
         7f:80:78:01:10:05:eb:b9:0d:6e:ec:45:c0:53:6c:4c:96:f5:
         c2:74:d1:f9:99:1b:9f:59:66:ae:e6:71:a6:fa:aa:81:9b:56:
         a5:41:d0:2e:89:55:9a:af:c2:c3:02:d5:a2:09:92:9a:af:8d:
         cc:19:d6:47:82:92:27:2f:98:3c:ea:c3:f9:fe:fe:7b:53:4a:
         d2:f9:a8:a6:ab:1f:29:27:bb:bb:9d:db:51:cc:a8:a8:b9:6e:
         22:ca:b6:8e:a1:fb:70:a4:d4:46:b6:26:24:08:84:ee:d5:28:
         a6:3b:da:a0:7f:94:5a:ac:d4:46:b7:4d:01:2f:ea:b9:6f:80:
         fa:87:ad:00:b3:fe:a2:3b:14:2f:0b:a1:2e:c3:54:8f:d1:f9:
         ad:2a:b0:aa:30:2c:d8:bf:9a:7d:e1:66:8d:ed:94:4a:db:58:
         ff:59:13:ef:07:c7:80:c3:ef:d1:b8:11:e7:00:24:6d:84:69:
         df:a0:33:e4:ba:10:a7:a1:c7:47:a7:92:94:0b:b9:17:97:04:
         51:a3:ed:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----