Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/a3d3d07f-7e7e-3cd2-991b-136fb6c37bcb.roa
File:                     a3d3d07f-7e7e-3cd2-991b-136fb6c37bcb.roa (raw, json)
Hash identifier:          djFzMYwqvZR3R0ntNCJ6eU74p/AjrhN3Jc1nuWGyL9M=
Subject key identifier:   25:B5:5D:8C:43:61:61:C3:68:9F:A7:2B:3E:FA:40:13:E8:48:79:C0
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F4328584929E3C6F96FF6E3BD2608F880
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/a3d3d07f-7e7e-3cd2-991b-136fb6c37bcb.roa
Signing time:             Wed 12 Mar 2025 13:00:53 +0000
ROA not before:           Wed 12 Mar 2025 13:00:53 +0000
ROA not after:            Tue 10 Jun 2025 13:00:53 +0000
asID:                     64251
IP address blocks:        205.213.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:e3:c6:f9:6f:f6:e3:bd:26:08:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Mar 12 13:00:53 2025 GMT
            Not After : Jun 10 13:00:53 2025 GMT
        Subject: CN=4badbb18-4d6d-4cb1-a08e-7214f5074069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:18:f3:ed:28:e9:5e:97:c2:88:e5:8e:57:5a:
                    13:b9:78:c3:28:0b:ea:68:18:90:3f:2b:df:6d:10:
                    05:fa:04:3e:05:1d:2a:69:01:00:ae:fa:c3:5e:71:
                    98:ee:fc:f3:f8:01:48:4c:05:a0:e7:6f:7a:c7:b5:
                    48:84:4c:ff:36:64:b1:47:a8:d8:2d:d8:e5:21:51:
                    e4:c4:90:ee:94:0e:1c:32:eb:af:a2:68:12:0a:55:
                    77:07:3b:42:59:7a:e9:3d:b0:a4:01:a7:6e:61:6f:
                    d0:3f:1e:8c:d4:9d:83:a8:05:43:f8:1d:fe:e6:8b:
                    4b:43:56:65:7a:6d:89:dd:4e:a6:81:f7:2d:e5:1f:
                    7a:5e:a1:dd:68:f6:48:e1:a4:b6:ba:3b:b3:c5:a2:
                    6c:0f:20:20:0c:d9:61:e4:f5:05:44:aa:eb:6f:15:
                    47:00:ea:88:58:33:a6:a5:99:7d:b0:2c:05:d6:0b:
                    a3:78:97:d1:9d:0b:bb:e8:c9:77:1d:e8:40:2a:46:
                    dd:9e:e2:f9:bd:50:68:f5:77:f1:94:0e:de:c2:43:
                    dd:12:35:00:d7:d9:5f:87:d4:f0:8e:27:df:2d:97:
                    95:7d:db:f6:c8:3e:ca:de:a4:3d:1a:19:c2:c7:3a:
                    0a:e4:28:df:56:91:f5:53:71:87:6f:87:22:f8:fc:
                    25:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B5:5D:8C:43:61:61:C3:68:9F:A7:2B:3E:FA:40:13:E8:48:79:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/a3d3d07f-7e7e-3cd2-991b-136fb6c37bcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.213.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:a1:c1:a4:9b:0b:c2:7f:4a:3e:05:82:c9:1f:b6:70:79:84:
         2b:a3:05:ff:11:1a:94:1f:58:02:5a:c2:f7:7b:61:20:c1:1b:
         34:26:14:1f:ef:33:15:4c:8b:89:64:d0:27:57:90:7b:e3:12:
         a8:ca:00:40:25:59:d7:0e:32:42:b3:3a:e4:f5:e5:f6:d6:92:
         4e:3e:ae:62:f8:9a:51:b7:fa:14:56:78:02:8f:01:71:83:51:
         20:d1:cc:f3:d4:c3:4e:d4:bd:77:a8:78:7c:a4:36:9c:0a:69:
         5c:39:41:3f:b3:a2:e5:ec:c4:2d:17:3f:ac:ac:7e:82:0b:f6:
         21:97:13:ef:ac:1b:7e:88:90:65:f7:30:f7:a9:89:69:54:8b:
         2b:88:df:6f:fa:8b:48:26:24:df:e9:ef:57:76:53:7e:e5:b4:
         34:c7:42:22:97:bc:33:1e:39:3c:d3:42:2c:d6:f6:f9:cd:29:
         77:67:8b:0a:59:41:6c:c9:6f:6a:ab:a6:b6:bf:7b:f6:f0:39:
         38:2f:7d:2b:bc:e4:db:c7:36:dc:2c:42:1c:5a:b5:21:44:da:
         89:d5:fb:c0:d2:14:ef:00:10:79:41:db:4e:2c:07:85:da:bd:
         89:ce:eb:08:cf:88:3c:46:67:f4:a0:d4:c2:97:a9:f0:c4:61:
         96:fd:11:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----