Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/3fa72d16-ebd7-3f92-82d4-539f3abe79b9.roa
File:                     3fa72d16-ebd7-3f92-82d4-539f3abe79b9.roa (raw, json)
Hash identifier:          bpoY39iowE9D/bEqusptYbo65jPOaCdXD4pYNdbq6Hc=
Subject key identifier:   FC:13:D8:2D:FD:C3:D7:0B:49:C3:9F:52:07:ED:71:A3:B5:1F:0B:50
Certificate issuer:       /CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Certificate serial:       010D0C9F432858495C2441C043471008B6AC4980
Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/3fa72d16-ebd7-3f92-82d4-539f3abe79b9.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     31898
IP address blocks:        161.221.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:41:c0:43:47:10:08:b6:ac:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=1aabbb24-abc6-4395-9ff3-b4b0d498aace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f5:87:df:ed:49:3d:39:33:f5:6d:0a:7f:b2:
                    78:cb:25:c4:fe:bf:19:d4:92:62:5b:6c:4c:d2:21:
                    29:8b:b8:37:c5:98:ca:cd:d1:f0:9b:c0:de:c3:37:
                    2e:59:ce:08:34:7a:0e:20:17:50:4b:c6:8a:71:ee:
                    96:54:b0:0a:d1:de:72:1f:ac:10:a8:bb:d6:3f:b4:
                    73:d7:0f:1e:b9:2b:cd:c9:f5:25:b0:b3:e7:e1:aa:
                    f8:f4:bf:6c:49:f7:2d:8c:a9:36:d0:13:e6:bb:54:
                    ff:47:b4:4f:f3:ec:54:b7:7c:12:3e:86:cc:82:e8:
                    ab:d9:2e:2e:6c:fd:5d:f9:88:97:d7:e8:5a:09:0e:
                    cb:5d:8b:08:c0:27:25:db:a3:d3:2f:92:ee:3f:6d:
                    1a:16:0a:1e:9a:a1:02:d3:cc:17:18:2b:94:43:4a:
                    f4:47:4d:ed:03:3f:dc:29:9b:3f:dd:3d:6f:18:95:
                    70:d7:21:4c:c3:68:b8:d5:d0:82:fa:8c:fc:67:f4:
                    bc:20:cd:9f:a6:c2:be:15:51:94:b4:93:a2:44:9d:
                    89:8e:f1:8d:12:7c:4e:42:4d:20:2d:cc:67:54:30:
                    70:72:0a:ed:e9:ba:c9:5f:40:cf:7c:f1:92:fe:93:
                    81:88:ca:0d:b5:be:3f:cf:47:d2:73:07:64:2e:98:
                    9a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:13:D8:2D:FD:C3:D7:0B:49:C3:9F:52:07:ED:71:A3:B5:1F:0B:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/3fa72d16-ebd7-3f92-82d4-539f3abe79b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl

            X509v3 Authority Key Identifier:
                keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.221.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e3:1f:5a:46:d3:e7:11:a8:10:1e:07:ca:f6:07:a8:8a:7b:11:
         68:4f:81:bb:8b:cf:41:06:38:96:30:20:28:0e:f5:77:26:f1:
         c4:e1:0a:47:a2:cd:f1:95:31:80:e2:57:57:dd:37:7b:7b:03:
         11:77:51:38:32:03:be:2a:80:f8:29:2d:49:86:b2:99:56:20:
         db:45:98:b3:8b:c5:2e:7f:fe:fc:c1:68:68:b7:2e:4a:88:0e:
         c6:5f:74:41:d1:79:0d:6c:38:b3:37:23:17:a3:82:a0:86:6d:
         40:21:1b:55:ba:ef:03:cd:71:ec:8c:41:c1:b1:e3:53:fc:0e:
         f8:29:90:1e:90:8f:32:a2:46:5d:01:1d:9e:04:52:05:66:b5:
         c0:f8:6c:90:53:ac:0d:c3:22:a0:d4:bb:a3:24:d0:b1:73:f3:
         fd:72:8a:47:68:bf:b7:2b:86:d3:f2:f0:3f:8f:95:08:93:15:
         7a:09:de:85:6f:ef:ce:35:f2:5b:c4:29:92:bf:3f:0b:4e:38:
         cc:ed:ff:6d:d4:c0:e4:7f:ca:47:e7:c8:65:d1:27:80:0e:14:
         5a:66:70:a1:b0:cb:ab:e8:5b:14:60:60:00:3c:f7:ef:9c:dd:
         67:4d:33:c4:8e:eb:2a:6f:ed:63:39:8b:3a:37:e3:52:1c:4e:
         15:67:c4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----