Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/e8184c9d-fd83-3c3b-8de0-3fdc5f360611.roa
File:                     e8184c9d-fd83-3c3b-8de0-3fdc5f360611.roa (raw, json)
Hash identifier:          2AJ2cR88nlUxL3PzcZCUD2LDQqkFO1oNHg3VecVL3d4=
Subject key identifier:   D5:06:B3:B5:42:D3:E4:4B:0C:89:D1:30:6F:2C:4C:D1:C8:C7:7A:1A
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F43285849806F281C8290A029D25A3300
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/e8184c9d-fd83-3c3b-8de0-3fdc5f360611.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     11090
IP address blocks:        206.55.104.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:28:1c:82:90:a0:29:d2:5a:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=ed632bd0-834f-435e-83ff-2444849d8d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:67:f6:72:c0:ad:16:74:2c:6d:2d:5b:68:
                    83:38:14:f4:77:7a:73:68:f0:b8:42:95:fd:76:24:
                    23:81:b3:9c:88:1e:3c:53:82:a9:93:32:61:ec:e7:
                    7a:91:83:1d:1e:55:c9:c2:3b:3d:9e:0a:7a:32:f1:
                    76:96:53:6b:9e:c0:7d:51:7c:bf:42:98:dc:ff:37:
                    35:b7:91:1a:31:3f:b3:7b:95:7e:86:c7:dd:89:87:
                    1f:c0:46:1a:3e:29:d6:0d:cc:b1:9f:95:89:35:05:
                    86:c6:43:51:71:fe:5e:35:16:0b:10:2a:cd:a9:a1:
                    f3:73:d7:5e:58:c5:31:b7:fc:02:ec:69:cf:d1:ac:
                    c9:60:a4:5b:bc:ff:8d:c3:b9:de:0d:8f:a9:88:1e:
                    88:a3:73:80:b8:9f:4f:03:e9:c1:68:5b:99:d9:f7:
                    7e:7c:52:f5:08:ba:c3:55:09:f9:71:5b:8a:73:ab:
                    16:e9:0a:04:7f:d4:8a:1a:15:a8:7d:37:23:4b:15:
                    ba:d3:60:a5:77:e3:7c:e2:93:3e:f9:8d:dc:46:e4:
                    bb:79:bb:ad:0d:e0:93:de:a3:5d:81:20:45:c9:2f:
                    89:ba:39:8d:b4:34:a4:2f:14:fe:ea:f8:1f:15:e3:
                    c0:8f:e1:16:ad:e6:6a:5a:fa:b7:b9:d8:74:08:d2:
                    30:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:06:B3:B5:42:D3:E4:4B:0C:89:D1:30:6F:2C:4C:D1:C8:C7:7A:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/e8184c9d-fd83-3c3b-8de0-3fdc5f360611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.55.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:67:f4:02:eb:85:e2:53:49:6a:8d:26:7b:37:b7:1d:cc:e4:
         3d:88:ad:b4:da:96:1d:68:40:33:5c:fd:fc:39:f1:ed:e6:15:
         99:4a:c3:53:f2:98:64:8d:51:5d:cb:38:8c:f4:75:c3:7c:59:
         05:22:9d:47:d2:04:e6:28:53:ff:44:a2:43:21:dd:64:c3:6f:
         63:05:c5:5e:ad:66:55:b0:71:5b:df:4a:0d:a5:2d:8e:11:de:
         03:f0:67:d0:75:5c:3e:d3:d6:c2:8e:58:f5:7e:0a:31:39:97:
         11:a6:9d:ca:92:f4:5f:5d:e4:a1:c9:b4:a8:bf:a8:25:76:6c:
         42:23:0d:b9:77:99:66:58:50:ed:20:f9:8f:da:d6:ed:60:d9:
         96:9c:79:1b:d7:60:b5:76:4e:43:78:34:4c:96:60:9d:e3:67:
         77:1e:20:1e:13:f9:f8:73:35:8d:9f:60:0f:e6:a7:9b:a1:33:
         43:72:28:04:e1:1f:4a:4a:dc:e1:08:19:d2:e7:4c:22:40:5a:
         c9:42:4c:dc:a8:4a:60:d9:1f:00:dc:7d:58:7b:9e:5b:f4:97:
         75:3f:21:7f:7d:b8:bb:99:dc:14:9a:ef:40:fe:2a:bf:84:1d:
         2f:ec:d5:1a:35:8f:32:2b:c1:2b:dd:fb:e7:81:87:17:27:30:
         0f:e9:3f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----