Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0db0e655-ac41-3221-be15-0870b8c6a5af.roa
File:                     0db0e655-ac41-3221-be15-0870b8c6a5af.roa (raw, json)
Hash identifier:          VIPKXU4uDZRQjxBrWxmlTxMqOBzB1Qhp9Rf5G3MCR0c=
Subject key identifier:   C6:C3:9A:57:D1:F4:6E:1E:A5:43:90:50:D6:FD:E1:2D:17:B6:0E:35
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E006899EC603EC0F009E6400
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0db0e655-ac41-3221-be15-0870b8c6a5af.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        23.84.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:89:9e:c6:03:ec:0f:00:9e:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=8fd07afb-2d76-454d-8cea-68c933bb1c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:15:e9:05:c1:2a:f6:72:5d:be:75:36:50:
                    cc:c6:23:b9:35:8d:bc:83:aa:50:be:be:9e:88:36:
                    dc:5f:9e:ee:46:32:2d:ab:aa:80:3e:da:ec:60:b3:
                    b8:d0:80:a7:2f:6c:d7:bd:dd:38:04:d1:c5:d5:3e:
                    a2:03:7e:b4:05:26:ab:0c:bc:78:5b:9b:1c:4a:9b:
                    f3:c4:00:42:69:d4:cd:63:39:ea:f5:3c:1c:8e:cc:
                    c6:bb:90:b6:55:98:fb:a7:28:ff:80:11:c2:5b:54:
                    1a:9e:bb:1d:46:7e:07:21:68:0c:9c:67:68:19:11:
                    1e:a0:f0:4b:a9:da:16:5e:2b:04:85:d5:d1:f2:7c:
                    51:d5:cc:f5:19:0a:20:a9:b0:db:d7:48:cc:49:d7:
                    e8:33:f6:5a:56:ea:dd:cd:f4:dc:b2:23:27:e6:8c:
                    cb:57:ed:3d:83:1a:a4:30:76:78:01:a4:73:f1:17:
                    ef:1b:b0:b7:58:3b:5f:67:d1:54:ce:7f:95:88:7b:
                    44:f5:1d:a2:53:bc:20:ab:ec:27:ad:c9:8b:6d:3f:
                    8b:c9:0b:18:3e:d9:35:c0:da:0b:7b:6d:81:d2:48:
                    8a:f6:0e:eb:07:b9:48:a4:d2:7b:f9:46:61:98:5b:
                    d8:5f:04:18:37:41:d0:9c:c0:c1:75:9c:36:2a:62:
                    00:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C3:9A:57:D1:F4:6E:1E:A5:43:90:50:D6:FD:E1:2D:17:B6:0E:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0db0e655-ac41-3221-be15-0870b8c6a5af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.84.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:54:94:f8:b8:5b:21:95:da:d4:65:07:e5:b3:a3:1d:1e:4a:
         63:ac:50:01:55:4e:5b:33:05:b4:26:db:4f:84:2f:b2:f6:86:
         37:aa:06:0c:e2:18:2e:9e:24:fd:1f:0a:ea:35:b8:ea:e9:8c:
         4b:00:0f:1b:af:13:57:7a:3e:c9:6a:9e:ac:01:f7:22:d5:6f:
         a7:eb:be:f6:5c:bf:38:8b:da:54:16:a0:e7:9c:cd:48:77:85:
         cd:e7:9f:f8:46:11:51:f2:2f:0d:ac:e4:68:93:62:05:c8:18:
         c9:63:f7:3c:5b:4a:29:d3:df:ae:d9:75:75:7e:84:9c:d6:fa:
         f9:8d:54:24:7f:8b:58:c3:65:5e:60:9b:2a:e8:b8:4e:c6:f6:
         81:3f:a7:90:d2:02:fb:59:a0:dc:2b:57:fe:76:08:8d:17:4d:
         e8:b7:d1:11:ab:07:4d:67:b2:1e:52:e3:69:87:7a:fb:cf:53:
         9b:8b:15:4f:16:0f:87:10:7a:d2:33:5b:3b:cc:ac:d6:7a:82:
         c9:21:10:a2:60:49:c4:5a:da:bf:07:66:0e:39:95:88:1e:24:
         d2:b2:ae:d4:fc:6f:72:07:3d:b2:f7:97:c2:ae:fd:88:64:27:
         df:fe:31:c7:fd:36:d0:b8:b2:89:13:c9:15:12:48:2f:2a:ec:
         54:58:00:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----