Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fe576cf0-249c-31de-85d5-2e6ee0bd9e06.roa
File:                     fe576cf0-249c-31de-85d5-2e6ee0bd9e06.roa (raw, json)
Hash identifier:          JDhlUkc5faLvfg7mWyQfwy9+a22l2U2AZOM5HSs80yA=
Subject key identifier:   DD:47:5F:15:F3:DC:D3:BD:72:74:AC:3D:AD:E6:98:6F:62:19:8A:FF
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285848F65BCC7486EEE0ACA7B4EC00
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fe576cf0-249c-31de-85d5-2e6ee0bd9e06.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     16904
IP address blocks:        207.191.158.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:cc:74:86:ee:e0:ac:a7:b4:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=7ae5b3fe-3807-4017-9984-37a8dacc913d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:22:6b:0c:f8:c4:7a:1f:53:38:2b:73:5a:97:
                    e7:e6:a8:07:73:9a:0e:c6:40:dd:44:21:bf:99:54:
                    17:a0:b0:0c:c4:59:23:0e:d2:59:be:64:c7:7e:8c:
                    8d:42:4d:1c:94:b1:a1:2d:ff:22:9a:19:a4:49:2c:
                    f3:c8:4b:d9:a7:5f:57:9d:97:d7:74:de:6b:38:c9:
                    b0:b5:d4:eb:c6:07:ee:37:32:f6:39:a6:94:b4:9a:
                    21:62:6d:d3:67:82:89:4e:b4:6e:e6:52:88:4f:49:
                    68:91:df:ca:c9:dc:16:67:01:87:0f:82:a5:58:59:
                    f7:7d:1c:c0:be:74:35:69:29:91:84:26:60:f4:e5:
                    37:30:c7:85:5d:73:86:0d:d1:72:9c:b8:14:51:81:
                    19:fc:c0:12:c6:f3:13:c6:11:75:6a:85:7f:9c:a4:
                    3f:e4:a1:00:d1:ff:55:57:a8:fe:8b:8c:c6:24:cd:
                    97:89:96:d8:d5:bd:98:09:d8:68:75:7d:04:18:81:
                    20:71:69:c2:f9:92:e3:12:75:60:01:1b:5d:b6:c4:
                    67:e3:0a:e5:46:ff:c8:38:d4:b2:71:5d:35:56:6e:
                    4a:b0:66:fa:be:6c:78:a8:aa:5b:ed:ae:e3:3a:cb:
                    ed:3c:0d:6d:9b:ae:51:6f:1a:8d:26:1c:d4:6b:40:
                    b0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:47:5F:15:F3:DC:D3:BD:72:74:AC:3D:AD:E6:98:6F:62:19:8A:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fe576cf0-249c-31de-85d5-2e6ee0bd9e06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.191.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:4f:6c:58:25:4f:6e:f9:50:63:e3:3b:86:91:7f:a2:3f:43:
         25:75:26:9a:ab:d9:40:91:fb:46:0a:d1:80:a4:7b:54:0f:8a:
         60:3e:7c:f2:52:fe:13:0f:3b:71:9b:15:5d:15:fd:33:e8:5c:
         a4:dd:56:40:0d:99:84:f9:9f:67:e7:84:db:7b:de:96:ff:a9:
         6c:f6:78:0f:d5:01:1b:12:fc:e1:e9:ca:47:ef:77:92:86:40:
         6a:92:21:8a:15:92:34:73:cb:b6:7d:41:04:e8:c3:3e:01:3c:
         32:32:74:a0:07:d4:2b:b9:5c:9f:a3:19:ed:17:c5:c0:86:a2:
         4a:da:90:3b:fa:af:d5:80:d5:56:76:a0:5b:91:3e:aa:f7:ae:
         7d:a7:1b:50:a0:39:e8:6b:12:e0:15:48:1e:68:e2:cb:9a:eb:
         13:32:2b:7c:30:86:58:32:a9:c2:39:d9:d8:ca:54:14:69:a3:
         21:e8:d6:cf:f6:8c:49:08:56:f3:4f:65:82:ab:65:b0:af:ea:
         a7:02:46:1b:48:6d:34:58:2b:e1:22:31:bf:28:42:d1:de:8e:
         5c:7e:01:b8:73:02:86:57:bf:71:a9:45:c9:d8:43:75:84:78:
         f5:66:8e:66:83:36:b5:0f:0b:38:f5:33:25:4a:1f:22:29:87:
         81:6d:d6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----