Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/21e16498-e39c-38cd-a8f8-470bb4f66f80.roa
File:                     21e16498-e39c-38cd-a8f8-470bb4f66f80.roa (raw, json)
Hash identifier:          sFxD5DIXJYIFfZU38WOrrAH0O0P/flrpHILTVVpRftI=
Subject key identifier:   84:AE:CE:CD:29:3D:43:7E:81:D5:AB:47:06:67:CC:FA:C8:37:79:9C
Certificate issuer:       /CN=1c5adecb-4ac8-432f-817c-84bec47b7708
Certificate serial:       010D0C9F43285848F9267EFA1AD59371ABE92C80
Authority key identifier: 55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/21e16498-e39c-38cd-a8f8-470bb4f66f80.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     398416
IP address blocks:        149.234.240.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:7e:fa:1a:d5:93:71:ab:e9:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5adecb-4ac8-432f-817c-84bec47b7708
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=f696ed08-f661-4608-aa08-a4d8df15d5f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:18:26:d8:22:2d:1f:7b:47:a3:97:99:19:09:
                    80:0c:31:cf:01:ad:5e:cf:0b:b7:49:91:46:3f:ab:
                    4c:87:dd:98:e4:df:d7:df:fe:c5:5d:e2:aa:a0:0e:
                    aa:5a:94:86:cc:6a:15:81:6e:14:f2:e0:6b:3e:5b:
                    ec:c5:5d:f2:56:33:e7:d8:1c:ec:07:27:8f:6b:d4:
                    aa:9d:b0:2f:6c:18:ea:a2:94:78:fc:87:72:f5:1a:
                    d7:a4:49:5e:ef:66:61:b6:f5:b7:0c:45:76:86:ab:
                    dd:82:7d:ec:65:d1:92:68:be:87:6b:9a:60:70:d3:
                    22:3e:68:1a:b6:93:70:06:fe:0f:c7:41:1f:f8:36:
                    0a:19:9c:43:dc:81:04:04:fe:c0:9d:44:fa:30:15:
                    29:7a:02:2f:63:bb:e1:2c:fd:e1:8a:e4:b2:d5:5f:
                    ba:d1:c7:8d:a4:c3:a8:b0:e3:cc:76:c2:05:dc:f1:
                    b5:48:b7:00:a6:fb:d3:4e:9c:39:13:2d:2d:05:4f:
                    2a:3e:75:f4:c3:4e:ed:b7:17:69:64:c9:a1:0a:79:
                    e5:c3:f0:c9:1e:0c:98:b5:e2:07:96:a2:13:ea:0d:
                    1d:c6:4f:fd:2e:fd:f5:c2:83:d1:00:4e:c3:dd:b8:
                    91:73:57:24:93:f6:07:75:b6:9b:31:25:1d:f3:0d:
                    22:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AE:CE:CD:29:3D:43:7E:81:D5:AB:47:06:67:CC:FA:C8:37:79:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/21e16498-e39c-38cd-a8f8-470bb4f66f80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl

            X509v3 Authority Key Identifier:
                keyid:55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:a2:1c:e5:ba:1b:71:09:cb:d4:71:9f:b5:07:44:94:de:55:
         09:86:b2:b8:9e:07:9e:e2:f1:1d:e7:a8:ed:3e:d6:11:5c:a1:
         a6:fb:35:40:9f:de:e4:8a:1e:e7:70:30:2f:2e:44:ce:4b:4e:
         25:eb:03:ef:36:7a:8f:44:ba:66:74:0b:7c:10:17:28:0e:ea:
         c4:39:2e:22:0d:51:82:59:69:4a:16:80:30:61:1f:eb:b0:70:
         8f:7f:09:87:b2:fd:e3:21:25:d1:08:c0:c7:f3:aa:98:b1:48:
         a3:08:a7:99:c4:f5:99:f9:0d:7a:5d:3a:f6:01:eb:33:68:be:
         b3:a6:86:bd:bb:a2:5c:1b:53:21:91:ef:e4:cb:18:e5:1d:f5:
         da:3f:b8:c1:0d:df:0c:3c:d9:ab:1b:1c:48:9b:9d:22:94:db:
         ca:aa:41:6e:7e:2a:93:49:93:3c:5f:7a:ce:de:79:ee:98:67:
         9c:c2:d0:78:25:7e:61:79:32:b4:ab:bb:a4:bf:bf:df:89:f9:
         eb:73:a0:fc:18:2d:bd:3f:61:69:9c:c3:94:09:26:86:84:bb:
         bc:77:2d:aa:ec:a3:be:70:0a:55:59:de:ee:a7:e0:c8:ec:df:
         cb:59:12:22:6f:17:49:50:98:7e:3c:fb:24:3c:1b:2b:63:5c:
         a8:e0:4f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----