Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/84bba587-44c9-3c7e-8494-16b9196e9d75.roa
File:                     84bba587-44c9-3c7e-8494-16b9196e9d75.roa (raw, json)
Hash identifier:          S6Q65bQ1xuYCzAoZDV4SS9fDko44pNU0Cn8UJEqPovk=
Subject key identifier:   B3:92:B5:59:48:44:6F:65:22:09:36:03:4E:74:DC:3E:94:75:D4:76
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F43285848F9269C0EBBA1571656639C80
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/84bba587-44c9-3c7e-8494-16b9196e9d75.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     1280
IP address blocks:        149.20.0.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:9c:0e:bb:a1:57:16:56:63:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=d7babd2e-6f6a-4ee0-b3bc-9f01f249570d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3e:74:f6:f8:49:b7:38:2c:60:a8:74:09:bc:
                    bf:33:d1:f0:1a:a6:ae:da:21:98:2d:62:e3:6e:90:
                    69:4f:73:b5:06:b8:7c:59:15:da:fb:41:ee:b2:7d:
                    f7:4c:db:8d:ed:68:f9:cf:9a:a8:e6:7a:0a:45:46:
                    2b:ad:ce:61:af:00:5f:8b:ee:92:b4:6f:e2:c4:40:
                    9b:06:29:32:e5:e9:7a:91:91:6d:56:6a:2f:06:66:
                    af:3b:a2:94:37:14:86:1d:04:28:49:e0:3e:54:3e:
                    46:1a:8a:ed:05:d9:70:c2:49:2c:9d:57:d6:bd:32:
                    63:9a:f6:af:5d:8b:7b:c7:4e:0a:de:06:3a:1e:68:
                    a5:84:b0:2f:3d:d6:ed:b9:24:8c:65:a2:e3:ce:1a:
                    6c:62:fe:ea:96:96:31:71:b8:81:db:57:89:83:fc:
                    c8:88:47:ac:10:78:f0:51:99:ae:1a:46:9e:c1:d2:
                    0e:5f:ae:b5:a8:74:da:81:d6:c7:52:04:30:a9:e9:
                    98:45:58:dc:80:a2:fd:19:82:56:a3:d2:57:b6:22:
                    01:c0:dd:a5:e3:6b:98:8a:18:c4:81:c5:14:4c:38:
                    dc:ec:f1:74:a5:84:da:d9:bb:08:14:ef:85:b4:d7:
                    5d:5d:57:78:b1:b8:59:d6:ad:d8:45:3b:f4:f2:fa:
                    4e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:92:B5:59:48:44:6F:65:22:09:36:03:4E:74:DC:3E:94:75:D4:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/84bba587-44c9-3c7e-8494-16b9196e9d75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:9c:29:2b:d9:5c:c5:14:dd:47:f6:63:2c:55:23:e5:14:e5:
         50:5b:f2:84:40:95:da:ca:81:e8:f3:01:6e:12:03:69:53:ff:
         76:61:9c:0c:f7:6d:c5:c7:07:98:79:dc:31:84:fe:5f:a7:5a:
         27:1a:0a:38:e8:e9:23:f4:12:59:73:a1:94:88:70:41:78:82:
         c1:77:79:7e:44:68:a4:17:93:ae:e6:2c:79:3e:64:21:a3:3a:
         35:c6:d0:20:f4:12:a6:a8:0c:76:03:07:9b:bc:74:6c:5e:45:
         76:b3:14:15:11:10:8d:2b:61:9f:60:75:a4:7b:81:3a:62:51:
         df:2b:7d:72:89:59:35:3f:20:3a:4b:6d:4b:19:2d:92:2a:57:
         a9:2a:bb:0d:bd:59:10:7d:5d:dd:e7:fb:c6:fe:93:28:18:35:
         c2:12:0b:2d:96:c0:57:d6:20:60:a5:aa:f1:42:a3:b1:11:ee:
         f5:08:93:a6:ec:ad:33:ee:f6:e1:ad:02:b7:04:58:21:89:dd:
         f4:c3:d5:bd:7e:0a:44:6f:c9:85:97:17:25:75:18:ca:b6:e4:
         61:09:5a:99:aa:14:f1:3c:29:c6:41:ce:a1:7f:37:ec:8c:b4:
         b1:5a:68:ac:49:26:9d:01:da:21:b8:88:68:e9:66:dc:14:cc:
         ea:b6:b0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----