Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/6ceba9b9-edba-36b7-b47b-decceeffbbbb.roa
File:                     6ceba9b9-edba-36b7-b47b-decceeffbbbb.roa (raw, json)
Hash identifier:          EMu77pz4RmWNYfvqri8y/DBQqcb9O8aBzn4AUBncIpc=
Subject key identifier:   A0:19:DF:92:88:55:F8:0F:DE:24:42:7C:BB:AC:7B:2A:57:32:76:76
Certificate issuer:       /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial:       010D0C9F43285848F4F6941A0473ECD4699EAC00
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/6ceba9b9-edba-36b7-b47b-decceeffbbbb.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     13984
IP address blocks:        74.117.144.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:94:1a:04:73:ec:d4:69:9e:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=0f570f60-0b7c-4192-b505-589087a9a016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:af:63:84:09:7d:2e:cf:8b:89:30:0c:a5:ff:
                    e9:a0:19:0a:3f:61:a9:b9:20:4e:7d:05:87:00:3e:
                    da:61:d8:bb:45:0a:2d:34:c0:fe:a5:86:d2:05:6e:
                    52:c5:81:69:b6:c6:1e:d0:e9:27:2e:90:51:60:f2:
                    bb:df:cf:1f:78:26:37:54:18:ff:6d:3e:c2:4f:f0:
                    c1:0c:2c:e0:b0:0b:97:7d:4b:7f:2d:d4:f0:27:77:
                    18:e7:f2:b6:21:fa:8e:24:f0:dd:22:e3:3f:63:91:
                    6a:88:49:26:6e:f9:54:28:6e:9d:d0:b8:c7:2c:38:
                    42:cc:a1:bd:71:88:0d:62:30:96:39:e0:1d:d6:65:
                    48:5d:98:67:f5:36:b6:a9:78:a1:eb:02:b1:d0:86:
                    fa:d0:d9:c9:32:b7:20:32:a6:aa:73:84:f1:9d:a4:
                    e9:1f:e0:ba:de:2c:ca:e2:6f:d8:9a:41:d0:44:35:
                    75:3b:7b:ca:70:3f:f5:40:4e:cc:a0:03:82:c3:e2:
                    0c:ae:c5:42:1f:fc:bb:f3:6b:d7:52:8b:9b:7c:1b:
                    60:07:bf:19:e9:07:30:4a:30:43:a3:40:f8:14:da:
                    dc:79:1c:e8:de:e8:c2:ea:89:dc:00:53:19:42:c8:
                    f4:be:16:f5:f9:70:21:e0:20:a1:80:1c:43:61:17:
                    93:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:19:DF:92:88:55:F8:0F:DE:24:42:7C:BB:AC:7B:2A:57:32:76:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/6ceba9b9-edba-36b7-b47b-decceeffbbbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:51:74:ca:50:5f:dc:25:96:7f:96:03:18:25:9d:4f:18:e7:
         eb:97:24:c5:4f:41:42:3a:78:bc:ec:86:be:35:41:b8:8e:af:
         0e:08:fe:da:b0:8b:85:44:2b:66:af:63:4f:1b:ad:0c:4a:eb:
         d1:b9:f1:17:c3:a2:63:f6:f8:0a:f4:57:fc:01:1c:fd:70:e7:
         19:7d:20:0a:f7:c7:86:1e:83:c5:cd:0e:42:f6:f2:fa:e1:9c:
         88:93:62:da:29:87:71:ed:01:49:01:b6:3f:18:d7:33:db:93:
         f7:60:72:aa:89:dc:63:2d:01:46:94:ab:9c:f9:54:8d:98:20:
         98:38:b1:c3:a7:88:e8:c1:56:85:de:19:88:b8:e7:1b:d7:2b:
         49:1c:4f:ef:9b:3b:76:c7:93:0f:c1:bf:79:f6:2b:b7:28:ed:
         46:61:f8:41:7d:a7:75:40:b9:b3:06:ec:63:07:e2:5d:df:cc:
         7d:0f:79:56:0d:92:93:6a:31:f3:a4:1a:0c:d0:ef:8e:b7:67:
         51:b0:65:cb:ee:5c:1a:57:be:23:ba:f0:e3:64:97:2e:e3:d7:
         1f:82:97:ef:67:20:04:01:f4:22:55:02:93:24:17:3a:f9:e8:
         83:90:bc:cf:d1:48:77:b9:0e:8d:a8:dc:d6:6e:68:4c:0a:65:
         f6:2c:28:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----