Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9b381475-2f37-3a66-a109-346ba5355fa0.roa
File:                     9b381475-2f37-3a66-a109-346ba5355fa0.roa (raw, json)
Hash identifier:          lCeeTA6vuK7G+dzm7SRQBzCPTnZUWUKUMyUtKeYTaxY=
Subject key identifier:   25:B9:75:06:CE:5B:67:43:66:79:C7:12:8F:EE:8F:18:1B:AD:04:60
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F432858494CC936F61B47B68D76698F00
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9b381475-2f37-3a66-a109-346ba5355fa0.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     394437
IP address blocks:        72.20.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:36:f6:1b:47:b6:8d:76:69:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=15936ff3-73ef-4f57-be17-5efd2c99fd25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0a:fc:6f:b3:ca:b0:2d:66:b0:9d:e6:ac:28:
                    71:78:35:47:70:76:70:ed:5f:e8:09:f7:e8:31:47:
                    78:f2:fb:91:f2:e6:9e:90:5a:f9:e0:31:89:a1:bb:
                    c5:44:22:0d:43:04:88:43:62:b3:76:f5:01:38:a6:
                    04:fb:1d:95:57:5b:8a:c3:9a:c2:44:1e:23:46:ad:
                    0a:9d:e3:2e:f1:9b:3a:15:74:c0:0a:34:20:dc:64:
                    a6:6e:0d:ba:6f:36:02:1e:e7:2d:de:75:b5:2c:37:
                    42:b1:ee:47:db:4e:cd:2c:b7:f1:62:66:bb:ac:72:
                    e3:e8:38:65:e4:7c:e7:7a:14:4c:c3:f3:3f:32:a6:
                    e6:95:e4:9a:ff:63:fb:4e:90:76:68:38:52:70:48:
                    8e:4f:90:42:ca:98:00:ab:2b:8f:6c:8d:b7:d9:a7:
                    8f:f7:e8:4d:c0:05:04:80:e6:b4:24:57:bd:3e:d0:
                    8d:ef:1c:56:38:a4:78:92:d6:33:86:67:8c:08:2c:
                    75:5b:39:8f:94:16:f2:a2:1c:29:b4:e6:0e:78:0d:
                    f9:96:bb:25:35:91:a2:b6:25:0e:b1:79:96:e3:5f:
                    b8:5e:05:86:33:e7:05:b6:e6:d7:2f:7d:26:35:3b:
                    63:34:51:5d:2b:4f:ae:86:5e:02:02:21:1b:dc:21:
                    31:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B9:75:06:CE:5B:67:43:66:79:C7:12:8F:EE:8F:18:1B:AD:04:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9b381475-2f37-3a66-a109-346ba5355fa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:04:db:9d:30:6d:84:a1:9b:be:0b:d5:b6:43:7d:60:5c:ce:
         b4:7e:20:6d:80:a9:b0:e3:51:91:ad:59:5a:26:f4:7e:e2:18:
         88:7c:a0:2a:3f:22:38:52:bf:85:54:c6:20:3f:0a:13:c9:3e:
         55:dd:8d:0a:fb:0a:41:4e:be:ce:63:72:82:24:b2:9d:fa:85:
         4e:5f:4e:3a:b9:72:c4:27:a1:61:b3:93:08:d4:aa:ca:f4:87:
         8d:a6:a3:96:5f:59:17:07:1d:52:3a:95:75:a8:6a:a6:39:c2:
         55:61:9f:47:78:5c:63:fe:40:0a:b4:d4:80:b7:09:3c:e3:fa:
         52:82:d6:c4:e8:94:07:4c:b2:61:80:1d:34:cf:6a:f2:d7:5f:
         15:5f:37:34:7b:95:b4:86:96:8a:79:87:20:ae:53:b0:8b:67:
         ec:2f:ab:4a:87:66:62:d6:1c:2c:a5:27:10:28:7d:6c:31:4c:
         27:19:05:c9:c4:93:96:ca:80:91:e6:93:bd:8f:52:88:3b:95:
         af:1c:80:31:4b:1c:78:55:5e:f8:2d:23:ca:07:61:57:c9:b5:
         93:d0:da:13:4f:a9:82:67:4f:15:6f:75:07:40:96:82:73:73:
         d4:69:64:28:5a:2b:fb:ef:fb:79:22:06:53:da:f7:4d:7e:65:
         dd:f6:54:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----