Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/d55da693-e506-31b8-be3f-ec86fb9e0b12.roa
File:                     d55da693-e506-31b8-be3f-ec86fb9e0b12.roa (raw, json)
Hash identifier:          K9g/WrOsSX9gFj06M4rFLR52Qjj/xQ0IsTZLicCT1Ds=
Subject key identifier:   15:39:06:77:99:6F:AB:46:3A:25:4B:2F:28:DF:55:8E:36:E4:1C:B5
Certificate issuer:       /CN=743d3e7e-7c36-48e5-942f-c28c4741bf5b
Certificate serial:       010D0C9F43285848DFD7FDA309264833E8AB64D8
Authority key identifier: C5:17:B2:2E:5C:1F:CD:23:E5:4C:4E:D8:CD:7B:41:F5:8A:1C:1E:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/d55da693-e506-31b8-be3f-ec86fb9e0b12.roa
Signing time:             Fri 14 Feb 2025 00:27:21 +0000
ROA not before:           Fri 14 Feb 2025 00:27:21 +0000
ROA not after:            Wed 14 May 2025 23:27:21 +0000
asID:                     400731
IP address blocks:        64.239.70.0/24 maxlen: 24
                          2602:812:c000::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:df:d7:fd:a3:09:26:48:33:e8:ab:64:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743d3e7e-7c36-48e5-942f-c28c4741bf5b
        Validity
            Not Before: Feb 14 00:27:21 2025 GMT
            Not After : May 14 23:27:21 2025 GMT
        Subject: CN=5f0e5b6f-271a-4330-a81b-dccd895ab25a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:31:df:2f:f7:ff:87:01:33:69:c6:a8:3a:e0:
                    ab:19:77:4f:78:b2:b5:7e:53:46:08:ce:00:4c:fa:
                    ca:59:a1:55:e8:5f:58:67:44:78:98:0a:4d:46:4e:
                    a5:85:d4:5f:5e:0b:08:47:92:7b:06:ed:39:d8:30:
                    24:2e:6e:61:c7:fe:0c:ec:55:23:ad:e0:73:d1:0a:
                    95:e4:c9:b3:69:cb:c8:a1:3b:e2:3d:c2:e2:0e:c2:
                    84:c0:d4:03:b9:d3:10:40:dc:57:97:77:65:54:af:
                    c4:46:14:a2:a6:b8:0d:ec:db:a4:04:c9:33:29:01:
                    97:9f:58:13:88:87:59:68:a5:f1:e9:5e:97:55:30:
                    1a:47:60:f9:0f:2f:a5:d4:f2:52:48:ac:2b:bd:b7:
                    43:5c:5d:8d:3b:c1:e0:8e:be:ed:b1:07:19:ac:ef:
                    94:d8:70:3e:ef:e5:a3:63:d2:da:00:b0:43:57:20:
                    2e:fe:9f:24:a1:9b:56:03:83:7f:3b:77:bc:6f:68:
                    29:98:32:e3:c5:c6:a7:00:a9:1a:c0:ee:c7:8b:a5:
                    2a:e2:55:01:79:b9:bf:c1:a8:60:87:2c:d4:34:dc:
                    be:18:50:4e:82:f4:20:36:c4:a1:7a:8a:8e:79:1a:
                    b7:08:40:2d:57:e7:7f:5a:ed:c8:6a:34:c7:05:75:
                    ed:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:39:06:77:99:6F:AB:46:3A:25:4B:2F:28:DF:55:8E:36:E4:1C:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/d55da693-e506-31b8-be3f-ec86fb9e0b12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/743d3e7e-7c36-48e5-942f-c28c4741bf5b.crl

            X509v3 Authority Key Identifier:
                keyid:C5:17:B2:2E:5C:1F:CD:23:E5:4C:4E:D8:CD:7B:41:F5:8A:1C:1E:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.239.70.0/24
                IPv6:
                  2602:812:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:ed:d2:ed:ed:8d:d1:25:c4:d1:11:7f:7d:24:c7:37:53:57:
         16:89:66:59:ca:90:a4:79:1b:e1:17:3f:36:88:7e:8d:13:4a:
         73:23:3e:c3:ad:85:51:ca:5d:8e:75:70:34:45:37:25:4d:45:
         d1:46:31:59:df:f5:23:d0:59:a8:bd:0b:ac:66:a4:1a:27:23:
         0b:8d:08:27:41:34:86:82:7d:b0:28:5e:5a:97:89:cb:7e:bd:
         81:f6:cf:a6:e2:c5:a0:d9:5d:f9:16:f4:68:86:5c:1d:c8:99:
         ab:0e:68:ba:0f:a9:0a:ff:3a:97:4c:8c:76:f4:8e:c8:54:6a:
         e6:04:35:0d:b2:e2:d2:0b:45:b1:c5:9f:ef:08:69:c0:06:69:
         83:04:6a:8e:60:a7:5f:cc:b4:6f:fb:f1:d7:fe:d7:67:a3:f4:
         01:57:fe:e6:58:3b:80:6e:bd:19:5d:eb:a4:ce:13:20:29:ee:
         f0:46:f0:f6:b9:c0:f9:b4:80:5c:4c:96:33:8e:22:ca:d1:89:
         14:3c:c9:67:f4:b8:60:fd:80:13:1f:3c:ba:53:56:e2:e1:c2:
         ba:6d:2d:01:a7:3e:db:80:46:e7:34:5c:80:3e:12:21:18:5a:
         48:1a:a7:55:cb:43:51:11:46:ed:0e:ec:8e:bc:0a:6f:76:44:
         6b:d1:07:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----