Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/b1ea006c-b3f6-32dc-b6d0-9dd44f366999.roa
File:                     b1ea006c-b3f6-32dc-b6d0-9dd44f366999.roa (raw, json)
Hash identifier:          MIfhE7AXoTO7Hh1Kx1kKC2ektfeiLPEJKuKwajdU0eg=
Subject key identifier:   8E:4C:A8:8A:12:76:EE:E1:D8:4C:F4:15:D1:56:4C:69:26:10:74:75
Certificate issuer:       /CN=60a936c7-4a19-44a9-b75d-cc22c274db26
Certificate serial:       010D0C9F43285848FD569F27F33D1854FC384A00
Authority key identifier: 5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/b1ea006c-b3f6-32dc-b6d0-9dd44f366999.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     18875
IP address blocks:        192.153.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:9f:27:f3:3d:18:54:fc:38:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60a936c7-4a19-44a9-b75d-cc22c274db26
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=5b70e9f9-a4d2-48a1-a194-4e8abbd2c970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fe:5b:c7:83:a7:dc:94:8d:90:4a:51:0f:ed:
                    23:75:0c:64:f9:6b:6a:34:fe:b5:63:09:7f:3b:86:
                    ea:9c:f2:c8:c6:9e:72:3f:c5:0c:fa:2c:56:bd:2c:
                    6f:31:d2:74:a3:6e:15:13:5b:fb:e4:18:e6:1a:10:
                    22:7c:47:cd:72:6b:07:de:cf:31:0e:2c:8d:ec:88:
                    a7:09:82:4c:8b:74:f2:1c:d3:0e:fe:03:e0:34:51:
                    33:f0:99:48:21:83:a5:f6:8c:af:e7:af:56:07:7c:
                    de:79:1a:dd:c1:d2:9c:97:fd:df:38:ff:dc:b5:b8:
                    d7:ac:a5:ef:c5:e3:7d:5c:6e:1f:b3:e6:07:22:9a:
                    df:d9:0a:8b:0a:d8:d8:97:b4:37:d1:ec:8f:ba:d9:
                    58:2f:9e:61:5f:a2:1d:bc:95:b6:c0:13:ca:90:6d:
                    bf:8b:2d:ec:17:73:45:67:70:59:97:04:c8:d1:16:
                    2e:18:73:c9:7d:3c:f5:10:19:b8:01:f5:bf:5f:e9:
                    e4:b2:1f:87:95:0b:43:d0:b5:6f:36:37:bb:95:53:
                    8a:5c:84:20:91:8d:43:5a:e9:30:c2:ce:d2:d3:39:
                    73:e5:1e:5e:ef:a5:5d:44:f5:c9:5e:39:2f:11:8e:
                    d2:37:12:ef:b7:e7:24:52:c9:8c:bd:bf:30:31:c5:
                    58:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4C:A8:8A:12:76:EE:E1:D8:4C:F4:15:D1:56:4C:69:26:10:74:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/b1ea006c-b3f6-32dc-b6d0-9dd44f366999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl

            X509v3 Authority Key Identifier:
                keyid:5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:36:ff:59:c0:5e:5e:31:4f:b8:fd:c3:cc:52:69:84:0d:c9:
         5d:3c:bf:79:76:95:29:ba:23:2e:44:6c:5a:da:b6:10:4b:f7:
         82:da:d6:d7:8f:9a:b0:a5:cf:2a:bf:6a:15:43:da:37:a4:2b:
         c1:d1:3e:44:f2:ea:c5:77:dc:81:fb:77:72:12:d1:10:b5:56:
         d6:e9:98:89:6c:eb:71:6c:11:28:84:40:0a:53:db:ad:be:c6:
         0b:c5:49:10:e7:75:76:34:06:3b:aa:cd:e6:ee:73:28:89:29:
         39:a1:12:ed:12:fa:a5:fa:24:44:f6:85:03:d1:1c:1d:7f:57:
         06:cb:1d:54:d0:d7:b0:4e:ce:a1:fd:75:bf:b0:be:a2:fd:91:
         75:53:18:91:f0:e6:fd:8b:98:57:2b:1a:8a:34:e7:14:d8:89:
         83:2d:7f:61:88:35:70:8f:30:32:6b:c5:d6:08:f4:51:94:d3:
         25:f9:41:25:12:1c:6f:95:15:ee:7f:31:27:6a:91:1d:e1:b6:
         ce:38:d9:e0:44:98:c5:2d:55:95:9d:bf:58:ae:3d:8e:c7:0d:
         e0:a2:a6:fd:b4:8d:ba:e1:d6:6a:d1:d0:90:bf:87:c5:4e:1a:
         29:76:03:4c:d7:c0:30:fa:fc:73:34:f3:16:94:d0:d1:f9:63:
         63:7b:e0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----