Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/354ba8ba-e988-31b8-bc2d-3755429cdb02.roa
File:                     354ba8ba-e988-31b8-bc2d-3755429cdb02.roa (raw, json)
Hash identifier:          bUjbSbCJQP/hiViFLp9dtbR+kbh6vVm+ruFwf59Bgxk=
Subject key identifier:   5C:C7:CC:2A:1B:5B:9F:61:FC:EE:55:E8:DC:8F:22:20:B6:4B:FD:0E
Certificate issuer:       /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial:       010D0C9F432858493243E056546B7815E0830240
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/354ba8ba-e988-31b8-bc2d-3755429cdb02.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     13213
IP address blocks:        206.130.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:e0:56:54:6b:78:15:e0:83:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=74bf58a4-efa7-49c2-9446-256d47a85265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:71:e8:81:31:08:78:fc:c5:a9:a9:de:59:27:
                    71:c3:f8:3f:9f:76:71:c2:20:96:27:15:4d:dc:58:
                    fe:09:73:0b:dc:37:7f:08:47:1e:79:66:79:77:24:
                    d8:f2:f5:d8:c1:ad:c8:0e:97:72:90:16:4c:c0:3f:
                    ac:5d:25:58:28:60:09:04:03:e4:75:85:12:37:15:
                    67:ff:05:47:44:4e:16:2b:da:2c:89:51:f9:c1:49:
                    2b:5e:56:94:49:a2:9d:82:63:52:ab:91:5f:be:ad:
                    77:70:7e:86:27:e3:85:c9:17:78:3c:96:90:2b:93:
                    90:c2:62:4e:c2:42:72:9e:58:d1:c0:18:db:15:76:
                    4d:a3:79:ef:83:6d:af:72:3a:91:59:c5:27:71:b4:
                    e8:52:b1:4f:41:e3:4a:4a:e8:d2:5d:0d:93:ae:24:
                    7d:e7:a4:96:3f:eb:7f:75:21:d4:62:00:92:07:ae:
                    8f:8d:33:a0:38:0e:b1:ec:e4:39:06:b0:51:17:16:
                    bc:0f:80:8d:6d:ec:a8:b5:d7:86:c4:39:23:a5:04:
                    af:cb:19:32:f9:75:b9:ee:62:c8:1c:59:02:29:6a:
                    73:43:e8:fc:cf:43:c8:e3:d6:e7:8d:1e:12:3a:1f:
                    8a:44:20:e7:d3:f4:fb:10:7c:04:e0:5b:14:a0:bb:
                    53:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C7:CC:2A:1B:5B:9F:61:FC:EE:55:E8:DC:8F:22:20:B6:4B:FD:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/354ba8ba-e988-31b8-bc2d-3755429cdb02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl

            X509v3 Authority Key Identifier:
                keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.130.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:e9:00:7c:df:32:db:f1:41:3b:41:87:ec:b5:38:84:8b:0c:
         90:6f:e6:ff:a0:79:8d:a2:59:16:a3:06:2b:7d:0b:67:5f:0e:
         e0:d9:ae:df:79:59:73:64:38:0b:9f:13:f0:e8:76:55:af:dc:
         9f:f2:c4:bd:c1:27:c2:54:da:03:b2:85:ad:4e:56:f8:c1:91:
         f9:71:62:f5:19:24:1e:3a:09:71:ab:67:9f:77:13:28:95:28:
         19:37:61:b9:7f:35:2f:5a:8d:6c:5d:83:1a:98:32:28:27:34:
         39:13:57:00:c4:a9:99:6e:4a:99:02:52:22:d8:67:e6:99:37:
         14:33:33:33:e2:48:40:89:79:9b:6b:50:b9:c1:4e:5f:4e:05:
         92:c3:ff:ab:df:13:dc:99:0b:6e:a5:b1:e7:fb:fb:15:5c:18:
         7a:f4:ff:98:19:c2:2d:8a:d2:69:94:c6:7e:0d:e6:86:c4:31:
         d3:a7:11:d8:1a:51:6b:d9:43:46:0a:2e:f2:c9:88:1b:ad:c7:
         cc:60:77:33:bd:fe:d7:44:c5:b5:7c:4b:aa:81:86:9c:a2:66:
         75:e3:e5:e4:7f:c9:04:ae:bd:e0:0b:e6:9e:93:4b:7b:92:b2:
         5e:d5:45:73:1c:42:c8:d0:23:53:3b:06:73:4d:45:e2:ee:3e:
         7e:1d:0b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----