Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/9a9235ac-9ad1-3a83-b931-e086a9800ba2.roa
File:                     9a9235ac-9ad1-3a83-b931-e086a9800ba2.roa (raw, json)
Hash identifier:          R7BWTHBQZXfGUgbDHGdm0KE5N+kCb+H39iNGlQjq37A=
Subject key identifier:   DF:2F:0F:2E:17:82:0A:3A:3F:F9:B7:3A:FC:E7:68:37:66:4E:59:49
Certificate issuer:       /CN=a9694c21-178c-4e7b-9e78-08bc978c5e6f
Certificate serial:       010D0C9F43285848ADC60484A470BC7917543D50
Authority key identifier: 84:39:81:4F:67:A4:F0:69:AB:6B:59:7D:A3:EA:1C:66:EE:44:88:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/9a9235ac-9ad1-3a83-b931-e086a9800ba2.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     32815
IP address blocks:        199.247.128.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:04:84:a4:70:bc:79:17:54:3d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9694c21-178c-4e7b-9e78-08bc978c5e6f
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=f6bd2a67-6133-4eae-bff1-f6d4411ad4cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ef:70:01:3e:3e:51:c6:1a:2b:97:a0:ae:e1:
                    ce:03:bb:86:63:de:60:8d:ec:61:c3:3d:ca:bb:0d:
                    f2:16:a4:70:e3:7d:38:c2:0d:7c:48:37:23:16:b5:
                    8b:09:86:e1:4d:36:af:51:bb:f5:b0:9a:40:53:00:
                    ce:4c:51:11:9e:7a:2e:67:f7:19:96:fb:f9:df:da:
                    46:a5:fd:6f:f5:e2:0c:ff:60:c1:30:79:85:fd:ca:
                    28:9f:b6:f3:5f:a4:69:3b:89:7a:a9:26:39:13:b2:
                    bd:d6:86:51:90:46:5f:48:8b:6e:ad:ef:5d:7a:4c:
                    84:0d:76:e7:a9:e2:db:e4:8a:b1:91:67:fd:0e:82:
                    86:2d:1e:64:c9:a6:c3:d7:fe:02:4f:3c:b0:52:0b:
                    c5:e8:42:f4:ea:21:ef:9d:5c:f8:7e:20:98:c0:e8:
                    a5:f8:9e:32:1f:ef:47:af:d7:2b:0e:ea:96:fb:2e:
                    a1:6f:f0:20:20:2c:3e:bf:6f:3e:96:c5:b5:1c:eb:
                    19:e6:35:09:56:7b:75:ae:91:15:42:0f:2c:6b:fa:
                    c7:cb:a4:01:a3:f8:cb:09:25:1d:89:cf:3c:a5:66:
                    5f:9b:8a:eb:8f:48:28:9e:08:cf:6f:cd:38:2e:12:
                    10:c3:78:d5:6f:8d:3c:2b:7b:09:ca:7f:1c:dc:3c:
                    2e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2F:0F:2E:17:82:0A:3A:3F:F9:B7:3A:FC:E7:68:37:66:4E:59:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/9a9235ac-9ad1-3a83-b931-e086a9800ba2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/a9694c21-178c-4e7b-9e78-08bc978c5e6f.crl

            X509v3 Authority Key Identifier:
                keyid:84:39:81:4F:67:A4:F0:69:AB:6B:59:7D:A3:EA:1C:66:EE:44:88:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.247.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:d0:ff:28:20:02:20:cc:fb:2e:ce:da:97:34:60:77:36:9d:
         52:73:91:fd:a2:c6:91:de:de:7f:31:44:69:cb:7a:32:40:90:
         5c:2f:57:3c:52:d6:20:66:2a:e6:f2:92:c9:58:44:39:53:cd:
         74:65:35:6c:8e:d9:f4:43:8c:25:af:2e:7e:1c:36:6e:9b:eb:
         a7:8e:ac:8c:87:f3:49:94:8c:49:98:dd:05:1a:f6:7e:99:dd:
         c7:5a:38:58:f3:54:c0:65:02:ca:95:db:8b:18:48:b9:f6:d5:
         35:74:ec:91:41:5f:90:7c:b8:0d:7d:37:e4:46:3e:8c:68:66:
         27:72:97:b2:c4:cf:c7:89:4b:47:25:fc:1c:cc:08:5f:76:23:
         6e:92:dc:99:87:96:cd:6a:8c:21:96:82:f8:a8:82:d8:d4:b8:
         77:d0:39:28:9f:5b:aa:ba:be:d3:c3:fe:e8:4c:e8:a2:8e:19:
         66:93:09:d5:b6:5b:40:f9:55:b3:46:59:3e:71:87:73:76:f1:
         2b:dc:49:d6:51:42:36:5f:8f:6a:81:94:db:fe:d7:73:7b:52:
         08:58:37:91:5a:2b:7c:a2:b1:44:a9:6c:4a:4f:1f:54:88:a4:
         b1:b0:1e:29:a2:b1:20:39:d4:f9:3c:91:2c:0f:7c:32:10:d1:
         14:20:0f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----