Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e7892961-7225-31aa-a19f-633419ec2b31.roa
File:                     e7892961-7225-31aa-a19f-633419ec2b31.roa (raw, json)
Hash identifier:          TXwUYfm/dXMzgCdRzPwLLS6EL50Z/aAj7kPPDiC7j+s=
Subject key identifier:   7E:BF:62:82:7E:81:F6:4E:18:C8:3D:74:A5:3E:F6:19:13:01:AB:BD
Certificate issuer:       /CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
Certificate serial:       010D0C9F432858495D89695559797B3C6DFBEF00
Authority key identifier: 0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e7892961-7225-31aa-a19f-633419ec2b31.roa
Signing time:             Mon 31 Mar 2025 01:00:47 +0000
ROA not before:           Mon 31 Mar 2025 01:00:47 +0000
ROA not after:            Sun 29 Jun 2025 01:00:47 +0000
asID:                     36184
IP address blocks:        217.10.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5d:89:69:55:59:79:7b:3c:6d:fb:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
        Validity
            Not Before: Mar 31 01:00:47 2025 GMT
            Not After : Jun 29 01:00:47 2025 GMT
        Subject: CN=328a7823-1442-4239-8fcb-a4397ed925a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:61:9f:75:23:d4:cf:b0:e9:57:d7:66:43:f4:
                    53:c5:71:ce:94:e6:7d:19:49:9d:5b:85:c1:7c:94:
                    42:21:17:43:a3:af:9d:ad:27:9d:ed:18:ff:c2:88:
                    49:43:f4:ad:e5:d0:62:2f:ff:fc:07:3c:a6:b6:79:
                    b4:7b:db:c2:d8:c3:55:b2:23:2d:9f:ce:c1:77:ff:
                    35:e7:c5:6d:16:6a:9d:e1:34:e7:4d:e7:3a:91:76:
                    9f:a3:e1:b9:fa:d4:bc:44:ae:5d:e9:ab:f9:dd:1b:
                    b3:98:a6:af:48:d4:c4:f9:e1:5f:94:93:d3:39:5a:
                    63:34:44:f1:f5:65:8e:0d:95:6a:c9:24:f1:3b:02:
                    a9:27:3b:7e:91:73:48:2b:12:37:49:00:65:bb:18:
                    35:dd:f0:6f:63:06:a6:87:e9:40:f9:0a:07:b6:45:
                    99:d4:5f:d0:2c:27:11:81:3b:f6:a1:f8:c8:59:76:
                    f9:da:9b:a9:1c:4d:62:ee:a9:44:71:f6:d9:b1:09:
                    51:6c:43:63:32:7b:16:4f:1f:12:b3:49:e6:43:95:
                    00:35:40:dc:e4:3e:20:10:48:8a:1e:2b:51:b9:f6:
                    66:eb:5b:bc:75:c7:a3:72:5e:a8:ff:7c:88:34:e0:
                    18:d6:66:38:02:6e:dd:21:85:84:fc:d2:83:b6:cc:
                    9a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BF:62:82:7E:81:F6:4E:18:C8:3D:74:A5:3E:F6:19:13:01:AB:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e7892961-7225-31aa-a19f-633419ec2b31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl

            X509v3 Authority Key Identifier:
                keyid:0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.10.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:b2:12:67:68:d6:ae:a7:7b:c2:99:70:a2:af:a0:a9:c8:1c:
         9c:7a:30:ed:34:6d:5f:dc:bb:5f:55:8d:b7:93:d2:56:67:27:
         d4:88:50:d3:20:9c:79:92:3b:a4:6f:be:60:e4:25:95:6a:b6:
         3c:7c:20:ab:fb:9b:eb:01:ec:5a:0d:21:34:c1:1a:79:46:3f:
         a7:57:7d:f3:4d:43:e0:8b:91:57:d8:ef:5a:63:1e:d4:d0:28:
         64:f7:c0:3e:df:71:ea:1d:42:05:b5:d0:26:2c:93:2a:92:a2:
         c3:ee:78:5a:2a:ad:18:b9:f6:f0:b8:98:ec:48:40:f1:df:92:
         b4:8f:80:63:4f:81:82:16:fd:8d:50:1d:a4:59:52:87:34:74:
         80:c5:b9:8f:73:e8:7c:77:39:43:0f:0c:6e:bb:d0:6d:9d:28:
         ea:7e:5b:db:50:2e:b2:3d:18:fe:65:6d:9e:de:6b:7f:e6:91:
         ea:1e:a8:ea:b8:0d:75:cd:b8:54:9c:26:71:96:2a:8e:79:09:
         08:3e:c7:be:2a:17:20:d7:2f:b6:9f:b4:02:ea:49:a6:88:09:
         fe:2e:47:8b:fe:4d:c4:39:8b:ad:cf:43:cd:a4:2e:b9:86:52:
         3b:e2:19:fa:6b:e8:ed:7d:55:b0:c1:40:4b:9b:8d:09:32:21:
         f1:6d:80:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----