Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/6d95d7d9-537a-3a40-b0b1-d36bedae2041.roa
File:                     6d95d7d9-537a-3a40-b0b1-d36bedae2041.roa (raw, json)
Hash identifier:          Lxh65Qk6eYVKgZX7bmEeAE+PJ3WD8ASL9Yfm+Vpbe08=
Subject key identifier:   CA:64:45:8B:17:B6:BD:32:EE:3F:1B:48:F2:D5:03:0A:22:32:1B:2A
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285848C58208D34D4122B322EE8B40
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/6d95d7d9-537a-3a40-b0b1-d36bedae2041.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     32381
IP address blocks:        207.126.152.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:08:d3:4d:41:22:b3:22:ee:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=0799ad7a-0e54-4b5b-907d-5cc2db53d286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ea:a5:ef:7f:9d:07:9f:15:60:42:bb:91:51:
                    94:3d:31:29:8a:0d:00:25:39:3d:07:1b:36:ea:3d:
                    08:5b:15:bc:21:15:bf:c2:79:75:b8:db:f9:46:a3:
                    0b:57:be:0c:3a:71:9f:78:95:dc:2a:59:b8:4f:66:
                    17:6b:ca:e4:e3:32:a4:9e:78:16:f0:77:0a:a5:21:
                    b6:7f:03:aa:bb:90:3e:7c:a2:05:5e:a9:2b:43:97:
                    16:38:1c:cb:a7:b8:bd:3f:e9:9a:43:40:25:a8:c1:
                    33:0a:17:eb:e5:5b:9d:38:9e:36:fb:b1:bf:22:c2:
                    53:87:30:5f:d3:0e:f7:69:b5:f9:30:6b:d1:74:86:
                    f5:32:09:b9:57:72:3f:64:10:e4:5b:8f:42:8c:ad:
                    76:88:a0:37:05:be:e1:5f:78:9c:59:92:c8:17:0a:
                    c1:a7:1a:bf:f7:53:f7:79:6e:2f:2c:bb:a1:61:57:
                    6c:3a:03:2b:84:15:0b:44:5b:3c:b5:03:4a:95:bd:
                    83:39:c4:49:70:f3:c2:7a:c0:57:43:fc:c4:2d:e6:
                    7c:08:ad:7b:64:f3:ce:2c:5d:f8:5c:91:9d:a9:7a:
                    1d:58:41:b0:d0:b7:53:bf:d4:a3:6a:8d:71:41:7f:
                    41:66:91:88:3a:7f:8a:6b:42:7d:14:1c:a7:ca:de:
                    0b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:64:45:8B:17:B6:BD:32:EE:3F:1B:48:F2:D5:03:0A:22:32:1B:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/6d95d7d9-537a-3a40-b0b1-d36bedae2041.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:03:19:72:c9:2d:10:8a:4f:0c:44:53:f3:3f:e7:56:f6:9a:
         b5:6e:97:5c:86:5d:eb:5c:1d:38:41:55:0c:3a:36:2a:e9:02:
         25:6b:23:6a:3b:8a:39:01:42:f4:11:76:61:d5:44:a2:b9:3c:
         d7:62:dd:83:7a:e2:68:c9:9e:9b:64:d1:54:a9:c2:8f:73:67:
         b6:27:da:96:9e:b2:5c:e2:d2:b1:f7:90:a0:f1:e8:d9:08:8c:
         2a:5b:b0:3e:44:cc:99:9f:b5:77:a4:d4:7b:06:98:7e:5d:ff:
         08:0a:25:07:16:4a:b9:e3:23:23:ff:1d:79:97:8f:22:7a:93:
         79:0d:f2:5c:bc:6c:01:74:ee:b8:2d:4e:2a:37:42:7f:3c:a0:
         74:55:b3:d2:a6:a0:c9:df:6c:2f:5b:e5:5c:49:2c:43:10:4a:
         49:02:89:41:9b:c0:c1:c3:87:b7:62:60:d4:b0:5f:db:62:13:
         fd:a0:0f:1c:53:a8:32:35:85:17:88:39:bc:d8:17:25:e6:18:
         29:4a:9e:64:d1:47:95:33:df:5f:9b:69:b7:d5:b9:0d:34:b4:
         a5:76:58:36:ce:99:89:cb:ae:c4:14:56:4b:e3:3a:09:b2:d4:
         7a:57:84:22:6d:99:39:9d:16:2b:ae:40:75:ba:fd:c2:c6:a4:
         32:28:78:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----