Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/f0970a1e-18d9-3ab2-9803-e503b2782f21.roa
File:                     f0970a1e-18d9-3ab2-9803-e503b2782f21.roa (raw, json)
Hash identifier:          bO+JCGu2Oy3vaSy1ZUyEp1V5ZSNNl6jmp5chRziieuE=
Subject key identifier:   5A:5F:97:5E:40:7A:8D:DD:09:9D:58:D6:BF:BA:F6:7C:97:91:C4:90
Certificate issuer:       /CN=fd7bd65f-83d2-4046-ad64-40ba458415a2
Certificate serial:       010D0C9F432858494733E769E1F64B7FF9AB9880
Authority key identifier: 73:3D:A8:16:7C:90:7B:98:87:54:D1:1B:83:65:83:DF:2B:35:30:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/f0970a1e-18d9-3ab2-9803-e503b2782f21.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     396893
IP address blocks:        23.132.232.0/24 maxlen: 24
                          2620:8d:a000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:e7:69:e1:f6:4b:7f:f9:ab:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd7bd65f-83d2-4046-ad64-40ba458415a2
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=183fa4f9-bc91-4a73-96b2-b8447bb98fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:30:73:0a:89:df:f7:c5:6a:33:29:e9:32:c7:
                    31:18:3a:38:7c:2e:22:bf:e6:ff:47:db:97:2b:51:
                    f5:5c:14:f0:05:8e:ae:91:44:c7:66:04:32:1f:4d:
                    4b:24:c8:7d:1e:b1:5b:b1:6c:e8:0c:f7:b6:c2:2e:
                    db:06:ef:c3:6f:92:d9:2c:11:df:a2:f7:04:f7:7c:
                    62:c6:82:d5:00:e6:00:04:0f:04:35:52:64:7d:c2:
                    25:0e:77:f6:6a:f7:95:7e:00:88:fa:27:f7:35:43:
                    64:a4:46:af:38:92:c5:4b:66:01:52:f9:ad:43:35:
                    c9:8a:f3:cb:c3:3b:18:f2:e7:67:4d:b0:8c:34:1a:
                    92:cc:36:7e:bb:93:f3:6e:e3:d3:cc:db:b0:df:4f:
                    bc:16:bf:a5:0b:26:dc:7c:52:de:c3:93:58:6f:99:
                    ba:ea:e6:d0:e3:a5:be:9e:74:cd:93:e5:52:f9:88:
                    f4:1f:40:27:3f:46:2f:dc:5b:0d:f4:3a:5e:72:6c:
                    5b:78:9b:2f:4e:dc:b3:5d:3c:29:5c:26:2c:31:25:
                    12:44:e3:22:ba:72:ad:7b:e8:86:da:46:dd:e6:15:
                    4b:a1:6a:8b:91:28:bd:13:4a:44:b1:71:40:07:b7:
                    09:dd:b8:4f:59:ad:7f:55:55:0d:87:81:23:7f:b0:
                    3c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5F:97:5E:40:7A:8D:DD:09:9D:58:D6:BF:BA:F6:7C:97:91:C4:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/f0970a1e-18d9-3ab2-9803-e503b2782f21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.crl

            X509v3 Authority Key Identifier:
                keyid:73:3D:A8:16:7C:90:7B:98:87:54:D1:1B:83:65:83:DF:2B:35:30:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.232.0/24
                IPv6:
                  2620:8d:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:37:e2:97:4d:9d:bb:47:a7:1c:1c:28:10:fc:f2:20:58:33:
         14:8a:a0:2b:ad:7a:ad:29:95:80:52:01:b3:21:76:48:19:e6:
         29:05:16:40:af:45:14:8e:d7:66:ba:c1:d8:8b:f6:96:c3:65:
         2d:f1:ea:6e:02:07:be:14:fa:29:32:fa:94:13:a3:54:41:50:
         0a:da:94:a7:f9:2e:45:33:b3:a4:1c:fa:d8:d8:1c:41:d9:a9:
         e3:04:be:14:33:16:cc:2b:cd:f1:4a:30:29:94:97:f0:40:02:
         bc:c9:6e:69:9b:2d:d1:20:ec:36:18:ac:c4:f5:2f:38:3d:28:
         ed:22:95:2b:c0:8a:18:1a:01:c2:21:72:b3:b0:09:c4:ba:96:
         46:fe:ba:3e:05:b7:b4:3f:05:0e:76:dc:7a:31:3d:6f:d2:11:
         18:10:a6:80:03:71:e7:20:00:c9:ba:32:5a:39:b4:33:da:e6:
         f0:e4:ca:ab:7a:11:17:23:1b:e7:7e:cf:9c:29:7f:c9:b8:65:
         59:a9:0b:bf:97:15:e0:63:65:cc:ac:d4:26:f5:ca:b6:56:c2:
         f0:95:22:03:51:3f:0d:ca:6b:16:95:46:46:99:44:cc:3d:8c:
         46:db:7a:20:a8:6b:cc:71:36:c6:ad:e8:66:4e:31:21:81:5d:
         b6:6e:15:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----