Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c22c6161-cbdb-37d8-84aa-01d1d24db2ca.roa
File:                     c22c6161-cbdb-37d8-84aa-01d1d24db2ca.roa (raw, json)
Hash identifier:          SIFv1prnfiO7aF+jX5NiVY/A54QIEt59Pvx/rQ12NRU=
Subject key identifier:   C5:B3:D6:7F:5A:D6:3C:86:6D:03:46:A8:47:2A:15:F5:64:2C:B9:99
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584937D935989939752D071DB3C0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c22c6161-cbdb-37d8-84aa-01d1d24db2ca.roa
Signing time:             Mon 17 Mar 2025 13:00:52 +0000
ROA not before:           Mon 17 Mar 2025 13:00:52 +0000
ROA not after:            Sun 15 Jun 2025 13:00:52 +0000
asID:                     398823
IP address blocks:        107.149.228.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:37:d9:35:98:99:39:75:2d:07:1d:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Mar 17 13:00:52 2025 GMT
            Not After : Jun 15 13:00:52 2025 GMT
        Subject: CN=7a40eae3-0ea1-419a-bdb5-5cf216e1636d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:97:85:70:6e:93:7d:39:9d:02:02:19:ed:22:
                    54:9f:dc:d5:da:56:e8:ca:cf:fb:f1:e7:8d:bf:6a:
                    40:3a:5c:17:71:19:0a:c9:d8:81:b5:fc:ef:5c:82:
                    19:12:13:f4:85:5c:f5:44:a1:25:27:1e:8b:18:e7:
                    94:cd:ab:8c:40:9a:d2:be:19:48:37:77:8f:82:19:
                    2a:82:2a:98:8e:d1:7c:b9:75:af:e4:ab:e7:a8:5b:
                    e0:27:25:62:a2:4e:76:93:55:f1:01:80:26:22:dd:
                    c6:24:d9:93:90:ba:e0:d1:37:50:36:91:c4:54:53:
                    96:9f:c0:6f:74:2e:d2:24:91:87:0b:79:f2:50:97:
                    eb:d5:f7:51:9b:64:1a:29:32:e2:0b:ff:e4:a8:fb:
                    81:fc:0d:ce:71:47:bc:71:7e:14:3a:9a:2d:13:df:
                    38:c7:7c:39:50:32:83:2c:7f:56:d4:4a:92:cc:81:
                    f2:a9:13:32:cb:7e:d5:eb:3f:4e:af:73:ca:e8:4e:
                    cf:b8:2f:c6:99:e4:94:89:0e:5a:ef:c3:e0:a1:94:
                    d0:98:53:31:c4:e2:d8:39:86:e8:8c:ba:13:a7:29:
                    f7:ef:13:f2:48:53:b5:46:76:af:fa:72:02:ce:dc:
                    c3:fb:9a:bf:9a:ba:fd:d2:be:5c:dc:cb:02:64:8c:
                    82:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B3:D6:7F:5A:D6:3C:86:6D:03:46:A8:47:2A:15:F5:64:2C:B9:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c22c6161-cbdb-37d8-84aa-01d1d24db2ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:5a:24:f7:6e:0d:79:de:e0:22:6f:b7:ae:2a:ee:3d:01:66:
         b5:02:1a:5a:8c:0a:1a:fb:b8:4e:31:d2:1f:26:80:1d:a9:b4:
         58:3d:d4:06:24:95:58:03:e6:5e:3f:f7:b6:61:a6:5f:32:08:
         0b:c3:d8:30:29:a8:5d:29:46:f2:1e:d0:a8:9d:3e:29:23:e4:
         f4:75:e6:db:83:08:97:78:b0:6b:2c:e6:36:dd:ad:d2:2d:bf:
         23:b8:7f:25:58:c7:ba:87:cb:34:5a:08:e2:3f:50:f5:c8:e0:
         71:ac:22:b2:b7:63:13:47:87:7a:58:7e:d6:9e:8d:e0:04:27:
         ac:aa:58:f3:92:37:f2:82:a9:ff:d4:8d:52:c1:45:66:8d:86:
         3a:9e:db:ed:d3:4c:6f:c7:50:2b:35:4f:18:52:ae:d1:7f:94:
         f2:9a:b6:68:33:bc:95:5e:87:67:9c:cd:51:7c:89:d2:aa:e4:
         e7:cc:ee:89:bf:36:3c:71:57:c6:3f:fc:03:d0:73:ea:a1:be:
         8d:07:7c:e5:fa:33:5e:64:57:03:fc:24:3a:e6:30:2f:b0:17:
         00:b1:60:43:db:41:6c:f3:24:97:27:a7:d4:8f:5b:1f:b7:0b:
         25:f5:bf:36:23:57:7f:40:d2:92:eb:c6:32:34:e4:9c:2c:ba:
         11:f2:3c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----