Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/606b7f9a-8f76-30f2-9853-afcb97489ddc.roa
File:                     606b7f9a-8f76-30f2-9853-afcb97489ddc.roa (raw, json)
Hash identifier:          YfRuLyADgPBHjRwnPB4fdW2A7plioFnswj9KCqFunpA=
Subject key identifier:   86:E0:8D:86:9C:07:0B:D6:49:90:07:A5:46:0A:E7:48:DF:31:5D:E9
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F432858493ED3D8A1529B4283B5044480
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/606b7f9a-8f76-30f2-9853-afcb97489ddc.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     393869
IP address blocks:        129.19.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:d8:a1:52:9b:42:83:b5:04:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=15ea3a61-15d1-46c3-a8ac-72cb26ac0686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a6:eb:3a:b1:6c:d2:cb:06:d8:ce:0c:c7:ad:
                    eb:a7:3b:6c:7d:ab:ef:4c:a8:69:6f:b0:b1:ad:42:
                    f9:6b:ca:79:25:dc:37:f3:44:41:4c:e7:11:97:26:
                    6a:30:2c:bb:0e:a1:13:d2:4f:18:35:96:f8:bd:cc:
                    06:01:c3:bb:45:e4:64:f3:07:1a:24:f8:93:ec:9c:
                    5d:c7:4b:c4:5a:11:3b:2d:12:d5:66:e7:55:34:93:
                    90:0a:56:9f:47:e5:b5:0a:da:09:94:19:d7:46:9d:
                    e3:44:08:d4:48:cd:9b:57:a0:33:0e:8a:bb:f2:1d:
                    40:e4:4e:41:15:17:13:68:77:16:e2:11:c8:3c:de:
                    ec:06:cf:9e:d4:10:e0:2d:65:32:bb:0f:6f:0b:1d:
                    60:7e:c3:24:74:53:e3:75:16:67:b7:f4:dd:ae:bb:
                    34:64:6a:49:ef:09:d2:b5:aa:74:ca:31:f2:21:d4:
                    f0:28:0e:8d:24:ed:93:f9:59:e7:d1:f4:af:03:7e:
                    96:10:64:0e:4a:bc:87:03:b7:27:ee:05:44:b7:29:
                    7b:29:45:6d:82:55:63:3c:e3:e7:31:15:2e:d5:28:
                    fe:ef:43:96:41:dc:f6:ef:1f:a3:1a:76:fc:05:9f:
                    02:3f:30:80:62:f8:0e:bd:49:d7:ec:d4:0c:52:e4:
                    d8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E0:8D:86:9C:07:0B:D6:49:90:07:A5:46:0A:E7:48:DF:31:5D:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/606b7f9a-8f76-30f2-9853-afcb97489ddc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:cc:4b:ee:a2:29:bb:19:93:a8:f7:36:3c:a3:ea:68:48:de:
         21:3a:dc:cd:5b:26:73:7d:1a:87:f7:d4:fa:d1:fb:5b:0b:fb:
         2c:73:b9:b2:ce:e7:de:4a:6a:25:06:c2:03:07:f8:a4:72:01:
         34:33:99:2e:8e:0d:81:12:13:1d:4d:dd:b1:6d:25:bf:ec:a0:
         0d:37:6d:67:f9:b2:4e:e8:af:7b:e5:69:aa:05:e0:e3:8e:09:
         de:6e:45:e4:ce:44:d3:fd:4a:bd:51:39:68:8c:05:9a:7a:52:
         09:8b:24:61:86:a7:27:fa:0d:f6:30:8e:a6:ae:02:a3:95:60:
         5f:1a:6c:3c:a9:db:33:cd:fa:1e:59:9e:ee:5b:87:42:d3:d0:
         3d:5e:47:cd:04:50:4a:32:e4:dd:78:af:d2:56:54:83:e3:2e:
         e8:51:e4:cf:3e:fa:d9:7f:6f:e5:fb:2c:8f:ef:0c:b1:9d:d0:
         05:82:02:8a:97:36:da:67:e4:4f:7d:8c:09:e7:e2:e7:a8:ba:
         ef:54:fb:44:df:e1:de:88:b3:bb:6e:48:00:6b:35:d7:10:b6:
         76:09:2e:cc:47:0a:44:f3:a4:da:08:6a:16:55:e5:98:94:64:
         70:01:61:c2:4b:00:89:2f:c1:00:d8:e0:9b:2a:84:5e:89:1d:
         69:a0:42:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----