Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/17a26018-a488-3d5d-9caa-dc7921400898.roa
File:                     17a26018-a488-3d5d-9caa-dc7921400898.roa (raw, json)
Hash identifier:          yOmoK0i3f+UCAk+T5unNCfSr/L4nvF4EcwLPPRxjrLM=
Subject key identifier:   10:D3:5C:F6:8B:33:8E:AB:13:7B:56:61:DF:91:4B:57:53:65:0B:B1
Certificate issuer:       /CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
Certificate serial:       010D0C9F4328584973DEEE22A5DC090C25A627C0
Authority key identifier: 0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/17a26018-a488-3d5d-9caa-dc7921400898.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     36184
IP address blocks:        209.191.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:ee:22:a5:dc:09:0c:25:a6:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=151fc4c3-baaf-4aaf-b424-92099cd8d42e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c8:e8:1d:95:1f:c0:90:9c:09:5c:55:37:2d:
                    f9:8f:b8:e6:3b:eb:89:a7:5b:5e:d7:6b:48:e6:23:
                    6a:af:ef:6a:7a:6d:e9:03:f4:a3:3f:a8:be:2e:0a:
                    ab:1a:d7:fb:ac:1f:31:73:18:42:5d:74:19:f2:2d:
                    c7:62:7a:22:ce:3d:04:e7:4c:a6:eb:42:74:9a:de:
                    17:a4:b1:b9:d8:fc:35:38:bc:46:e9:4c:5e:c8:1e:
                    e9:f9:0f:25:ff:04:5d:f0:4b:84:1c:89:99:fe:db:
                    e1:96:d3:93:4f:c9:7f:ce:58:91:7f:67:44:cb:84:
                    1d:47:75:41:85:86:f6:1d:92:bc:aa:d9:82:16:35:
                    2e:a4:dc:c1:99:2b:88:3b:da:82:5e:59:a9:d9:67:
                    d2:0a:d4:f1:0e:38:66:48:b0:2d:f4:b2:77:2a:59:
                    44:65:a8:ef:ee:34:f0:ce:05:f2:ac:2f:0d:6f:c1:
                    d0:82:c2:fa:c5:e0:23:3b:f2:bb:20:45:fe:6e:29:
                    8e:54:7e:19:c2:fd:f8:44:8a:56:06:b0:66:a8:d4:
                    ad:df:3d:6b:f1:7a:ea:84:88:78:25:51:42:ea:cf:
                    10:77:0c:bb:67:01:41:ab:26:96:e8:02:7a:f5:d6:
                    87:37:cc:8c:d1:cc:0a:d7:48:13:22:45:ae:9f:24:
                    cb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D3:5C:F6:8B:33:8E:AB:13:7B:56:61:DF:91:4B:57:53:65:0B:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/17a26018-a488-3d5d-9caa-dc7921400898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl

            X509v3 Authority Key Identifier:
                keyid:0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.191.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:aa:63:8c:66:08:bf:6f:c6:84:24:76:60:5d:51:e6:45:ed:
         d7:bd:f3:e4:e5:38:70:fc:27:f0:7c:47:49:f0:da:28:6c:19:
         57:d0:a9:9c:4a:b4:53:82:ba:fb:f8:54:df:99:7b:5c:5b:9d:
         13:e9:1c:11:7f:8c:9d:4b:a2:95:67:dc:e0:ff:bf:46:31:88:
         94:d6:8a:3a:23:41:27:e5:ae:a9:90:a3:c1:6d:85:b6:b8:ac:
         45:b3:31:53:bf:b6:f3:19:b2:84:71:e7:48:38:8a:78:f8:61:
         9c:ff:99:b8:f8:16:b8:3c:9c:c6:fa:74:f5:d7:5e:fe:e1:ec:
         df:c5:ef:5a:5f:3b:bb:88:0d:9a:64:ed:dc:f4:b9:25:47:c8:
         28:f5:fb:57:50:3f:10:95:e3:8d:ef:23:a3:5c:df:23:8d:50:
         54:d5:1d:a1:bf:27:26:5a:a4:0c:6e:3e:fd:1c:f5:59:90:95:
         02:22:5e:50:4d:41:2f:41:a5:fb:6d:73:6c:9d:bc:ab:99:ff:
         8a:f5:ba:59:8b:8a:4d:39:0a:98:db:7e:6b:94:a9:ed:01:ca:
         f2:43:1b:1a:12:d8:7a:e3:69:c8:50:e9:1e:9d:a3:ec:b6:01:
         03:ca:06:a6:f7:35:08:e1:3f:6d:2d:39:2a:1c:ed:b6:70:4d:
         3e:1f:02:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----