Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/49130ff0-be17-33aa-addf-13c1e3898bc0.roa
File:                     49130ff0-be17-33aa-addf-13c1e3898bc0.roa (raw, json)
Hash identifier:          QNEvdBCgtA8M1I+OB0Rg6PYRokvAhKa2Z/jEMfocX8I=
Subject key identifier:   B3:06:A5:B5:5E:75:F5:A2:BE:43:23:72:DE:C0:D1:D5:52:D0:BD:26
Certificate issuer:       /CN=20345bca-b793-4f14-a066-8653ac933903
Certificate serial:       010D0C9F43285848F22BE44F359DBFC4E1040D80
Authority key identifier: 10:6B:23:17:A7:88:A7:9F:AB:B4:F4:E5:33:83:B9:8B:9F:BB:CE:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/49130ff0-be17-33aa-addf-13c1e3898bc0.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     8070
IP address blocks:        206.41.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2b:e4:4f:35:9d:bf:c4:e1:04:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20345bca-b793-4f14-a066-8653ac933903
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=5b925151-d28f-4f4d-8a3b-4bfddaa62fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:db:26:24:bc:d8:5a:4f:c9:94:fb:6c:9d:ea:
                    73:a7:60:89:f8:25:3d:95:36:fc:52:16:45:01:ca:
                    ee:78:f8:a7:fe:34:81:a2:e6:d8:24:21:ab:cf:d3:
                    8e:49:d5:dd:64:6c:6c:23:a1:25:df:63:71:54:80:
                    6c:ef:d6:2a:b4:dc:e7:5e:bd:3c:a7:7a:0e:e0:2d:
                    fa:52:46:e4:47:f1:8b:b7:1a:2d:d3:2e:e9:65:21:
                    0e:60:4b:ab:53:bc:0d:93:fa:c9:68:ef:a6:ad:e1:
                    0e:76:23:73:62:37:62:bf:92:3b:ac:1a:0a:0a:8e:
                    90:72:0f:40:ed:2a:df:f8:eb:16:05:b3:9a:39:5f:
                    63:bc:39:ec:9d:99:ba:ef:77:78:f1:cf:99:4e:d0:
                    45:84:3c:c8:01:b5:33:a9:03:9c:89:c8:3a:a8:cb:
                    2d:79:b4:f3:66:80:9e:49:69:72:9a:ce:db:5f:69:
                    93:74:30:ca:b3:43:ac:a3:26:91:4b:1b:c0:c2:65:
                    7a:2a:3a:15:a8:4b:e2:2e:94:39:03:9d:c8:24:7c:
                    e9:b6:ea:ba:99:2a:77:a9:fc:34:50:77:d6:62:84:
                    58:31:b2:bc:db:ef:10:74:b3:6a:c5:3e:b4:aa:30:
                    a8:44:51:35:21:23:a5:f7:3d:97:6f:28:dc:82:95:
                    44:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:06:A5:B5:5E:75:F5:A2:BE:43:23:72:DE:C0:D1:D5:52:D0:BD:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/49130ff0-be17-33aa-addf-13c1e3898bc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903/20345bca-b793-4f14-a066-8653ac933903.crl

            X509v3 Authority Key Identifier:
                keyid:10:6B:23:17:A7:88:A7:9F:AB:B4:F4:E5:33:83:B9:8B:9F:BB:CE:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/20345bca-b793-4f14-a066-8653ac933903.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:83:b7:1a:f8:f3:d6:80:30:84:5e:f4:bc:62:63:94:7e:96:
         e9:a2:5d:a8:86:01:dc:64:9d:54:13:22:a5:14:e4:60:6e:57:
         5d:7a:d9:94:79:cf:0b:12:01:6f:e6:10:71:3a:d8:e6:c4:9c:
         8f:92:5a:36:5f:65:28:e1:e0:0f:32:ec:0b:6a:68:22:bb:81:
         04:c5:1f:a3:92:3b:92:7c:9b:b6:73:9a:1e:66:d4:46:6b:3f:
         34:0a:9c:8d:9d:84:f3:6d:9f:9c:08:3b:83:f6:94:ff:6c:0c:
         26:67:38:b9:6f:3e:14:e1:f2:29:c8:39:93:ff:e8:2e:73:e6:
         b1:6c:a7:29:4c:ab:1b:f0:fe:f6:69:d6:88:6f:8a:b4:bf:41:
         0b:ef:e1:65:b8:af:7d:f4:36:ed:ac:ec:8d:f8:00:59:74:57:
         7e:d5:94:b8:7d:da:03:3f:d4:af:42:a4:2c:1c:2f:dc:ec:1a:
         ad:69:93:63:c5:b2:9c:26:72:5c:1b:6e:f5:56:a8:3c:b6:94:
         8b:22:63:cd:3e:69:65:c1:a1:f1:82:6d:81:62:7a:8c:23:2f:
         10:cc:01:b3:4b:f6:4d:b4:85:77:2c:2e:40:ee:04:d7:14:43:
         a5:6d:70:c4:9e:35:25:b3:d4:01:f2:2a:83:85:3d:81:a6:84:
         07:cd:fa:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----