Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e/43763c7f-21a8-34a3-a77c-63042ab10e40.roa
File:                     43763c7f-21a8-34a3-a77c-63042ab10e40.roa (raw, json)
Hash identifier:          4ngS0ypl4RyDBck0zzVAH9cQifnXkBSiw/WYPRVmo4k=
Subject key identifier:   44:DB:C9:21:92:AD:F2:71:A1:42:DA:60:45:70:D8:DB:9C:83:F1:1F
Certificate issuer:       /CN=1e1775ba-ce9e-4791-8e12-e05afbb9713e
Certificate serial:       010D0C9F432858494733E6B108B14F52F98E5400
Authority key identifier: DD:A2:87:E5:BF:D3:2F:D1:0F:AC:E8:2C:49:1E:FA:B1:2E:C7:82:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e/43763c7f-21a8-34a3-a77c-63042ab10e40.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     27372
IP address blocks:        64.250.144.0/20 maxlen: 22
                          2607:5006::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:e6:b1:08:b1:4f:52:f9:8e:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e1775ba-ce9e-4791-8e12-e05afbb9713e
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=dd25d38b-12e5-4d89-bdd3-3ec8f5691895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2c:18:fd:63:91:5a:7c:50:2f:6e:e0:0d:f3:
                    e8:66:f5:3e:18:9d:f5:ce:67:ca:79:76:1f:87:ad:
                    d9:59:e4:b7:0e:ad:17:8c:b3:a7:a1:22:f0:a5:22:
                    38:c6:5d:ef:29:6f:95:16:4d:9e:7c:68:93:aa:3c:
                    75:75:de:91:b5:a6:40:80:30:42:0d:ad:cc:19:e1:
                    cc:b7:54:69:4b:05:95:ab:ef:96:97:79:7c:9d:e3:
                    e5:2c:e0:77:3e:c6:47:92:f7:b5:d4:4f:bc:52:85:
                    8f:c9:4b:ea:9e:2e:b9:8b:1f:2e:c9:ac:29:3f:79:
                    62:d5:9f:40:0c:71:e6:04:d4:9c:a7:81:d3:43:40:
                    be:7a:2c:ea:bd:d7:2b:15:b5:83:c8:69:20:fe:ce:
                    6e:ad:65:4e:13:e8:06:6c:99:3b:0f:d1:47:a6:d1:
                    a4:50:05:ee:17:6f:8f:e9:c8:eb:93:fc:f5:3f:cf:
                    32:bb:1d:92:97:bf:fb:13:1f:70:5b:97:55:4c:da:
                    a1:56:67:7c:86:77:83:c5:bc:d4:d5:47:3d:24:cd:
                    1d:4d:95:8a:bb:3f:d4:bd:dd:95:7d:06:2d:d7:35:
                    b6:80:e4:fb:82:d4:9d:34:08:bb:e3:17:2a:93:0f:
                    99:0e:1a:7f:15:9b:75:48:cd:7b:00:bb:70:73:09:
                    a8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DB:C9:21:92:AD:F2:71:A1:42:DA:60:45:70:D8:DB:9C:83:F1:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e/43763c7f-21a8-34a3-a77c-63042ab10e40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e/1e1775ba-ce9e-4791-8e12-e05afbb9713e.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A2:87:E5:BF:D3:2F:D1:0F:AC:E8:2C:49:1E:FA:B1:2E:C7:82:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.250.144.0/20
                IPv6:
                  2607:5006::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:c3:2d:0a:c8:fc:d8:2c:b7:81:85:c7:1a:0b:2f:e7:dd:6a:
         16:18:22:a9:03:87:1b:59:b2:63:e2:14:c1:5b:c6:9a:30:9c:
         f8:80:c4:38:19:b0:26:14:2a:ba:dc:7b:03:01:da:a4:c1:49:
         47:7b:bc:ba:28:f0:37:b2:83:27:64:89:19:da:be:7f:e5:be:
         ea:2e:64:d3:4c:e7:85:38:bc:49:50:90:e8:65:09:ac:8b:1e:
         82:63:08:6b:60:a4:4d:a0:a1:6b:2d:ab:0d:55:20:48:cb:58:
         57:32:a4:4a:17:7f:80:4a:16:7a:c6:e9:58:9d:1f:9e:8b:31:
         55:fc:2d:11:a9:94:29:7a:58:6b:2e:a8:68:40:e1:80:f5:29:
         91:e5:df:8a:bd:63:a3:fe:dd:19:a4:79:fd:dd:c5:68:d8:8b:
         01:18:a1:e0:e9:ca:1e:4e:c3:3a:d9:12:23:d3:e8:62:c0:78:
         6b:85:e8:e7:b4:28:73:5f:88:ea:88:94:a9:a7:05:68:ee:66:
         9d:e0:49:09:ac:32:7c:dc:ca:c1:85:46:fb:6a:5a:3e:fd:4b:
         76:bd:c2:ba:1a:50:2c:47:30:25:09:5f:95:70:e5:92:27:d6:
         68:47:46:5c:b7:ce:0b:f7:65:1c:16:90:2f:84:2d:0b:63:0b:
         5f:f8:3a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----