Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/c5be28a1-2d7a-39e2-8043-9972f8916840.roa
File:                     c5be28a1-2d7a-39e2-8043-9972f8916840.roa (raw, json)
Hash identifier:          Llj52sue66CpFjyr1xX0JwqgcSjZtj2J4RFEFIOl7p8=
Subject key identifier:   5B:E9:F4:1B:43:F0:56:BE:37:75:90:A7:2D:3E:9F:88:87:06:B7:77
Certificate issuer:       /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168
Certificate serial:       010D0C9F432858495C2446696EA82594760FBEC0
Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/c5be28a1-2d7a-39e2-8043-9972f8916840.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     14511
IP address blocks:        66.231.112.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:46:69:6e:a8:25:94:76:0f:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=5fc11499-98f9-4d07-8514-75cd4efad86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:55:4e:3b:69:f3:9f:08:6c:21:cf:33:1a:25:
                    65:f5:e4:1d:81:43:4a:71:93:ed:5d:01:c6:56:9c:
                    27:25:da:ab:3d:5f:e1:75:2c:f4:13:0e:5a:43:64:
                    1b:5c:04:b4:f0:e9:00:67:6e:0b:2d:ca:27:20:73:
                    f8:de:7b:7b:de:1f:c0:ad:bc:d5:3b:32:53:b5:f6:
                    62:e2:36:9d:2d:70:68:7e:a8:1c:15:67:8d:9a:1c:
                    71:ce:07:1f:73:35:b0:80:22:e0:33:07:66:e7:a9:
                    93:89:23:27:c7:3d:94:b6:bd:20:cd:5c:2a:7d:10:
                    1e:3c:aa:a1:0e:79:2b:d7:64:64:4b:0c:2e:8d:b7:
                    ef:6e:9a:54:25:20:62:fc:c5:88:ca:18:41:e0:bc:
                    e2:e4:14:d3:55:8d:c4:55:fa:29:2d:9c:5c:0d:f1:
                    86:b8:be:55:d6:e2:9e:49:88:a9:19:0f:49:1d:7d:
                    3e:58:d8:fa:71:76:f4:7b:92:f9:32:28:3e:f5:67:
                    ea:8d:16:4f:b5:70:63:54:d9:58:6b:a7:10:d6:32:
                    ce:68:e0:0d:fb:5d:37:9b:41:7d:68:fd:c3:e4:4d:
                    a2:81:a0:3c:fd:0d:ce:b4:0f:f3:7d:a5:9f:a7:77:
                    36:56:61:24:87:a9:69:7a:bd:ed:20:e5:79:d2:02:
                    c7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E9:F4:1B:43:F0:56:BE:37:75:90:A7:2D:3E:9F:88:87:06:B7:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/c5be28a1-2d7a-39e2-8043-9972f8916840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl

            X509v3 Authority Key Identifier:
                keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d1:c8:b5:61:4d:93:97:3c:ab:ef:80:b7:fc:e1:6e:06:3a:
         55:94:34:27:64:33:f9:34:d7:d9:58:40:ba:d7:87:de:cc:d5:
         97:de:87:bb:8d:5b:99:bb:45:23:bd:53:83:4c:1f:b8:bd:27:
         8a:c7:e3:65:f1:23:ad:ee:78:17:2f:ce:46:f9:79:eb:df:17:
         c1:e8:17:30:8c:04:da:66:63:99:ac:e8:c3:ec:21:bc:13:df:
         34:e5:64:66:a4:e7:7b:68:cd:d0:18:25:a5:89:eb:8a:81:ee:
         7a:54:0f:7f:f3:6b:19:72:33:ea:b6:be:83:7d:ab:00:8e:ba:
         aa:b4:a3:5e:24:9c:20:e3:54:bf:52:28:94:d2:df:0c:07:5f:
         be:9f:f3:41:6b:87:7b:68:de:04:b7:52:9c:1c:b0:13:dc:cf:
         8e:e8:71:31:ef:37:73:d3:e1:ee:1e:0c:4b:29:76:8e:9d:fd:
         98:02:61:99:b9:35:f7:7d:00:da:f4:f0:b1:1c:e8:df:c8:ac:
         9f:c7:20:78:ed:e0:17:70:66:77:64:dc:9a:c7:2d:2a:fb:0b:
         71:17:f7:9d:ab:e8:0c:ee:7d:f7:3d:8e:a4:73:5b:69:19:59:
         76:e6:af:41:a3:61:8c:6b:7d:14:76:46:82:37:c4:56:aa:14:
         1c:70:71:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----