Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa
File:                     0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa (raw, json)
Hash identifier:          bUnCTv+1GZYxmg8wRID5XhjHHmzdNoRh9SW8Ie8E4O4=
Subject key identifier:   53:EB:7E:B0:FA:3D:CE:5B:A6:8B:1A:7C:46:BC:CC:46:69:E0:DA:1D
Certificate issuer:       /CN=59c9f46b-742f-4b2d-929b-267fefccc50a
Certificate serial:       010D0C9F43285849350EA768F981BE8B7DE82500
Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     8987
IP address blocks:        45.45.196.0/22 maxlen: 24
                          208.74.168.0/21 maxlen: 24
                          2607:880::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:a7:68:f9:81:be:8b:7d:e8:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=ae9802b8-bce2-41e9-90b5-8056e1054c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:95:ca:03:87:bd:9f:f1:17:07:28:7e:a7:e9:
                    0b:bc:5a:f2:00:99:52:ac:55:ff:a5:14:7f:79:15:
                    3b:53:dc:99:b3:4b:98:ff:e7:9c:42:63:2a:24:2e:
                    cc:7e:00:db:dd:5b:a4:82:ed:a5:d2:1f:63:65:cf:
                    aa:80:4c:c2:d0:77:7b:d6:f8:69:08:30:c5:60:e9:
                    66:82:a0:da:e4:13:2c:74:9e:e2:76:e8:2e:29:64:
                    16:c2:b9:fc:6a:1b:9d:8e:1a:fc:25:da:70:c2:d9:
                    cb:97:7e:ea:b3:ba:5c:22:3f:51:44:2e:15:de:e4:
                    90:83:b3:81:b8:26:ea:f2:d8:65:09:60:7b:00:39:
                    24:20:24:da:31:dd:7e:22:df:fc:b8:13:1c:2a:c2:
                    74:a5:6c:7b:13:35:78:2d:e2:f1:d5:35:b5:8b:c4:
                    18:e8:20:fd:4a:fc:60:02:54:69:c8:3f:d6:ac:de:
                    51:d5:62:4c:79:fb:28:fe:cf:0c:64:58:59:00:65:
                    c0:67:05:b7:b4:78:53:32:17:83:a5:db:1f:3c:10:
                    3d:d4:2a:40:28:de:94:51:5d:47:55:0b:c9:82:b8:
                    bb:16:e4:d6:5b:cb:d8:9d:7c:f9:00:66:41:31:e0:
                    90:95:3d:0b:36:db:1d:40:e9:b8:ca:ae:4c:e8:fe:
                    1f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EB:7E:B0:FA:3D:CE:5B:A6:8B:1A:7C:46:BC:CC:46:69:E0:DA:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl

            X509v3 Authority Key Identifier:
                keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.196.0/22
                  208.74.168.0/21
                IPv6:
                  2607:880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:5c:43:cb:bc:92:92:d6:38:24:63:dc:c3:95:9b:b0:55:67:
         f8:98:4c:b5:fa:da:60:3c:5e:f9:07:b5:bc:48:57:14:30:45:
         4f:f8:19:2e:b9:4d:6e:b1:b1:45:07:c2:f8:98:f7:43:b5:d0:
         98:65:7a:80:21:bb:d6:22:23:1b:2e:fa:a5:ce:53:70:94:8b:
         59:fc:d4:22:86:69:42:72:2f:ad:18:48:3f:79:30:eb:7a:f0:
         e4:33:18:c9:fa:c3:7a:bb:2a:01:09:7a:f4:9d:1d:ac:9f:86:
         09:60:36:5b:30:b9:aa:02:84:f2:ac:19:5a:a0:27:44:57:dc:
         ca:55:24:4f:6a:b9:fb:3d:42:1b:72:a7:c8:07:52:fa:f6:42:
         76:d5:7e:a3:5f:1d:34:33:5d:8c:f0:8f:ef:73:76:60:2f:7f:
         58:a3:8d:0e:19:a4:a9:da:32:ec:ee:f1:09:4d:0a:b4:37:19:
         b6:a6:aa:de:c3:d0:7a:9b:53:31:fc:1e:99:8b:bf:0a:f8:aa:
         81:93:0a:8b:c1:e8:b7:4f:86:ad:35:c0:9c:15:c6:10:4b:6b:
         c5:59:71:ea:fb:91:fd:8b:fe:a1:d5:b2:65:2a:24:22:c0:78:
         ab:ac:df:af:e1:31:6f:b7:dd:97:94:26:79:57:9d:03:ab:0f:
         08:ec:33:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----