Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/20551fed-8091-3df7-8169-f36d6f164c32.roa
File:                     20551fed-8091-3df7-8169-f36d6f164c32.roa (raw, json)
Hash identifier:          KZ/0rL74C+Vl1qWuTmc0vuCSbiwxyoskNG5hYH3maRk=
Subject key identifier:   21:C5:EE:19:B1:B7:FA:E8:51:CD:AF:F1:51:51:8C:E9:67:77:47:63
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F432858491D718930175F9DDAF2AEF2C0
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/20551fed-8091-3df7-8169-f36d6f164c32.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     11650
IP address blocks:        216.176.160.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:89:30:17:5f:9d:da:f2:ae:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=8b4ae49c-d972-49e7-83d0-0f1a0b66fd56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9f:a3:d4:75:9a:d1:c7:57:54:7f:b5:0c:b7:
                    18:91:e0:3c:e0:e3:d4:7b:16:23:fa:4e:af:a2:dc:
                    4b:b8:94:b6:33:ac:be:59:79:2d:f7:6d:52:2f:c7:
                    a1:04:80:60:73:fe:ba:76:00:eb:13:e4:2b:f3:f0:
                    4e:41:42:fa:ba:db:bf:9d:44:4b:59:17:96:22:6a:
                    6d:a2:5f:74:df:2f:b5:22:1d:9f:42:cc:75:40:4f:
                    8b:5e:91:b6:38:e1:62:e9:6b:54:b7:25:e2:e8:29:
                    62:a4:9a:61:9a:fa:17:2d:a1:b3:0f:83:92:5a:c4:
                    26:74:5d:4f:ef:df:f7:70:83:ef:4d:dd:48:80:f9:
                    89:c7:87:e2:72:29:c0:e5:9c:55:ee:fd:18:91:df:
                    84:f5:1d:ad:83:73:5a:7a:cd:66:95:97:d8:ef:f3:
                    64:c7:81:f9:58:c1:a3:3c:7d:72:00:af:03:e9:de:
                    31:f4:15:9e:85:ad:d5:34:07:d5:e2:6a:4f:a9:79:
                    2f:a9:43:61:a5:e2:21:9f:7b:58:73:6b:b2:51:0b:
                    0f:c0:9f:7c:e0:0c:f8:8f:68:61:09:34:37:af:99:
                    0e:43:44:bc:64:ef:a0:46:73:4d:1e:c6:b3:df:c5:
                    80:88:7a:80:e6:e8:f6:e5:45:cf:23:54:5b:42:0d:
                    83:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C5:EE:19:B1:B7:FA:E8:51:CD:AF:F1:51:51:8C:E9:67:77:47:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/20551fed-8091-3df7-8169-f36d6f164c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.176.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:20:d9:5e:ec:98:53:0d:8b:c6:88:65:31:4b:f4:4f:ed:2c:
         dd:1d:3e:af:6c:40:a8:c8:5f:a4:4b:dd:1e:8d:08:82:0a:af:
         3b:b8:a4:68:aa:cb:28:75:da:a6:1e:7a:a4:65:61:da:86:eb:
         06:d7:f2:9e:51:a8:de:ce:a4:e6:d8:81:fd:6f:28:fa:ad:9a:
         48:09:3d:fa:e2:b2:44:b6:31:e2:d9:1f:af:48:8a:3a:fb:15:
         87:ac:df:09:fd:ca:1d:3d:0c:45:25:f1:f7:6e:5f:cf:bd:7a:
         f1:3c:af:e8:e1:0a:27:a1:ff:d1:e3:e8:77:2f:c2:47:a0:a7:
         a0:5d:01:25:cd:e5:b2:0e:10:72:90:35:c8:bf:7c:d1:a2:c8:
         2a:86:96:3b:a0:10:69:af:85:12:1e:58:84:cc:1c:31:b1:7c:
         3a:e8:97:b3:aa:f3:0d:a2:2e:83:e3:a6:45:d6:7e:21:43:e0:
         52:d2:51:08:ba:ae:95:25:f6:d6:e5:23:bd:1d:fa:f7:47:de:
         3b:8e:21:04:51:bc:4f:2d:de:6d:64:71:54:d7:6e:4f:f9:e6:
         c8:3c:9a:97:a1:ab:5a:5c:c0:3f:59:21:ad:4c:94:53:1f:e0:
         43:69:e5:70:91:04:93:5f:0e:72:6b:4c:29:bd:6d:23:1c:5d:
         b3:40:48:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----