Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/c48ae9f2-b169-3573-87b7-876e0ad923a9.roa
File:                     c48ae9f2-b169-3573-87b7-876e0ad923a9.roa (raw, json)
Hash identifier:          3GbdoT6epDD7BcBF1KiYAhgh9xDXK0mNOrBs/JSetzA=
Subject key identifier:   EE:E6:54:F7:0F:84:BB:52:6E:3A:E7:5E:F2:F6:B2:9F:FB:E7:A7:73
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F4328584929E3CE3432AA8C765E78ED80
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/c48ae9f2-b169-3573-87b7-876e0ad923a9.roa
Signing time:             Wed 12 Mar 2025 13:00:53 +0000
ROA not before:           Wed 12 Mar 2025 13:00:53 +0000
ROA not after:            Tue 10 Jun 2025 13:00:53 +0000
asID:                     53355
IP address blocks:        198.150.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:e3:ce:34:32:aa:8c:76:5e:78:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Mar 12 13:00:53 2025 GMT
            Not After : Jun 10 13:00:53 2025 GMT
        Subject: CN=dc860714-d17a-48c6-96db-96b9dcf7989b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c5:91:ae:6e:3d:62:68:b1:3e:df:e0:8c:7a:
                    a9:e4:4f:ea:ae:39:c7:ae:1b:9f:73:07:b6:77:0b:
                    8d:a8:d1:49:e5:c8:cc:81:4f:99:2f:c4:9e:6d:c5:
                    d8:26:1f:57:84:d3:ff:40:56:76:bb:a3:b1:9b:52:
                    79:3c:58:58:2c:84:93:70:80:7b:ca:b3:7b:1e:ef:
                    2f:7b:30:db:95:2a:fe:c7:ab:f8:81:cd:88:95:1b:
                    f0:b8:1c:c2:31:f8:e9:6b:61:d3:8a:61:c8:e8:81:
                    6f:91:9d:63:d0:98:9a:36:1c:96:1c:fb:2e:61:d0:
                    1b:b4:5d:69:28:1a:65:e2:e6:dd:ef:cc:34:a0:c5:
                    21:5f:cc:ed:f6:87:a3:21:8d:c6:31:35:45:ad:ad:
                    48:42:eb:fe:c2:f1:a1:52:0c:85:d4:3b:ad:58:e4:
                    57:f7:41:44:68:02:55:ed:56:23:93:70:aa:e6:79:
                    9c:c6:9d:b4:70:20:02:f5:a6:d1:63:11:25:cb:db:
                    ef:ba:26:9a:b8:4f:31:06:bb:b4:6d:ec:ac:65:3e:
                    9e:ae:02:2a:7b:b9:86:05:76:f3:e7:86:67:7c:77:
                    29:80:05:99:7f:0d:19:05:90:61:df:83:e3:3f:26:
                    88:99:52:47:11:93:02:9a:2b:5d:23:e0:56:8b:f1:
                    ae:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E6:54:F7:0F:84:BB:52:6E:3A:E7:5E:F2:F6:B2:9F:FB:E7:A7:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/c48ae9f2-b169-3573-87b7-876e0ad923a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.150.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:73:46:65:e6:0c:1b:76:30:f5:58:f9:5a:f5:61:3c:b4:28:
         01:82:84:52:e8:19:45:6e:22:05:bb:53:1d:90:09:20:c6:bb:
         4b:17:33:20:50:a5:38:c0:e9:6e:16:31:d6:e7:d3:2f:c2:30:
         12:ad:e7:86:2c:b1:62:85:8a:57:4e:db:34:87:0b:52:03:ea:
         e9:15:4c:9b:57:ed:b9:a0:4a:3f:42:ba:ff:95:b5:0e:6c:b3:
         58:9d:cd:9a:d2:f9:05:c8:3e:9c:bc:e8:05:fd:f1:0d:6c:49:
         aa:0a:98:0b:7d:a0:7f:97:8e:6d:09:52:5d:d6:73:3a:0d:81:
         6c:5c:71:07:6b:7b:bf:54:dd:0d:b9:e8:fe:47:20:f8:c2:a4:
         25:51:73:79:2d:8f:72:45:08:5d:4c:40:c4:52:ae:c5:ff:47:
         9f:42:90:f5:06:51:39:aa:a6:94:d8:9b:f4:92:a2:19:12:cb:
         63:a1:e6:8d:fe:f9:4c:a7:8b:8f:29:4a:ed:40:38:40:8a:a6:
         78:15:5d:57:31:83:7d:f0:4f:23:62:7e:2d:1f:c2:f7:37:a6:
         4d:1b:69:cc:70:5b:bb:55:45:5d:47:e1:1f:8d:9f:61:ea:64:
         7f:a0:48:92:f5:11:65:75:64:52:01:f0:8d:f5:1d:8a:5b:95:
         0f:97:39:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----