Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/005c698f-f046-3911-8b74-325de9def695.roa
File:                     005c698f-f046-3911-8b74-325de9def695.roa (raw, json)
Hash identifier:          WFywH5YrWoGEdK35t95Km4brEBlhfkCUgth8tPEY2L8=
Subject key identifier:   60:F4:B9:AA:AA:9C:55:53:4A:DE:45:F9:44:4D:74:31:38:CC:4D:9D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848AAFB6B76F0922004BD58C000
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/005c698f-f046-3911-8b74-325de9def695.roa
Signing time:             Sun 26 Jan 2025 02:00:38 +0000
ROA not before:           Sun 26 Jan 2025 02:00:38 +0000
ROA not after:            Sat 26 Apr 2025 01:00:38 +0000
asID:                     202
IP address blocks:        206.164.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:fb:6b:76:f0:92:20:04:bd:58:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 26 02:00:38 2025 GMT
            Not After : Apr 26 01:00:38 2025 GMT
        Subject: CN=ae881a21-39f8-49b2-b4ef-a8d35ce40899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7b:61:51:93:d7:48:48:c9:a7:3b:9f:24:60:
                    b5:e6:cd:42:35:a6:1d:b7:96:4d:7d:e9:f7:71:1b:
                    90:25:5c:32:19:bd:ee:0c:71:5c:5e:dd:9d:0b:63:
                    53:18:e1:ff:08:c3:e6:33:67:db:16:65:16:e6:ac:
                    4c:61:ef:5a:86:bb:26:ed:c8:45:ae:9a:e2:e6:a1:
                    cd:21:6c:f8:8c:0e:ce:12:a1:82:23:49:8b:e5:68:
                    dd:51:eb:a2:64:5e:ea:98:32:4f:33:b2:d2:c5:98:
                    e1:30:6a:6a:78:0d:f6:72:5b:77:60:d7:22:47:b7:
                    77:a8:be:f6:40:27:67:a4:92:f7:89:0d:9d:69:d5:
                    cc:ca:27:2d:1c:14:a2:ee:1b:6d:e3:a0:5b:62:8f:
                    8b:14:8d:f3:70:8c:a4:97:90:a5:81:38:55:d8:05:
                    ec:08:2b:06:35:ca:b7:51:31:e5:f9:0b:ea:bb:fe:
                    be:a3:60:2a:cc:4f:c2:d5:b8:a3:f4:c1:0c:6e:01:
                    1c:5c:35:0e:1e:44:9d:2f:e7:79:21:49:b8:91:d0:
                    51:7d:38:b5:59:f3:72:1f:b6:97:46:7c:3f:68:f9:
                    d7:21:e2:13:91:41:81:48:e9:52:dd:47:c3:d4:ca:
                    c3:bb:28:d4:7c:28:cb:bf:78:5f:ea:5c:de:84:83:
                    46:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F4:B9:AA:AA:9C:55:53:4A:DE:45:F9:44:4D:74:31:38:CC:4D:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/005c698f-f046-3911-8b74-325de9def695.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.164.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:1e:75:a4:16:ab:b7:84:e6:b4:09:82:59:d2:56:42:44:2c:
         8a:48:68:f9:5d:6a:9c:eb:d8:36:fc:b5:55:4d:93:ce:33:4f:
         60:ae:ae:35:6b:42:58:16:1b:9b:49:4b:90:64:2a:66:92:9a:
         21:95:32:f5:b7:44:cd:7e:ab:10:0b:39:de:a6:21:70:c7:37:
         b0:24:20:5d:34:ac:e1:b8:88:9f:ec:dc:57:8a:71:00:c4:58:
         55:0d:e3:a9:e0:99:1a:48:ff:90:dc:6d:d9:dd:92:f0:28:c6:
         12:94:38:34:a8:b9:72:e3:9c:8c:d1:aa:87:81:de:fd:b0:27:
         6e:a7:a7:0e:68:ce:3f:d0:6f:58:03:ea:44:4b:c3:25:6e:84:
         ef:aa:4e:78:d1:54:a9:37:4b:a6:be:20:72:d2:dd:bb:66:50:
         aa:a7:c7:e9:37:11:8e:62:63:d4:f2:3f:2e:b1:ba:86:6a:5d:
         75:bf:b3:ff:4d:27:65:8e:35:ac:2d:36:6f:f9:89:11:c3:a1:
         fe:08:22:30:3b:64:18:fa:3a:c1:b3:fc:21:0d:d4:57:41:75:
         cf:a6:f9:57:7e:77:5f:46:8e:2b:a9:5d:75:64:09:14:04:93:
         85:e2:fe:eb:c7:1c:c3:f5:16:17:a4:f4:4d:88:cc:b4:bf:cc:
         4b:45:91:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----