Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/8d665762-0465-323b-b950-c65d3069d14c.roa
File:                     8d665762-0465-323b-b950-c65d3069d14c.roa (raw, json)
Hash identifier:          hKZOgoIuSdyb3tq5ORoBoteVKssxMpKYHVd0dcwRdeg=
Subject key identifier:   8F:A9:65:CE:C2:AA:53:31:AA:07:C3:11:F2:9E:4D:C0:69:99:ED:2D
Certificate issuer:       /CN=fdf3df42-040e-4856-b3d6-7c2ebe1e1d94
Certificate serial:       010D0C9F43285848DEA10F651C55C3A4F3B2AE00
Authority key identifier: 6C:0A:1B:00:BC:3F:09:2F:2D:15:05:C2:07:E5:2B:B9:E6:30:61:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/8d665762-0465-323b-b950-c65d3069d14c.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     28959
IP address blocks:        158.51.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:0f:65:1c:55:c3:a4:f3:b2:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdf3df42-040e-4856-b3d6-7c2ebe1e1d94
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=b1c6d17c-fa0e-4553-884d-e57364872ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:48:91:31:b4:0d:11:92:e0:c7:a3:a0:27:9d:
                    5b:d0:4d:48:68:bb:dc:34:18:28:45:ea:48:12:35:
                    25:46:c2:ca:d9:d9:9c:5a:dc:0d:a4:b3:56:7f:25:
                    2e:86:c7:86:38:9f:9c:a3:a6:97:4b:25:41:59:11:
                    e9:55:44:eb:f3:0c:a7:3e:66:69:ad:7b:a9:e4:37:
                    78:71:54:ac:89:13:38:f7:3c:6d:ea:cb:db:37:a9:
                    17:bf:3f:15:1c:3b:33:0d:63:23:a6:f8:ac:92:30:
                    1e:a0:9a:44:90:3a:cd:01:0d:92:17:4d:37:52:7c:
                    70:ae:6a:00:e7:53:a7:72:e2:fa:d0:6a:cd:9f:8d:
                    e3:d4:a9:84:5a:cc:20:d2:96:c2:44:d0:60:7a:95:
                    71:3d:a0:3b:6e:af:02:e1:4a:94:55:09:f9:af:18:
                    82:60:05:77:af:86:67:f4:e5:67:be:7c:04:f4:38:
                    45:3d:b1:2c:a2:54:8c:4c:67:75:14:8e:a5:2f:f7:
                    57:05:9b:2e:ca:97:09:06:25:cc:ce:fa:13:9c:c0:
                    b7:8f:c1:5f:83:6f:12:bf:2b:8b:c7:56:5e:ef:52:
                    b7:a7:f6:21:b6:38:2e:5b:92:73:57:99:06:32:36:
                    ba:e9:d9:c9:57:67:fe:a4:30:9f:16:9c:d7:30:61:
                    86:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A9:65:CE:C2:AA:53:31:AA:07:C3:11:F2:9E:4D:C0:69:99:ED:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/8d665762-0465-323b-b950-c65d3069d14c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.crl

            X509v3 Authority Key Identifier:
                keyid:6C:0A:1B:00:BC:3F:09:2F:2D:15:05:C2:07:E5:2B:B9:E6:30:61:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:39:10:bc:70:09:0b:58:d7:d2:c1:04:51:0f:48:ea:c7:0d:
         e5:16:91:75:d2:ca:72:84:f3:0b:d9:d7:21:fd:bb:6d:3f:34:
         cf:c9:d5:9a:80:e0:55:55:50:da:e5:e5:da:c6:7a:5c:41:25:
         06:f9:6f:1c:3a:9b:3a:3b:6c:40:41:d4:79:93:d1:1a:da:16:
         d5:06:6c:b6:97:b7:0e:f6:fb:fa:73:f0:74:39:1f:5d:58:ba:
         ca:d4:39:1e:2a:f4:a9:c6:ea:eb:4e:fd:9e:54:60:6d:cb:98:
         04:0e:b3:56:ae:5d:bd:85:3b:8e:ed:66:13:f2:fa:98:64:71:
         2f:a7:f6:8d:76:d9:37:bf:09:8a:ff:b0:10:a0:3b:44:ab:85:
         cf:88:da:de:fb:6f:e9:e1:58:2f:57:a1:b1:d9:c9:1d:00:bc:
         25:59:17:b4:1e:ad:d4:ca:ee:ec:98:dc:7e:8d:17:b8:f3:bf:
         e0:44:96:f5:a4:d8:a9:b7:bd:b5:c1:55:b0:82:6c:60:b0:2f:
         d7:90:ca:a7:b2:9c:ab:85:72:c6:2a:8e:b1:04:f1:ba:e5:95:
         94:10:97:2e:3c:a2:5d:4b:af:d9:2e:f1:3e:da:eb:65:ae:67:
         eb:49:ee:85:b7:03:f8:19:39:2f:a9:94:84:22:d7:c3:4c:1e:
         7c:17:19:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----