Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5fbc95cb-7a7c-3fc5-89d7-78c1fbeb036d.roa
File:                     5fbc95cb-7a7c-3fc5-89d7-78c1fbeb036d.roa (raw, json)
Hash identifier:          T0jAwovvcti/f51dTRi2L25SdGbj4jo5KmzgyPDBsr4=
Subject key identifier:   E5:C1:E3:5F:3F:B2:CA:0B:F0:12:17:C3:44:5B:21:8B:A9:8B:77:81
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F43285848F92690CA3F18B4D753438C00
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5fbc95cb-7a7c-3fc5-89d7-78c1fbeb036d.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        143.223.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:90:ca:3f:18:b4:d7:53:43:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=38a0f0fc-35d3-4d48-8cb0-62ebb47c9cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c5:35:82:90:b4:51:51:f2:b8:a5:a5:f1:cb:
                    15:5d:18:ba:05:3a:14:c1:86:c1:79:e4:d3:7c:cc:
                    12:06:7e:36:38:a1:27:08:e3:25:42:b8:60:f7:af:
                    2a:ad:ea:36:9f:6c:59:ce:67:82:13:ff:2c:a3:06:
                    27:35:42:e9:c8:3c:a3:8e:33:57:f4:52:3d:e0:95:
                    92:60:bc:d5:b0:3e:1f:9c:12:cf:d1:93:e4:07:a3:
                    00:65:7a:1f:d1:ba:f3:21:17:4c:b8:8a:bc:8f:2f:
                    37:49:35:5f:bb:80:81:f7:44:50:2d:fc:b4:3b:ed:
                    ce:cf:bb:6c:88:8e:84:35:df:f3:df:02:dd:94:5a:
                    50:4e:25:d4:18:70:42:d7:75:2b:45:4e:5d:fb:96:
                    64:3e:1a:85:2f:3b:e6:ec:77:9c:d6:2f:e6:e8:7f:
                    d3:ed:a6:6d:4a:24:cf:2d:63:44:c3:1a:e8:76:cb:
                    12:75:48:8e:5b:61:7f:15:29:54:b4:9b:d1:dc:74:
                    5a:08:87:c0:e7:1d:04:9f:42:17:49:ff:9e:29:a2:
                    90:be:83:88:1a:75:5b:77:3a:e5:3c:9c:d9:20:4f:
                    a9:8f:36:0f:07:7d:ea:62:09:c1:c6:77:6b:49:69:
                    36:5c:14:3f:ba:bd:4c:47:6f:0b:ac:a4:90:5e:9c:
                    6b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C1:E3:5F:3F:B2:CA:0B:F0:12:17:C3:44:5B:21:8B:A9:8B:77:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5fbc95cb-7a7c-3fc5-89d7-78c1fbeb036d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f4:7c:0e:1e:e8:67:4c:e6:b2:c6:04:9b:b3:fa:74:bc:94:
         9f:1b:87:b8:3e:1b:30:49:81:e1:be:a1:20:0a:07:c6:ba:f9:
         aa:cb:13:95:6b:fd:ad:25:3a:1d:ab:8d:eb:61:ee:15:57:32:
         7e:f7:5a:1c:73:64:e0:93:87:43:7b:9c:28:58:61:a7:84:11:
         31:21:66:9b:d9:4a:3a:3b:35:f6:c6:ea:70:9f:d0:23:a5:f8:
         bc:74:5e:07:f6:20:0b:19:e6:d9:9b:70:62:c2:38:00:da:8a:
         60:a5:ed:dd:c5:e9:f4:c2:e3:f2:e9:4c:d2:b8:53:27:aa:2f:
         64:7b:89:83:0a:f5:04:33:5d:ee:9a:28:37:af:97:a8:c9:0f:
         6a:89:6a:97:50:7d:4d:a6:c6:e1:3e:c4:cb:6d:c3:f9:97:b7:
         2b:f3:0f:68:d5:83:5e:d8:45:5c:90:e8:ee:a7:d8:49:1a:e6:
         ee:69:f2:89:e7:6b:10:37:be:b1:d1:d2:68:1f:80:d8:eb:08:
         ab:6d:56:00:cc:6b:77:54:40:d9:4f:c5:23:0c:39:12:3d:f0:
         4a:61:fb:45:64:33:eb:8a:ec:00:35:05:09:36:88:53:c7:e1:
         dd:4e:03:30:b1:6e:e5:20:78:f7:97:e6:82:9a:22:38:27:c3:
         30:a2:1e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----