Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/afc3a8a9-0b9c-3dfd-8b01-4e21f9382c1f.roa
File:                     afc3a8a9-0b9c-3dfd-8b01-4e21f9382c1f.roa (raw, json)
Hash identifier:          ATBrpvKcFxecds8GaLlT1a0EYVJakPnxpXG1M8YMOQE=
Subject key identifier:   66:76:ED:81:FC:2A:79:91:3E:0B:28:66:86:4A:CF:C6:2F:0C:B2:41
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584905B6B79E71DCF1F9CA3B0B00
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/afc3a8a9-0b9c-3dfd-8b01-4e21f9382c1f.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     21743
IP address blocks:        172.111.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:b7:9e:71:dc:f1:f9:ca:3b:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=4ffe4947-b93a-4779-9bb1-79191160512b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4d:cd:b4:2b:73:23:e3:08:b5:ae:1a:48:53:
                    10:c6:d4:5c:c3:fe:82:a2:c8:16:05:44:c4:ff:0a:
                    f9:4d:54:b7:fa:a6:d8:aa:ab:96:4c:b6:aa:af:13:
                    75:7d:75:7f:a7:18:06:eb:3b:79:50:7c:94:91:d7:
                    da:65:48:8e:03:73:bb:c5:1b:47:5c:f6:65:c4:3b:
                    a1:0c:69:67:74:ab:55:83:f8:ef:9a:be:69:a3:5b:
                    03:68:39:39:5e:13:d0:fc:1b:96:16:20:ba:63:30:
                    db:f1:cc:30:2c:97:7f:bd:d8:88:31:fd:71:b9:cd:
                    57:23:c4:1c:3e:31:eb:2b:fb:fc:0a:66:0e:28:3b:
                    03:6f:83:b1:ef:0f:71:a6:f1:df:4b:15:f6:04:e6:
                    0f:02:d2:11:a1:ea:14:4a:85:6b:f9:d9:86:62:9e:
                    61:de:bc:52:9f:44:ff:25:ef:05:50:cc:65:a5:a8:
                    87:33:2c:93:e4:37:61:59:95:fa:a6:72:06:11:2d:
                    1c:a9:f5:4b:2e:0a:fc:9c:bc:f8:9d:78:13:c3:66:
                    ea:56:2f:d7:f9:db:49:8c:fe:72:ef:b4:8f:0a:a3:
                    bc:17:8e:06:8c:17:49:24:54:7a:11:0d:97:8d:56:
                    9f:6c:2f:06:e4:da:0a:25:ab:8c:7a:87:08:57:92:
                    b9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:76:ED:81:FC:2A:79:91:3E:0B:28:66:86:4A:CF:C6:2F:0C:B2:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/afc3a8a9-0b9c-3dfd-8b01-4e21f9382c1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:38:09:32:42:ed:e2:c3:33:07:ce:a6:56:66:e8:1b:86:31:
         ff:12:0c:b1:f9:fc:ed:3e:7b:cc:fe:bd:63:1d:57:cd:6c:01:
         84:48:25:60:e2:d1:15:e7:e8:52:1b:06:b8:b1:c6:22:f0:63:
         ec:dd:6f:31:86:1c:66:85:dd:c3:bc:bc:cd:5e:44:b3:93:52:
         55:7b:33:03:ed:08:20:97:96:73:57:17:80:64:ec:a8:e1:f5:
         ce:eb:af:a2:13:a8:be:61:f1:79:15:69:9b:1d:ed:e2:be:7a:
         0c:bb:c7:ff:28:ba:b7:3c:31:c8:93:81:a4:f7:a6:71:2f:a8:
         ff:56:5f:a7:bc:84:a3:13:b6:bd:f9:ce:e2:09:f0:eb:3c:93:
         48:b9:b4:4e:f9:25:72:a5:1c:90:48:c9:f6:1d:95:13:3f:bc:
         06:94:5d:59:e2:db:25:79:92:41:e5:7a:56:64:de:1d:da:01:
         92:99:72:4e:09:35:6a:36:0a:17:b5:6b:9b:84:95:78:07:80:
         2f:29:4c:f3:be:ff:f2:eb:4a:f0:77:c2:fa:49:38:c6:1b:b2:
         14:1c:c5:44:2a:ce:b7:11:37:9a:38:08:28:bf:53:ab:e7:5c:
         89:36:e6:6d:3d:a2:ff:04:d9:c4:b4:26:cf:e4:73:75:a8:99:
         82:b1:9d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----