Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/61bba6a2-80e2-3ffd-9a65-1d7311593eb5.roa
File:                     61bba6a2-80e2-3ffd-9a65-1d7311593eb5.roa (raw, json)
Hash identifier:          SDA5Nd8b1K17E018fKgGHH5fHjFSKeBMVRK9r+nXbkI=
Subject key identifier:   2D:B1:63:BC:95:5F:26:E2:1A:AB:3E:93:4D:D4:2D:8A:97:18:56:D9
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584902EBFBBE6EB0AC48EB9C4B00
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/61bba6a2-80e2-3ffd-9a65-1d7311593eb5.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     14297
IP address blocks:        139.131.204.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:eb:fb:be:6e:b0:ac:48:eb:9c:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=bf068cca-4a75-46ac-8879-e6d11d505164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e5:e0:bf:bb:36:fd:1d:06:8c:48:65:6c:f5:
                    94:ac:60:e6:19:f3:91:ab:ad:7a:22:76:42:73:84:
                    30:00:00:62:d0:83:79:4c:b7:81:00:18:1b:be:ed:
                    a6:c0:07:85:ac:4e:b9:4b:7e:39:08:bc:51:18:8b:
                    97:93:7d:31:ae:0d:dc:d7:18:23:42:74:44:0b:bb:
                    99:c5:fe:50:1f:2e:92:34:68:29:03:64:c8:cd:0f:
                    fe:96:f9:b2:ed:87:31:38:42:16:5b:43:55:e1:27:
                    d5:8e:70:87:09:3d:e9:aa:b5:cf:6b:62:a8:a3:93:
                    3e:f7:38:a3:db:96:f8:fb:6e:13:a4:15:24:53:0a:
                    ae:4f:54:3c:d9:d0:6f:83:25:77:95:6c:58:47:dc:
                    24:ee:a2:70:bc:de:df:27:07:37:15:47:50:0b:b6:
                    42:be:af:e6:82:52:9e:35:ea:80:2f:6e:21:f7:6f:
                    85:50:7c:18:63:8f:38:be:37:f3:82:a5:2f:b8:b3:
                    37:0d:85:6c:29:b3:f1:01:b3:bf:5a:32:7a:50:53:
                    72:77:38:67:7d:3f:f2:6d:28:7e:a0:81:e2:67:f2:
                    93:af:50:17:6a:b7:fc:2f:9c:0a:30:e9:8b:73:9d:
                    6f:4e:28:b7:ca:24:c8:a1:d0:93:44:e0:7b:97:ca:
                    57:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B1:63:BC:95:5F:26:E2:1A:AB:3E:93:4D:D4:2D:8A:97:18:56:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/61bba6a2-80e2-3ffd-9a65-1d7311593eb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:93:cb:f1:68:da:ea:08:7e:69:4d:6c:ac:1c:ec:d2:9c:6b:
         20:3b:29:4d:e6:1f:28:32:c7:2d:c7:b9:dd:06:b7:e7:f8:0a:
         b3:19:45:cc:ba:5f:6a:4b:29:83:02:ca:4a:5e:71:29:b9:de:
         77:d7:e5:4b:49:6b:bd:44:b6:6f:bc:e9:05:cf:b7:4c:75:26:
         f1:48:1b:67:31:5e:86:9d:d1:6b:64:01:78:f2:df:dd:80:7a:
         ce:6c:4d:79:c4:0d:25:e8:3f:0b:c0:b5:8e:b6:84:22:04:d3:
         04:c3:f2:5b:8f:0b:fd:d0:9d:90:1d:59:7f:eb:91:84:74:f3:
         e5:be:37:b9:cf:93:01:54:04:a6:ca:62:16:46:b0:8f:73:e6:
         a3:7c:87:95:f9:52:e7:60:a4:37:29:3e:fd:5c:aa:cb:a9:38:
         34:dd:5b:fa:f9:56:b6:cf:41:2d:8c:dc:95:a5:af:b4:02:1c:
         c7:60:7a:91:c7:a0:7c:b8:be:f3:b4:fd:d8:b1:ef:37:dd:aa:
         22:96:9c:5c:a4:93:13:b7:01:72:55:2e:7c:a2:d7:06:37:87:
         d2:29:fb:78:99:e9:63:3b:50:b1:60:ec:12:8d:d5:6d:8a:03:
         22:62:7e:2c:86:74:03:a4:b4:d1:8b:92:16:ce:4d:c9:42:9d:
         54:cf:c5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----