Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0f356d9b-d693-3452-b640-7ec98a80eb2f.roa
File:                     0f356d9b-d693-3452-b640-7ec98a80eb2f.roa (raw, json)
Hash identifier:          sNyzbq71uVf8vQOR6RGlRY2CicnF+HWQdlvwl8COHng=
Subject key identifier:   B9:FA:C5:A0:1D:E5:86:7C:0F:95:7F:CE:CC:41:CF:70:32:23:3F:A7
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285848DA70F217734D50B09547B180
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0f356d9b-d693-3452-b640-7ec98a80eb2f.roa
Signing time:             Wed 12 Feb 2025 02:00:39 +0000
ROA not before:           Wed 12 Feb 2025 02:00:39 +0000
ROA not after:            Tue 13 May 2025 01:00:39 +0000
asID:                     64267
IP address blocks:        168.91.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:da:70:f2:17:73:4d:50:b0:95:47:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 12 02:00:39 2025 GMT
            Not After : May 13 01:00:39 2025 GMT
        Subject: CN=e778c43f-8ac4-4c67-958f-70e10efa20ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:49:4a:3c:00:e4:63:d2:9e:9c:ae:5a:35:e1:
                    84:04:bf:38:63:27:6f:b9:e4:0f:c9:d1:0c:98:2e:
                    97:4d:cd:0f:f6:6c:d3:5a:96:30:c7:74:0c:4c:ce:
                    c8:69:76:b3:a1:2e:41:5a:aa:07:e4:55:d9:da:56:
                    01:6e:31:34:46:4e:41:fd:07:e8:cb:13:dc:b3:d9:
                    08:c1:6a:7b:be:e4:64:2d:2f:0d:16:ad:00:f0:30:
                    3a:86:b6:31:72:19:a2:ed:00:54:21:24:63:f3:31:
                    00:2c:c6:fa:ab:e0:73:29:82:f4:63:b4:73:d1:24:
                    aa:22:eb:3c:4a:c5:8b:4e:12:f9:53:f5:30:e6:a9:
                    ed:79:db:68:65:0f:66:24:c2:ae:8a:62:35:a0:4c:
                    19:70:e0:42:a5:a9:f6:c8:18:ea:a7:d4:40:16:de:
                    96:de:8a:fb:b4:29:95:a6:39:41:d0:7e:aa:25:5e:
                    d5:07:a1:3a:c1:df:19:3c:e8:06:68:49:d3:4c:bf:
                    3a:6d:90:7b:b2:02:d6:8a:3c:6e:0e:ea:ba:55:19:
                    58:b1:1b:e8:18:2b:da:86:db:af:66:37:eb:88:16:
                    f2:28:ee:ec:95:aa:41:f3:8f:19:aa:b3:ef:df:9b:
                    10:b2:86:ea:4d:6b:e8:01:3a:7e:7a:7f:54:1f:64:
                    bd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FA:C5:A0:1D:E5:86:7C:0F:95:7F:CE:CC:41:CF:70:32:23:3F:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0f356d9b-d693-3452-b640-7ec98a80eb2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:a6:d9:a8:8a:cb:a9:85:c9:26:44:ca:ec:be:64:91:0c:b1:
         fc:53:07:45:f5:03:55:ea:28:f3:3f:ef:2a:c0:40:35:b3:c6:
         57:e4:dd:a3:3b:d9:bc:fa:c5:73:7f:55:40:4d:c0:9f:c8:d5:
         b5:71:be:94:e4:9b:c3:89:b3:42:c9:42:7f:11:e3:e0:70:56:
         70:8d:62:30:56:83:62:67:7e:53:00:d7:fc:5c:ee:37:bf:7f:
         83:59:c3:eb:1c:de:44:3c:9a:09:07:71:64:27:b2:0c:8d:21:
         06:f6:f8:a9:42:54:61:9a:34:51:ec:6a:f0:3b:3d:43:a5:6d:
         d4:c6:73:62:d2:4c:60:a3:12:13:85:64:f2:aa:8f:29:0f:ad:
         e1:2b:f9:2f:e8:04:0d:5a:67:26:36:5e:df:7c:79:52:3f:40:
         2e:36:69:81:ae:64:b2:e8:40:04:10:3f:3d:53:38:ac:d6:f7:
         8f:e1:34:07:e1:e1:16:9d:11:68:32:28:72:e5:25:d8:88:d6:
         0a:e7:e0:eb:63:96:ba:fc:a9:88:ce:83:36:07:1f:5b:27:4f:
         8e:cb:bf:53:b8:8a:b6:4f:f8:ad:a3:11:4f:42:ce:13:65:8e:
         c1:b8:e6:f8:0e:91:78:a6:32:11:82:45:75:de:f1:dc:1d:3a:
         69:c5:69:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----