Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c57a2ba5-bf7d-34a0-a9c2-04369c666eab.roa
File:                     c57a2ba5-bf7d-34a0-a9c2-04369c666eab.roa (raw, json)
Hash identifier:          5O2Q6ncsMYJ7ON2P+qfUwp2p8yc3EZlxUZap6J/5Q+g=
Subject key identifier:   64:FD:E5:BF:13:00:DE:4A:A7:82:CA:22:2A:7F:18:EA:76:E0:80:F4
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848BBBB7CFA6959023D85D93F89
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c57a2ba5-bf7d-34a0-a9c2-04369c666eab.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     852
IP address blocks:        66.183.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:7c:fa:69:59:02:3d:85:d9:3f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=43857900-a167-47be-ae70-c9fb58147f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6c:4a:35:9a:78:4e:cb:7a:83:f9:6f:3c:13:
                    35:12:84:73:a2:77:6c:44:31:d0:f9:c9:96:f1:8d:
                    ea:b8:67:88:08:a5:6c:6b:9a:bc:52:b2:8d:79:71:
                    9d:15:28:1e:41:95:bf:68:f4:37:30:f2:db:37:fb:
                    4e:3f:8c:f9:3f:c9:d1:33:1d:2b:3c:c7:08:4c:18:
                    af:6b:69:90:2e:58:a7:34:91:e4:a7:0d:af:73:b6:
                    45:6d:68:41:d5:c4:ef:d4:92:d8:04:a1:3b:22:b2:
                    d6:61:bd:46:67:5f:37:eb:34:8b:be:45:53:82:28:
                    12:22:b8:a9:b9:5c:df:ab:db:76:97:e1:4b:21:cf:
                    d1:e7:56:a4:03:a7:31:79:2e:02:00:83:4d:ff:1e:
                    eb:c2:29:c2:86:90:e9:c3:3e:6b:8a:30:cd:f4:79:
                    f0:31:d4:59:97:c3:1d:fe:d4:17:ca:d2:3e:00:01:
                    45:2f:fa:12:67:f6:ff:21:49:07:09:b1:35:46:a1:
                    c7:ba:33:f2:90:9b:2e:33:8a:22:16:2f:f4:21:55:
                    c4:50:2a:17:63:af:a0:d0:a0:31:d1:0b:f8:25:75:
                    60:15:b1:a4:10:2e:42:5e:f9:37:ee:1f:c3:f6:8b:
                    35:ad:f7:dd:e4:88:db:3e:8a:27:c9:19:a1:92:69:
                    de:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FD:E5:BF:13:00:DE:4A:A7:82:CA:22:2A:7F:18:EA:76:E0:80:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c57a2ba5-bf7d-34a0-a9c2-04369c666eab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.183.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:e2:b6:12:16:9f:32:f0:ad:f1:11:37:ee:6b:e3:aa:64:5c:
         69:b2:2f:34:12:e3:18:9f:9b:f5:dc:67:9d:a2:88:e8:60:31:
         b6:c7:0d:63:00:80:ed:a0:5b:3d:d5:9e:0d:9a:1c:d6:40:e5:
         9a:ec:8b:de:f7:9b:f6:7f:8a:73:e2:11:b4:91:78:3c:db:62:
         71:3e:a6:cf:36:e1:9c:f2:21:8f:0b:80:c8:cb:d5:57:e1:b5:
         60:52:35:80:ac:aa:38:a4:ee:2d:a3:73:02:4a:d8:11:91:98:
         b2:08:04:42:c3:2f:2f:76:26:c8:ac:aa:0a:b7:c1:95:a3:f5:
         9f:88:4c:6d:64:f9:53:85:8c:f1:98:61:5f:a4:d9:fc:d0:45:
         51:fe:a5:fe:f9:99:d1:75:c4:1d:68:49:5d:80:5d:34:38:cb:
         0a:5d:69:dd:f9:96:f0:64:17:e4:99:af:14:c7:63:0b:81:e5:
         bb:2a:00:92:da:3b:6b:07:7d:09:4e:89:b0:84:40:5c:a5:d2:
         a3:a0:7a:82:dc:09:85:d7:03:e0:34:80:7b:47:e9:d9:80:a0:
         ab:87:4d:e4:50:e5:5f:d2:42:05:a3:b9:b3:3c:86:d8:79:0c:
         77:c7:3e:d7:b9:12:d0:99:64:ff:7b:f4:3d:6c:bd:83:96:1c:
         2b:d2:57:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----