Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/3d15cd54-a638-3fbb-9d72-ed29a2cc764e.roa
File:                     3d15cd54-a638-3fbb-9d72-ed29a2cc764e.roa (raw, json)
Hash identifier:          02fKpwqo9RnWh4MFXlZqmFknkBZAmS27C7wWyhKwPRY=
Subject key identifier:   C8:B1:30:3E:C3:D3:41:75:64:17:6A:E5:55:58:BF:0F:DE:24:1B:BB
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F432858493243E37935126BB59029C400
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/3d15cd54-a638-3fbb-9d72-ed29a2cc764e.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     15313
IP address blocks:        150.252.196.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:e3:79:35:12:6b:b5:90:29:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=f1d225b3-b0af-46c1-8acb-bd16acc0aa50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b5:7f:9f:a5:15:65:e4:68:8c:c9:e4:32:18:
                    1a:28:67:65:dc:14:f4:6b:ea:1c:e4:e2:b8:69:08:
                    07:31:2c:1e:74:0d:3a:5b:2b:a4:33:69:85:57:96:
                    83:a4:99:7c:be:84:5c:42:8b:e0:1a:fd:22:29:2d:
                    93:3e:2b:a8:d4:b3:fd:50:6b:2a:44:ad:ae:3c:a5:
                    c4:31:80:22:ed:44:aa:bc:61:94:2c:28:b7:33:85:
                    f7:35:e2:b0:8e:69:b1:0f:d8:0e:2f:19:64:3d:89:
                    f4:93:3a:23:fd:54:9c:04:ff:82:3d:68:f8:7f:12:
                    54:d7:05:38:dd:1b:48:23:81:ff:a3:ce:6f:a4:14:
                    87:53:53:dc:33:dc:d2:71:43:a6:5c:78:3c:48:48:
                    9c:8a:47:e5:69:8d:8e:d5:54:78:89:6b:66:76:9c:
                    e6:31:fd:27:62:0a:96:d6:9d:68:e0:47:eb:78:a9:
                    e1:77:09:3c:00:b6:33:e6:4b:2b:92:1a:44:2f:03:
                    34:9f:26:26:4a:b2:94:77:de:81:13:a1:13:68:e4:
                    0f:73:d6:5e:61:d5:96:74:7d:02:47:11:26:fc:78:
                    78:03:d7:96:b9:bf:45:c8:ae:44:e0:9d:16:73:4d:
                    85:2a:03:17:f1:17:d8:09:6d:30:d1:30:22:d5:26:
                    1d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B1:30:3E:C3:D3:41:75:64:17:6A:E5:55:58:BF:0F:DE:24:1B:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/3d15cd54-a638-3fbb-9d72-ed29a2cc764e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:4a:ef:cf:78:11:aa:22:ac:8e:da:f3:27:7f:96:ab:ec:21:
         85:f7:eb:58:42:d6:a8:a9:bd:88:fb:81:b4:44:9f:0e:b7:dd:
         86:f4:bb:7c:16:c4:d6:ad:d2:ab:5c:0a:8b:a8:35:c2:7f:e1:
         7c:40:a3:b8:63:88:b4:da:50:94:80:81:20:3d:18:f5:57:58:
         e2:07:4a:b5:0f:c1:4c:43:28:64:bb:0c:59:a7:f8:42:89:86:
         f6:a9:03:12:6a:63:12:09:10:18:d7:a5:3b:dd:b2:45:42:6d:
         3d:de:49:86:a6:42:c4:b9:91:11:88:3b:66:a9:cf:55:93:64:
         0d:30:59:71:22:9e:f1:27:7e:c6:5a:99:6f:2f:d2:ef:27:1d:
         e5:7b:9a:22:67:2a:b6:54:f3:20:92:de:83:88:f4:b8:67:15:
         f6:bb:88:e1:ed:f8:7d:a3:61:04:71:26:f3:5f:4b:ae:9c:0e:
         f3:2c:55:e9:60:7c:12:99:75:c2:4b:05:69:d5:7f:c2:21:e0:
         6d:6e:c3:c3:bc:f3:4c:f4:64:64:62:76:99:41:8b:45:db:f0:
         c2:77:11:4a:bf:7c:43:60:48:fa:db:71:27:8e:9b:9f:c7:6e:
         ac:24:ec:a2:f5:af:91:d4:86:50:b4:25:9a:7e:99:f8:6f:59:
         48:bf:76:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----