Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/c0cae52e-f020-3204-8c02-c98f21b83298.roa
File:                     c0cae52e-f020-3204-8c02-c98f21b83298.roa (raw, json)
Hash identifier:          7SpKQyoKK2+NdIdYdFMuwh0utzarcjyvGwx85XX1Cpo=
Subject key identifier:   04:8E:9D:22:58:8A:AF:A7:4E:6D:21:91:B6:D7:6B:8B:62:60:0A:43
Certificate issuer:       /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea
Certificate serial:       010D0C9F43285849806F1D97E24BF22C88C49CC0
Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/c0cae52e-f020-3204-8c02-c98f21b83298.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     14618
IP address blocks:        192.135.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:1d:97:e2:4b:f2:2c:88:c4:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=65dd85b6-9da5-45fa-8076-d3aa676240b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:17:4d:b3:11:30:ac:3b:d6:ef:5f:62:28:34:
                    bd:50:49:cf:c6:a4:8c:70:33:00:7a:5b:13:0e:b1:
                    d6:fe:57:3d:9b:af:96:f8:f3:e5:94:e2:8f:e4:51:
                    a4:9c:1a:e0:19:56:65:9a:e1:c4:f8:01:d4:60:b6:
                    2c:9f:de:86:e7:a7:ae:07:5b:bc:b6:12:9c:09:7b:
                    ea:a8:59:3d:a1:3f:1a:1d:7c:c5:85:37:c6:8b:5b:
                    d4:16:fe:50:ce:58:47:29:8a:48:dc:1e:3a:70:63:
                    02:49:c7:5e:13:ae:02:3e:0b:89:0c:ce:4d:6b:7c:
                    e9:cf:d3:52:5d:51:0f:4c:c1:dc:a6:b7:47:c2:4e:
                    da:b0:a7:96:2b:11:c8:e1:d8:97:84:56:5c:84:6d:
                    2e:bd:aa:ff:44:e8:8b:19:35:4d:cd:db:74:ad:82:
                    65:08:9f:d7:2a:53:fb:c0:07:bb:e5:a7:1a:78:2b:
                    2a:f4:76:01:36:21:ca:f4:b0:0c:91:28:a2:93:75:
                    f0:62:c0:e5:a8:41:4c:93:be:51:26:22:69:16:2b:
                    67:9d:20:4f:b5:60:ef:f2:7f:17:da:f5:78:91:6a:
                    d7:7f:37:5b:94:87:74:a3:48:28:ac:e2:94:5f:08:
                    ee:53:0b:e4:0f:a8:a4:69:80:04:0a:6c:12:fd:c1:
                    d5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8E:9D:22:58:8A:AF:A7:4E:6D:21:91:B6:D7:6B:8B:62:60:0A:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/c0cae52e-f020-3204-8c02-c98f21b83298.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl

            X509v3 Authority Key Identifier:
                keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.135.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c7:06:c3:21:38:9f:86:99:ff:f8:7e:9a:44:f7:33:c2:99:
         12:a2:ab:5d:41:2e:26:6e:43:8d:8f:db:a7:6d:05:05:5b:50:
         dc:d0:04:bf:d7:10:06:15:42:a8:42:5b:e8:62:47:09:df:79:
         41:1b:62:3b:59:c7:06:71:bc:6c:3c:13:ee:73:40:61:86:4b:
         87:ef:9d:55:18:9e:63:95:8e:97:19:88:8d:f6:66:7d:ef:0c:
         2e:71:48:67:21:b3:37:79:e9:76:dc:97:a5:68:85:da:5e:32:
         e2:ea:b4:65:6f:5f:3a:28:9a:7b:c0:f2:6d:46:2c:a2:9a:0c:
         42:17:41:f5:63:d9:fd:c9:91:10:3e:e2:6a:53:a6:6b:32:c2:
         07:32:03:76:5c:23:5c:97:40:dd:d9:22:f3:b8:66:1d:99:b4:
         c6:11:4a:95:5f:c3:6a:a5:cf:ef:3d:e2:b9:33:dd:12:bd:67:
         8d:8d:80:f8:1a:3b:bb:7e:a6:28:3c:11:29:ea:13:14:a2:fc:
         fe:25:69:72:74:f9:d6:dc:5b:ef:6d:7a:8f:39:53:e3:9b:5f:
         f9:97:8f:25:9d:46:1b:e0:fe:1c:79:d0:5c:c5:eb:91:f5:dc:
         53:14:7a:ac:d8:3a:de:26:d8:28:d1:05:11:99:80:e0:45:c1:
         71:70:bb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----