Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/a37593aa-4999-3250-9d18-4320c2f39adb.roa
File:                     a37593aa-4999-3250-9d18-4320c2f39adb.roa (raw, json)
Hash identifier:          vMgYNBnTm04V7fd8YaYxWqeJE0pqJsyZCSKO//y/ATQ=
Subject key identifier:   26:64:11:AF:97:09:63:12:6C:CB:AB:56:BF:98:56:5B:ED:82:EC:B0
Certificate issuer:       /CN=59f6e545-1944-4ca0-a155-69ded2cdb1ff
Certificate serial:       010D0C9F4328584902FDB2C21B9D7970DA75F200
Authority key identifier: B6:BF:AF:3E:1D:EA:CE:3C:8C:79:E1:3C:75:42:1B:FF:C3:64:37:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/a37593aa-4999-3250-9d18-4320c2f39adb.roa
Signing time:             Wed 26 Feb 2025 14:36:37 +0000
ROA not before:           Wed 26 Feb 2025 14:36:37 +0000
ROA not after:            Tue 27 May 2025 13:36:37 +0000
asID:                     2914
IP address blocks:        23.133.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:fd:b2:c2:1b:9d:79:70:da:75:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59f6e545-1944-4ca0-a155-69ded2cdb1ff
        Validity
            Not Before: Feb 26 14:36:37 2025 GMT
            Not After : May 27 13:36:37 2025 GMT
        Subject: CN=1892966e-9366-4460-88a4-df04441729e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9b:7d:b2:bc:e8:83:ed:1f:5a:5b:e0:f0:c8:
                    d2:4d:8e:04:af:dd:91:02:be:f7:4d:b5:cd:fd:0c:
                    3d:94:2c:eb:09:4b:e8:55:43:48:8b:ee:cb:ef:35:
                    a5:84:a6:f6:b3:45:d7:4c:a0:eb:bd:4b:1c:e2:ca:
                    a9:09:f5:16:f4:56:fc:4e:1d:5b:d3:5a:97:42:4e:
                    58:a7:97:f6:d9:78:70:9d:95:06:59:a0:2e:52:28:
                    a0:5d:f6:0f:28:92:e3:9a:17:4b:91:9d:18:d2:1a:
                    d4:f4:ea:70:8c:42:48:89:c9:12:a4:2e:3e:c4:c0:
                    54:90:d4:fe:88:46:55:d8:90:96:21:bf:09:4e:75:
                    83:61:6c:1f:8d:3d:cb:c4:19:0b:61:2e:3e:33:ba:
                    76:a9:ec:25:fd:da:67:5a:c1:ce:43:28:4c:5a:23:
                    21:91:1f:70:a8:c4:ee:96:37:4f:79:25:6b:d6:51:
                    49:60:7d:41:98:d7:70:9d:b0:d4:cd:0f:10:40:40:
                    77:f3:de:04:99:76:64:49:41:a3:a8:08:bf:bf:7e:
                    48:e9:a7:25:87:32:bf:45:3b:7f:87:d4:a8:ff:c2:
                    04:84:f3:5c:9d:5e:e4:86:41:74:00:a6:02:1c:4a:
                    7d:87:84:87:c1:ed:81:1c:ec:67:63:41:ba:59:99:
                    3f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:64:11:AF:97:09:63:12:6C:CB:AB:56:BF:98:56:5B:ED:82:EC:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/a37593aa-4999-3250-9d18-4320c2f39adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/59f6e545-1944-4ca0-a155-69ded2cdb1ff.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BF:AF:3E:1D:EA:CE:3C:8C:79:E1:3C:75:42:1B:FF:C3:64:37:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:a8:e9:9a:4f:a3:ae:df:0a:b7:ea:3e:d8:c8:15:53:8e:89:
         17:87:dd:0b:f7:a0:4e:77:98:b0:cf:65:87:62:f4:2c:36:24:
         7f:6a:9e:e4:b9:1b:20:83:9b:43:f2:26:e9:88:da:f4:db:85:
         46:11:de:75:92:5d:8a:f7:52:57:52:e7:f7:75:7d:72:cc:52:
         ae:40:08:8b:ee:98:88:1d:13:64:40:a7:09:c0:ec:bc:fe:95:
         e7:db:e6:48:f9:80:94:a4:41:c1:5e:e2:ba:d5:4c:1e:b8:db:
         98:1e:e2:86:fd:66:5d:e4:19:34:63:b7:71:33:09:be:33:c2:
         5b:c1:29:05:64:07:ad:d4:8a:3c:18:ee:a6:21:d6:f7:50:75:
         89:76:7a:4b:ca:df:f7:5b:75:a2:da:f6:c6:7f:0e:c1:26:ee:
         83:60:c7:39:1e:a8:93:dc:ce:d6:52:a2:a1:91:21:c6:25:e1:
         f0:6b:d8:80:4a:0f:f4:c1:a5:ab:32:f3:22:3d:e1:b6:b1:d1:
         97:62:bf:d1:6e:89:d2:2c:87:2e:96:44:bd:b7:a8:c3:6d:c2:
         ed:61:d0:22:ca:65:7a:64:1a:b5:20:1f:75:20:50:4b:ae:32:
         a3:9f:d1:ea:8b:c5:ec:03:27:5f:e3:6f:09:9a:4f:46:53:b6:
         05:9d:30:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----