Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/630b4887-1e59-3ba7-8650-a78cf4d11ba5.roa
File:                     630b4887-1e59-3ba7-8650-a78cf4d11ba5.roa (raw, json)
Hash identifier:          svBZ+BAZ9hgzNufBttLnyeN4C1GBlSndMXSeBxUjjPU=
Subject key identifier:   37:36:FF:DC:EE:D7:4E:56:DE:71:4D:5E:53:D8:D4:1D:64:C3:81:14
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F43285848FA8BEBCC4289323C002E9500
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/630b4887-1e59-3ba7-8650-a78cf4d11ba5.roa
Signing time:             Sun 23 Feb 2025 14:00:51 +0000
ROA not before:           Sun 23 Feb 2025 14:00:51 +0000
ROA not after:            Sat 24 May 2025 13:00:51 +0000
asID:                     398823
IP address blocks:        107.149.234.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fa:8b:eb:cc:42:89:32:3c:00:2e:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Feb 23 14:00:51 2025 GMT
            Not After : May 24 13:00:51 2025 GMT
        Subject: CN=a51aefe0-7749-4773-8684-cbc38e7ed12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bf:2a:f0:f3:e3:2f:3e:35:c3:96:bd:08:06:
                    8a:75:5b:7e:4c:c6:36:b9:3a:d8:3b:4e:4a:0c:b2:
                    f5:4a:88:92:b3:45:ef:3b:65:7e:14:60:36:21:1f:
                    87:be:44:4a:28:76:e4:8b:01:75:a3:14:1e:ac:e4:
                    c5:a0:a4:d6:a7:3c:55:2d:ff:98:cb:a9:08:cd:c1:
                    e4:b6:6e:8a:0f:4f:85:66:bf:93:57:e1:a4:77:de:
                    50:b6:58:40:b1:0a:e5:67:50:ed:ed:5e:a2:8a:fb:
                    69:be:8f:0a:d7:83:4e:14:25:78:16:0e:40:6c:64:
                    c0:87:73:57:9a:fb:33:d0:8b:ec:8a:5e:02:ee:91:
                    99:09:41:12:1f:3b:a3:5f:42:9b:a3:54:f2:6f:b2:
                    56:1c:eb:e8:bd:13:e1:d3:fd:8d:38:d6:a1:47:cf:
                    68:8b:4d:7d:be:4b:db:0a:92:b1:a9:3f:46:64:b6:
                    13:bf:fe:18:76:1a:05:12:4d:6c:00:15:e0:8f:0f:
                    f5:9c:3a:68:d4:f1:bd:31:92:31:e0:eb:67:82:98:
                    27:f9:72:55:8a:37:9f:98:3c:2b:64:f2:3c:97:d5:
                    af:73:0f:7f:02:65:54:35:b1:7e:a8:1b:d9:31:17:
                    4d:0f:e0:ea:f1:99:29:f6:f1:53:df:e2:40:80:75:
                    6d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:36:FF:DC:EE:D7:4E:56:DE:71:4D:5E:53:D8:D4:1D:64:C3:81:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/630b4887-1e59-3ba7-8650-a78cf4d11ba5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:21:43:02:d1:0f:43:58:10:52:10:a4:f3:0e:4b:7f:17:f6:
         b7:d5:31:3d:50:72:4d:ab:b4:b7:73:fe:b6:81:c9:91:8b:87:
         85:f5:78:07:a9:ff:1e:e1:ca:14:8d:70:e3:27:ba:b3:2b:d6:
         44:b4:fb:09:1d:2e:08:df:ab:69:87:b6:26:e8:22:e8:61:eb:
         44:be:ac:d0:c9:fd:ff:c2:c3:72:00:01:56:a8:1a:68:a3:75:
         92:43:04:c3:9b:7f:98:83:6c:e2:cc:43:e5:36:ec:f1:db:12:
         c9:7f:d9:62:23:0f:f6:52:a3:d8:9e:60:93:d6:e8:0f:cc:17:
         ff:98:e8:2d:1d:fa:6a:76:7f:7d:91:81:a3:63:c6:66:e1:57:
         61:f8:6f:08:c4:d0:d4:57:e0:70:76:b9:30:b2:f6:e5:cc:e4:
         00:7c:9f:01:9c:fb:46:a5:ea:b5:b5:92:20:9c:82:f1:5e:5c:
         c1:ec:b2:74:b7:c7:41:b3:d0:51:f0:6e:60:41:f2:9c:28:ca:
         af:a3:0e:b6:88:ff:a0:74:81:9a:44:1b:ad:df:d3:bf:f7:c0:
         e1:0c:d2:76:f6:06:2e:37:c6:d2:19:ea:c6:64:25:28:00:be:
         3c:59:26:ef:be:5a:91:1b:de:27:6c:f3:c9:57:15:b2:1f:25:
         29:05:73:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----