Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2c848d87-8160-3c84-a858-5ad502a255b0.roa
File:                     2c848d87-8160-3c84-a858-5ad502a255b0.roa (raw, json)
Hash identifier:          kwsNxaNziQ0xHphjfYaTW9vA8Yy72WShGd41W68nQYM=
Subject key identifier:   8B:7A:AB:E7:68:BA:B8:ED:AA:76:FF:28:3A:AB:20:9C:94:55:16:FE
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285848FD56D0AD79C0FAC0EC730723
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2c848d87-8160-3c84-a858-5ad502a255b0.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     7018
IP address blocks:        167.160.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:d0:ad:79:c0:fa:c0:ec:73:07:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=f6f75dad-e124-4a4e-9641-b5e57bafca3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8e:82:41:ec:37:1e:6e:04:3d:5e:ec:7a:7a:
                    86:e2:de:f9:4e:9b:22:64:ea:e2:2b:ab:5f:cc:06:
                    13:ae:8b:41:09:68:e5:ac:5e:68:d2:9d:65:e5:ab:
                    51:34:0d:7b:13:e5:0c:3a:29:7e:bb:af:ff:91:72:
                    39:cc:83:a1:36:03:2e:5b:1b:be:5a:90:a1:09:c9:
                    03:e2:24:90:07:9a:c2:35:ea:91:1c:43:3d:26:81:
                    c7:8b:ce:0d:67:92:fd:82:e1:29:48:01:c9:66:c5:
                    91:1f:a0:61:2b:9e:32:0c:75:7f:b8:9b:ca:a5:9c:
                    5b:05:2d:a0:e9:c1:23:ea:fb:13:02:e4:a0:93:5f:
                    30:55:bb:6f:67:85:8b:87:cf:e3:12:1d:d5:bf:8c:
                    61:c5:5c:b3:a4:9f:4b:c3:44:31:d8:a9:a1:d6:38:
                    e9:71:ab:35:ae:6f:42:8b:17:65:c6:7c:15:2e:a2:
                    0c:31:ad:19:c8:44:ad:02:a5:3b:8b:49:09:52:88:
                    a6:df:aa:13:f2:d0:8e:ba:ff:c1:22:25:fb:99:17:
                    4e:58:bb:71:a9:68:17:d8:47:3e:63:1d:6e:d3:59:
                    7e:1a:98:7e:50:67:1e:43:39:8d:ba:36:63:a2:fd:
                    26:fe:88:15:25:ad:6f:58:e3:54:82:b8:f3:f4:a1:
                    1e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7A:AB:E7:68:BA:B8:ED:AA:76:FF:28:3A:AB:20:9C:94:55:16:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2c848d87-8160-3c84-a858-5ad502a255b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.160.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:44:de:25:28:b1:3a:3e:de:59:8a:14:ef:11:15:c1:09:7b:
         c2:09:28:3c:1b:ff:2a:83:30:0c:58:43:eb:a0:97:24:17:85:
         ae:f4:19:07:e5:0b:e3:16:a8:09:dd:cd:38:f4:54:be:3f:8c:
         2b:f0:e8:8c:a5:08:2c:9d:87:03:70:69:1d:3d:67:6e:5d:e1:
         78:95:b1:80:30:7d:4c:ca:c0:d3:e4:3b:7a:ec:29:1c:eb:a6:
         55:dc:23:e6:02:08:bd:d5:6f:49:f3:a5:a1:0b:6f:23:48:20:
         5a:c2:d8:ad:14:66:72:61:d2:28:41:3b:08:89:5f:0f:cd:64:
         2c:86:bc:f9:b2:5f:29:40:dd:88:c1:be:97:53:05:bc:ec:20:
         53:99:2b:7e:47:3e:0a:1c:af:fc:39:06:52:bd:8f:d1:d7:c6:
         9f:90:53:4c:77:30:4f:4b:81:44:80:b7:65:a7:8d:60:79:68:
         94:25:d3:52:7b:24:84:29:b8:1e:c0:98:5b:55:90:fd:30:5f:
         af:f4:61:04:66:cd:58:da:fb:8c:e0:43:e5:d1:49:20:e2:7c:
         80:19:19:0f:f0:a6:67:ae:28:64:39:96:37:49:87:07:1d:c2:
         b3:dc:a0:5c:61:22:d2:4b:c7:17:b2:43:40:0b:00:37:e7:de:
         9b:7a:7f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----