Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/da2805f3-2f45-37d2-81ac-675892bd2fa3.roa
File:                     da2805f3-2f45-37d2-81ac-675892bd2fa3.roa (raw, json)
Hash identifier:          kLv3B2JkYM8VJVgqAihyCHmGaytFsvOZfLnWxmBJuTE=
Subject key identifier:   60:AD:40:EA:EE:E6:5A:45:23:11:9F:57:35:E0:49:0C:85:2B:32:24
Certificate issuer:       /CN=82d0f472-6865-4d16-9252-e75f7b91368a
Certificate serial:       010D0C9F43285848B78B7C69A0EE4DBA9F1C5C80
Authority key identifier: 91:F2:68:F5:92:28:40:C7:86:D1:B2:A2:58:B7:AE:F9:4D:9E:BC:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/da2805f3-2f45-37d2-81ac-675892bd2fa3.roa
Signing time:             Thu 30 Jan 2025 14:00:51 +0000
ROA not before:           Thu 30 Jan 2025 14:00:51 +0000
ROA not after:            Wed 30 Apr 2025 13:00:51 +0000
asID:                     401382
IP address blocks:        64.190.20.0/24 maxlen: 24
                          2602:f7e7::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:8b:7c:69:a0:ee:4d:ba:9f:1c:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82d0f472-6865-4d16-9252-e75f7b91368a
        Validity
            Not Before: Jan 30 14:00:51 2025 GMT
            Not After : Apr 30 13:00:51 2025 GMT
        Subject: CN=86eeca3d-197c-4923-b210-c10a55fb12e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:dd:8a:1d:e1:54:f1:0d:66:2a:88:66:f6:e3:
                    22:ec:64:5c:f2:e3:9a:1e:aa:38:c9:3f:d0:8a:e4:
                    60:bb:fc:d8:ce:10:58:1d:13:33:51:15:19:15:76:
                    e8:03:42:00:b0:57:ff:6b:98:43:7c:97:6f:bf:e1:
                    83:c6:83:f6:0f:dd:22:0e:b7:d7:cb:a5:48:db:5f:
                    37:50:60:df:5e:bb:f5:d0:6e:80:d3:e9:b0:dc:23:
                    e3:51:9a:4f:35:13:02:1e:98:08:de:d6:d3:fe:f9:
                    41:a2:3e:0d:07:b8:8b:84:6e:ee:7c:16:13:4b:b2:
                    00:6a:97:85:57:f6:09:92:3b:6d:9f:a0:87:97:9e:
                    e1:20:10:ad:3b:fb:6b:0c:ca:fc:2e:87:20:4c:13:
                    cc:35:65:99:68:a2:a6:54:a1:3a:75:3b:fb:3a:30:
                    d3:e9:2d:85:99:7d:c3:9a:cf:1f:98:12:11:3d:2e:
                    30:9d:49:63:d1:ea:3f:2c:63:df:f6:37:ef:8d:13:
                    80:10:d1:88:03:f1:42:3e:dc:08:72:5c:e4:29:da:
                    13:0b:29:97:a2:42:79:50:8d:8b:94:d9:9c:0c:b7:
                    14:fd:bd:d9:e1:2c:e0:10:aa:34:84:9e:ee:fb:ab:
                    a4:2f:a5:33:5b:a1:5a:7a:48:4c:71:e8:85:99:4d:
                    30:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AD:40:EA:EE:E6:5A:45:23:11:9F:57:35:E0:49:0C:85:2B:32:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/da2805f3-2f45-37d2-81ac-675892bd2fa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/82d0f472-6865-4d16-9252-e75f7b91368a.crl

            X509v3 Authority Key Identifier:
                keyid:91:F2:68:F5:92:28:40:C7:86:D1:B2:A2:58:B7:AE:F9:4D:9E:BC:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.20.0/24
                IPv6:
                  2602:f7e7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:33:81:88:b3:63:5e:e0:a6:2d:af:ca:c2:ad:8a:7e:e8:e6:
         e0:55:e3:30:46:ca:93:ca:b8:db:b2:3e:3a:22:66:df:1f:2d:
         5a:52:80:25:11:27:76:4b:73:a7:16:a5:38:01:9a:fa:91:91:
         8b:17:ce:b8:16:f1:f9:65:7e:45:c8:5f:3f:c8:ba:bc:4b:4c:
         09:37:61:8a:4c:10:53:36:f2:56:f6:b0:51:62:e3:8c:aa:dd:
         7f:2b:4b:6e:ea:80:57:1b:50:1a:e6:fb:1a:a4:4b:97:d8:d5:
         14:1b:6e:a3:9d:1b:13:92:80:01:50:e5:df:b2:b1:bc:e3:86:
         98:88:29:6d:e8:af:e0:23:d9:d0:34:66:25:13:02:81:90:7b:
         ef:53:ff:5e:90:74:8d:04:16:64:01:fb:6c:40:35:0e:da:3d:
         5a:7e:8c:b1:d5:b1:40:2a:c0:8b:f4:5b:7d:0b:93:41:f3:df:
         b8:4a:42:f7:54:27:69:38:03:29:84:ea:73:75:53:fc:7d:c7:
         a0:14:49:e7:4b:e5:95:72:20:62:c4:52:33:31:8c:3b:eb:cf:
         89:e7:df:6e:76:9f:dc:60:29:e4:a4:dd:e5:cd:97:89:d4:fc:
         c9:1f:3d:70:88:d3:ff:9d:91:54:3f:ae:c6:33:51:a7:50:67:
         a2:cb:ce:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----