Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/ecd83093-48c8-3fbf-9971-844d7a1cf89a.roa
File:                     ecd83093-48c8-3fbf-9971-844d7a1cf89a.roa (raw, json)
Hash identifier:          7OqZ4ColJU3h/U9aduNX68x2EEZ5EIivRTZHTdFLgBM=
Subject key identifier:   6F:F0:C2:6B:ED:27:1E:25:6E:86:34:D0:60:8F:03:3D:6F:F1:15:83
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584981D45A85E7BB1D28EB1DB000
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/ecd83093-48c8-3fbf-9971-844d7a1cf89a.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     54994
IP address blocks:        174.35.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:5a:85:e7:bb:1d:28:eb:1d:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=39f4b8d9-4a22-459c-ac1b-046fa582de29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e6:dc:ae:76:a5:d7:fa:40:7b:91:57:5b:92:
                    6d:f0:9b:a5:49:d5:9a:cc:7c:6b:e4:a9:db:72:91:
                    7c:ab:87:11:88:52:1b:20:42:c5:69:06:af:8d:66:
                    24:c3:e3:84:fc:fd:60:8b:b0:14:cf:2e:41:bb:0e:
                    d0:5b:5a:09:3f:b4:81:d6:da:e1:9e:9f:59:93:f7:
                    01:1e:0b:0f:ec:45:40:a1:69:c4:3f:4d:01:8c:8a:
                    64:89:15:20:e4:05:dd:05:fb:19:c6:a6:9d:f6:9c:
                    70:b4:34:bf:07:e4:c3:a8:30:a0:3d:32:fd:06:7e:
                    46:7e:16:9c:8a:af:88:92:82:0e:6d:fb:c7:ed:7d:
                    ec:e7:34:60:b9:2c:13:b1:39:aa:8d:25:45:a0:80:
                    fb:ad:b0:cf:73:0b:18:53:16:26:2b:79:53:01:89:
                    f9:ca:42:be:43:ce:37:17:a2:9e:5b:6b:fb:18:8b:
                    53:8f:1e:76:a6:a8:ff:87:17:93:29:40:5e:51:ef:
                    27:72:98:8b:3a:44:dc:a4:e3:6a:a9:87:b8:05:eb:
                    70:61:21:d0:93:73:a2:c0:f5:0c:e5:97:00:34:02:
                    fa:4f:08:04:bc:b4:7f:e9:ca:6e:6e:a7:b2:5e:26:
                    1f:e4:08:41:47:cf:da:46:47:65:84:2f:f2:9b:ae:
                    ba:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F0:C2:6B:ED:27:1E:25:6E:86:34:D0:60:8F:03:3D:6F:F1:15:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/ecd83093-48c8-3fbf-9971-844d7a1cf89a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.35.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:4f:23:d1:f6:3f:e2:8d:f2:04:d2:74:d3:d5:f9:ef:22:bc:
         78:cd:af:26:f1:62:98:19:b3:12:27:78:50:9b:82:26:37:75:
         4c:d4:aa:38:46:1d:2e:dc:0f:79:bc:ea:c6:be:b5:c3:6a:94:
         ae:3c:7f:2e:e9:93:b2:6d:b3:66:e7:75:e8:97:87:7f:b0:8d:
         e0:d3:99:6f:0d:25:09:b8:76:01:eb:c0:3e:83:05:c1:25:c6:
         89:7d:3b:b5:47:21:8f:65:b7:59:1b:b6:01:3e:24:7c:65:6f:
         25:14:12:65:4f:d7:72:b7:72:8c:14:6a:32:51:99:ff:d4:04:
         a4:37:a7:ca:ae:0d:23:0c:7f:12:90:2d:45:24:00:5d:ff:a4:
         fe:c1:40:5f:84:a6:67:0d:17:0c:70:0c:e3:40:97:56:86:da:
         b5:ff:2a:8d:d0:b9:c1:de:b0:07:33:0e:ba:98:70:31:19:08:
         86:ff:b6:77:a7:94:ef:4b:86:c1:76:89:b6:70:ec:77:4a:82:
         ef:35:74:3b:b8:b1:6c:8d:80:41:74:4f:b7:b2:3c:80:94:e8:
         90:93:83:ab:f2:ab:07:08:17:ad:a7:06:79:1e:2c:60:ca:d7:
         0d:14:33:a6:ea:36:45:8a:2c:4f:5f:11:a2:e2:a2:25:7a:5b:
         1b:47:b9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----