Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/e23bb973-0891-396b-99bd-f58e74b62fdf.roa
File:                     e23bb973-0891-396b-99bd-f58e74b62fdf.roa (raw, json)
Hash identifier:          G7gq8orABDTR5hoNP9+cfg0d8AAfK1y2mVJenkdsM5U=
Subject key identifier:   57:3D:B8:A5:65:7D:6A:E9:09:4B:DC:5B:37:FB:0A:05:B3:58:85:8E
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584957F40A75ED30948ED98EC2E0
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/e23bb973-0891-396b-99bd-f58e74b62fdf.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     11290
IP address blocks:        24.49.224.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:0a:75:ed:30:94:8e:d9:8e:c2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=5e90e55e-a719-4f66-a9a8-d6d6e9e9b2cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bc:18:1c:7e:44:d9:fb:56:5a:4c:ef:a5:3b:
                    54:ac:4c:10:f1:46:98:a9:30:3e:3c:c8:45:05:cf:
                    ce:0d:35:1c:38:71:a7:12:25:18:8c:dd:1b:17:69:
                    0d:6c:23:86:bc:81:81:90:20:97:f3:ca:f3:6a:18:
                    14:3a:f4:f0:6e:05:17:e8:a6:42:1a:65:c0:08:40:
                    23:f7:be:56:1e:b8:b0:71:7c:b6:c2:73:ce:89:47:
                    d7:3e:63:76:97:f9:9e:85:46:4e:5f:9c:3a:48:6b:
                    23:02:cd:fc:0e:72:fe:d2:08:71:68:31:08:e9:ca:
                    e8:10:b1:ee:98:36:01:ed:9f:57:36:bf:8b:61:c9:
                    25:71:f4:fe:06:bf:10:98:ab:07:de:a3:67:14:08:
                    9f:21:ec:6f:8f:70:08:5f:7c:94:63:7f:17:b2:78:
                    f9:40:3a:e4:2e:95:0c:b5:17:2f:7e:24:2f:ec:f6:
                    5d:c5:40:11:97:b6:60:d8:6f:00:75:fc:c3:69:a8:
                    a4:89:ba:5b:04:92:b5:78:88:a7:fd:8f:ec:d6:d9:
                    3c:74:6d:35:55:fc:27:e6:78:88:52:80:2a:76:52:
                    01:03:3a:1b:24:89:81:0e:aa:3d:c8:f2:34:9c:f5:
                    17:80:04:a5:36:dc:79:81:1b:f3:a4:69:83:ae:3e:
                    5f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3D:B8:A5:65:7D:6A:E9:09:4B:DC:5B:37:FB:0A:05:B3:58:85:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/e23bb973-0891-396b-99bd-f58e74b62fdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.49.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:39:c5:76:0c:26:12:5c:fa:99:ea:e1:78:99:b5:0e:b7:e9:
         19:4f:63:d7:5a:82:a7:b2:4f:16:16:2b:b4:bd:d2:2a:9a:bb:
         a0:1d:ab:34:25:a4:4c:40:bf:8c:e9:59:13:64:e3:fd:d5:21:
         85:64:3a:69:dc:57:af:34:eb:cc:71:00:81:1c:ef:80:d9:24:
         89:89:93:64:67:98:84:5c:b3:62:92:f3:82:fd:e6:12:bb:43:
         18:26:1d:dc:64:e8:dc:78:0b:e4:42:39:40:12:2e:40:99:03:
         ee:8f:7f:7b:e0:75:46:c5:f1:a5:e4:de:0d:e0:70:50:73:a3:
         19:38:50:de:36:f4:f9:59:c4:7b:1a:7c:c2:c7:e6:e2:60:ae:
         c2:e0:71:83:c3:73:05:5b:a8:7a:0b:61:f2:da:a4:e4:c3:d3:
         9b:e0:c8:16:c6:5f:39:8b:d5:2d:21:3b:d9:d0:a1:76:b0:ea:
         61:08:93:d2:e8:b0:0d:ae:f0:b0:09:38:94:d3:cd:c9:55:22:
         8c:81:b7:6a:73:54:8c:76:dd:8b:55:0b:3c:32:66:fa:29:11:
         17:ac:ab:78:cc:fd:71:9a:d8:75:1a:bf:85:7b:af:db:33:9b:
         e8:7a:4c:78:56:22:c0:ab:36:d2:84:45:31:45:68:ad:90:4d:
         84:eb:41:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----