Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd/6377132b-c138-3ca8-903b-d7b5fbef607d.roa
File:                     6377132b-c138-3ca8-903b-d7b5fbef607d.roa (raw, json)
Hash identifier:          dKuLAD5RMqucB1pWnFSLcCCqkqu38ik1eQ4S+gM/RXI=
Subject key identifier:   F0:31:04:1F:4F:3E:7D:5F:5E:FC:94:B8:2F:8D:61:CF:D3:D1:45:1A
Certificate issuer:       /CN=a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd
Certificate serial:       010D0C9F43285848EF6159D3B44548522F8B9A90
Authority key identifier: D5:39:15:F9:DF:04:40:E1:1F:6F:20:04:3B:D2:4E:60:B1:12:03:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd/6377132b-c138-3ca8-903b-d7b5fbef607d.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     26329
IP address blocks:        208.80.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:59:d3:b4:45:48:52:2f:8b:9a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=a44f2f59-c440-4071-8a10-9df410627322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d9:2a:e1:55:56:48:87:5c:c6:9b:75:99:ba:
                    51:64:ed:03:35:5e:ae:65:3a:8d:e9:ba:8a:d7:77:
                    8a:b9:a9:bc:e1:88:bc:8d:7f:2c:d9:4a:91:01:5b:
                    ac:a2:16:30:a0:2f:55:5b:c8:29:7b:02:ef:f0:f9:
                    76:4e:e0:6d:7d:1b:41:35:28:76:d7:6a:2e:74:ed:
                    bf:f9:38:5a:91:b9:f4:f0:26:d3:39:cd:18:84:de:
                    0d:fb:4e:99:7a:4a:e3:66:85:b3:fc:e4:ce:51:9c:
                    a7:f8:f7:a0:99:20:15:20:a1:30:4d:dc:12:fb:b8:
                    c0:bf:9d:ee:d2:d9:cc:f5:b2:75:80:e2:a1:25:0a:
                    f1:08:2d:a6:15:e4:c5:56:78:f8:db:54:32:50:b1:
                    82:5a:cd:14:5f:b2:46:8f:fd:24:dd:a7:78:56:02:
                    65:5b:c2:b4:1b:10:ec:9f:62:3b:48:55:64:60:85:
                    b6:38:4b:04:8a:f1:3b:2a:a0:d6:a0:f1:86:37:b3:
                    01:23:35:c0:9b:b5:a8:8b:7f:fe:49:11:7f:8b:74:
                    03:68:bd:82:51:a3:b4:26:da:25:38:fd:8b:7f:c1:
                    a5:57:e3:40:1f:22:01:fe:e7:84:96:0b:8f:dc:84:
                    27:57:e3:be:1b:ca:93:9a:98:8d:71:8d:ac:64:fb:
                    8d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:31:04:1F:4F:3E:7D:5F:5E:FC:94:B8:2F:8D:61:CF:D3:D1:45:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd/6377132b-c138-3ca8-903b-d7b5fbef607d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.crl

            X509v3 Authority Key Identifier:
                keyid:D5:39:15:F9:DF:04:40:E1:1F:6F:20:04:3B:D2:4E:60:B1:12:03:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.80.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c4:5f:dc:8a:a3:5a:3a:b2:0b:16:0d:48:f2:e8:2a:bd:97:
         25:a8:59:0b:d5:20:89:c6:6d:e8:04:d6:a0:a7:54:f1:bd:ea:
         3f:c8:f5:c8:ee:e3:ec:a0:bb:f6:95:80:ad:00:df:2d:56:b2:
         b3:ae:a8:31:8c:80:ea:58:8b:29:94:86:11:e4:95:b5:a9:fd:
         5a:4c:26:e0:c8:07:f5:8e:2f:08:68:76:bf:6c:0f:bb:4d:00:
         80:b9:c4:0b:d5:c7:0d:87:73:8c:18:b8:63:42:4d:af:ab:82:
         69:66:63:c3:22:9d:82:d2:d8:93:7e:6c:f3:99:39:18:32:5d:
         48:1a:c4:09:97:42:82:9a:98:73:e1:6f:e0:cf:07:76:4d:df:
         f4:f3:5b:58:52:fd:12:7a:24:90:48:fb:05:1a:d4:12:35:c9:
         e0:e2:71:2f:28:8e:9d:c7:49:c5:f0:04:dd:6b:25:29:86:35:
         26:12:1e:a7:08:e2:5a:ce:1c:c4:d4:be:6b:6b:a0:ef:2e:cc:
         9e:03:4d:e8:72:3d:5f:44:10:d2:5d:12:b1:2c:db:8e:c0:53:
         fa:0b:a9:4b:8e:a7:bc:57:d2:0a:79:79:46:01:51:a8:99:07:
         16:9c:67:06:e9:8c:3a:e4:95:ce:37:bc:96:fa:b8:97:9a:69:
         ee:eb:1d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----