Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/c8a182e4-0946-3bfc-b370-c707ad7f80bd.roa
File:                     c8a182e4-0946-3bfc-b370-c707ad7f80bd.roa (raw, json)
Hash identifier:          DyVxtg4y5iwwI6gbK/dMWGTBTcNQ8Iwa0jDhwztpoxI=
Subject key identifier:   75:7C:04:5C:F8:1C:92:9C:40:C8:EB:F3:C6:24:30:B0:E8:A8:D7:01
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F432858495ABEC266B523B429C2B98728
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/c8a182e4-0946-3bfc-b370-c707ad7f80bd.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     1239
IP address blocks:        134.202.16.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:c2:66:b5:23:b4:29:c2:b9:87:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=0a8c64c2-37e0-41b0-a5c0-d67cf7bbec5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4d:d9:07:44:17:ea:4d:39:48:d8:2f:99:5c:
                    b9:13:51:d8:52:5d:e6:b1:99:27:dc:57:36:4a:a9:
                    b4:7d:79:3a:48:2c:ed:96:d5:ce:97:50:80:4d:43:
                    36:d5:f2:87:dc:4c:c1:39:47:63:27:7b:73:84:35:
                    3c:35:37:d7:1b:56:77:67:fe:13:16:9a:53:61:44:
                    c0:e2:a4:ad:28:0a:17:dc:5f:f6:65:9f:96:06:ec:
                    b9:2c:bd:3a:1b:eb:e1:27:88:08:bc:ee:8b:2d:8e:
                    5b:aa:3a:3e:dd:87:f7:58:cb:17:b7:75:eb:71:c4:
                    7e:7b:94:35:14:d9:2c:1e:ec:93:8a:8b:8a:61:4d:
                    ed:04:fd:8a:0c:f0:aa:9a:82:7b:be:bc:bf:f3:f4:
                    aa:2f:f5:34:b6:f4:24:d8:4d:eb:6b:61:dd:a4:6f:
                    b7:e2:9e:f2:d5:4c:44:aa:03:80:34:64:02:d2:f8:
                    1a:bd:9c:d6:fa:e8:db:20:30:c5:be:5c:a1:38:e7:
                    20:ad:33:b9:12:da:6d:c8:d5:47:24:89:1d:c9:c1:
                    fd:cd:1a:9a:28:ee:19:0d:01:6b:2a:b9:f3:65:e5:
                    f9:33:af:17:fc:e2:8a:e4:03:21:55:e8:f0:88:6c:
                    d1:05:da:5e:b1:7c:d3:13:c4:94:fe:fb:90:dc:94:
                    77:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7C:04:5C:F8:1C:92:9C:40:C8:EB:F3:C6:24:30:B0:E8:A8:D7:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/c8a182e4-0946-3bfc-b370-c707ad7f80bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:02:be:ff:36:24:b1:b7:2c:f5:3b:9b:d1:81:e6:de:62:b4:
         6b:1e:8b:c7:54:26:15:7f:e0:72:25:f4:51:9e:87:1c:9d:8e:
         7b:63:05:46:ce:13:41:6c:e3:4d:30:83:24:57:b5:1a:44:bf:
         b7:ea:a5:3d:08:2d:12:1d:26:0a:2c:0a:54:29:85:ba:df:95:
         c5:bc:53:15:b4:39:7a:ba:c5:4f:f1:a1:d0:5e:c3:e3:be:94:
         1b:b4:76:f2:2f:61:87:eb:32:95:d7:66:0c:8c:bd:8f:c9:8c:
         08:53:39:fe:ad:3f:3e:00:92:be:2d:79:ab:02:c2:80:8d:ca:
         92:be:b2:c8:ba:de:e5:ac:7a:24:8f:38:97:d9:9f:d3:9a:37:
         64:cf:fa:87:c8:d2:6c:76:17:23:cd:fd:0a:61:f1:dc:46:78:
         e3:a5:c0:89:fa:e4:fa:95:a0:14:f8:86:8e:8e:72:30:99:c1:
         4f:97:a6:42:32:25:f9:b2:50:7e:06:43:a3:43:85:79:65:cc:
         f4:0a:f0:f0:ff:0f:c9:34:d0:0e:7b:ef:a7:b1:b6:29:10:f0:
         4c:84:8e:31:a6:a0:92:f4:42:df:02:0a:d4:be:82:2f:3b:a9:
         f9:d9:84:c7:9f:c6:80:62:f4:75:4e:43:67:7e:49:3e:47:e2:
         8f:e6:8a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----