Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/030641f0-0c4d-36be-9742-c8311f8aac47.roa
File:                     030641f0-0c4d-36be-9742-c8311f8aac47.roa (raw, json)
Hash identifier:          0zNPnERvkNXKkplIhY9do6JcnBfqV90F+BRVSYeuSGE=
Subject key identifier:   7B:0A:35:53:47:9F:42:1F:87:3B:F4:C3:A9:F6:BD:10:D8:77:58:A0
Certificate issuer:       /CN=ede01171-c7fd-4563-acce-6f9c23457a8f
Certificate serial:       010D0C9F43285848EF6152D97E31555ED5F25300
Authority key identifier: 73:74:EA:4B:7B:2F:74:0A:B2:78:AC:39:BB:05:C5:E9:A4:A7:52:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/030641f0-0c4d-36be-9742-c8311f8aac47.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     397394
IP address blocks:        204.194.184.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:52:d9:7e:31:55:5e:d5:f2:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede01171-c7fd-4563-acce-6f9c23457a8f
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=7d086a37-d38b-4c74-b89d-b3ac727ff4a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:66:df:f4:ab:aa:31:e3:f7:05:8a:9e:a7:12:
                    02:fd:d2:e2:32:8d:3c:25:a4:a9:05:7b:07:9f:a5:
                    86:ee:ae:da:0c:4d:c5:a7:52:33:dc:e7:db:6a:19:
                    b6:b6:ab:89:bd:4c:0c:8b:dc:5a:d0:1f:1f:28:0b:
                    7a:7e:2d:ed:82:43:b8:7a:e2:81:32:c6:c8:c4:98:
                    ad:69:3d:31:31:36:14:f8:24:34:72:4e:48:31:a6:
                    32:eb:9a:f6:b6:1b:b5:b5:49:4c:29:af:82:46:0b:
                    1d:71:4d:d9:fc:95:b9:2a:5b:78:cd:97:a1:49:b8:
                    0a:e2:c4:b4:e3:b0:af:cb:3b:5e:04:26:b1:f5:6b:
                    28:b3:36:7e:6b:7c:b7:ad:6d:3f:66:ca:8a:22:9f:
                    93:24:28:e5:55:e3:f7:5c:c1:ce:f9:28:ce:70:8d:
                    d0:3d:b6:f9:20:08:83:8e:70:6f:16:bb:9b:8a:15:
                    f5:ba:4b:1e:18:47:f7:e2:5d:86:2c:1d:89:31:f4:
                    2a:d3:a7:64:6e:fe:c5:00:cd:c9:de:b3:67:53:8f:
                    14:88:e5:1f:3f:59:46:1f:49:14:c6:02:57:e2:dc:
                    1f:59:b5:56:fa:8e:7a:5b:78:e4:30:1f:ec:14:1f:
                    db:37:99:79:95:3b:c8:92:ee:71:07:f9:89:7a:71:
                    b2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0A:35:53:47:9F:42:1F:87:3B:F4:C3:A9:F6:BD:10:D8:77:58:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/030641f0-0c4d-36be-9742-c8311f8aac47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/ede01171-c7fd-4563-acce-6f9c23457a8f.crl

            X509v3 Authority Key Identifier:
                keyid:73:74:EA:4B:7B:2F:74:0A:B2:78:AC:39:BB:05:C5:E9:A4:A7:52:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.194.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:3d:56:32:86:f9:84:77:0d:64:41:5f:f0:fa:2a:ce:d0:21:
         d5:c0:e7:3c:40:25:f3:ef:bc:6f:83:1d:bd:fa:4d:8b:b8:46:
         76:26:75:e7:9c:ec:97:da:c7:cc:12:5f:5c:db:fa:1b:06:0f:
         ef:85:8b:68:7b:ac:c7:bf:53:96:d8:22:19:09:a2:db:ea:bd:
         08:c4:3d:39:85:9c:11:71:33:e1:bc:4b:49:b1:7e:fc:8e:f6:
         81:9d:6d:01:94:b3:9f:a5:5a:68:57:6c:ed:b0:41:26:3d:dc:
         da:da:f4:e9:8a:ae:10:f3:b7:7d:ad:a4:3f:cc:0d:15:c2:2c:
         02:bb:69:c8:9d:e7:ee:57:7c:51:21:fa:cd:a8:f7:55:dc:22:
         6a:2f:a6:21:7d:0e:3c:e3:3e:1f:3c:ea:5b:61:ad:23:e1:b4:
         d7:18:13:5e:3e:5c:5f:c5:92:90:4f:1d:02:c6:85:9c:bc:64:
         18:63:c9:79:a4:a7:47:4d:73:0f:bf:8f:a1:da:b0:68:da:b1:
         64:f7:a9:88:2c:eb:8c:3d:47:e8:a7:81:34:d5:f9:00:bd:f1:
         ab:13:7b:4e:82:45:bb:98:fa:24:1b:63:a2:89:df:94:7a:2f:
         11:44:ae:60:69:34:42:80:a8:d2:02:37:be:8d:4c:a4:ec:a7:
         95:e9:31:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----