Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/b69ff32b-9ad8-3067-af5e-31430bf92e2a.roa
File:                     b69ff32b-9ad8-3067-af5e-31430bf92e2a.roa (raw, json)
Hash identifier:          2OrgnvUd40qeEGjU027kR1AXxip2022Hs9w0HrGcCjA=
Subject key identifier:   13:B3:95:45:04:6F:C0:74:05:4C:5C:47:63:06:64:83:62:CF:85:16
Certificate issuer:       /CN=78ffdd14-7e7a-46d4-993a-4b51f8031030
Certificate serial:       010D0C9F43285848F54CB009EF65C013E8786980
Authority key identifier: FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/b69ff32b-9ad8-3067-af5e-31430bf92e2a.roa
Signing time:             Fri 21 Feb 2025 16:54:27 +0000
ROA not before:           Fri 21 Feb 2025 16:54:27 +0000
ROA not after:            Thu 22 May 2025 15:54:27 +0000
asID:                     14618
IP address blocks:        165.140.58.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f5:4c:b0:09:ef:65:c0:13:e8:78:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ffdd14-7e7a-46d4-993a-4b51f8031030
        Validity
            Not Before: Feb 21 16:54:27 2025 GMT
            Not After : May 22 15:54:27 2025 GMT
        Subject: CN=5fcacb03-7d66-4110-a68f-8b606725c639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:19:8f:fe:b4:58:f8:e7:82:a7:31:85:cb:80:
                    94:bd:0f:23:b1:04:d7:57:f8:35:85:70:27:6c:65:
                    b1:56:38:b8:82:38:25:e3:b2:f9:66:93:9d:20:e7:
                    a4:3b:73:39:38:07:88:09:6e:ad:18:19:53:18:27:
                    55:20:c7:1a:9a:b4:be:99:46:61:3d:d8:fb:1f:49:
                    2e:49:fc:68:6e:95:fd:52:f3:0f:98:c6:cd:bc:d4:
                    df:a6:e8:86:34:21:e0:38:ef:50:2c:f9:c6:9c:40:
                    4d:15:dd:0c:8a:09:8b:3b:bc:68:75:e3:5a:25:a7:
                    a3:67:75:93:50:d4:97:37:29:27:22:3e:7b:c7:5c:
                    1b:e6:8f:b5:ca:e3:01:e3:0c:fe:f5:40:4a:85:82:
                    40:96:f0:c3:b7:1f:d0:19:37:28:4f:36:c7:c7:4e:
                    3a:48:f3:3d:a1:d4:4b:3c:80:0e:62:0b:d5:77:ff:
                    d4:7d:aa:70:af:69:6c:7c:6b:12:9c:4a:74:01:f3:
                    aa:b6:8e:d2:69:c9:88:47:ad:99:e0:8b:cc:7c:32:
                    16:aa:ad:47:68:85:28:cb:c8:3a:90:92:81:ad:e4:
                    b2:9b:69:44:9b:67:d6:4d:90:f3:16:41:b4:3b:13:
                    bb:dc:02:d0:67:79:4e:78:eb:bb:2f:bc:a3:52:2d:
                    83:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B3:95:45:04:6F:C0:74:05:4C:5C:47:63:06:64:83:62:CF:85:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/b69ff32b-9ad8-3067-af5e-31430bf92e2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.crl

            X509v3 Authority Key Identifier:
                keyid:FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:35:7a:59:ad:8b:fb:7f:c4:8a:bd:99:d2:76:59:e5:66:fd:
         0d:c7:d0:8d:3b:f4:f4:1c:9a:51:9c:05:72:c9:57:9e:c1:10:
         b5:36:5a:3f:a7:8e:84:c2:3c:63:e2:e3:ae:03:c5:e1:c9:4b:
         b3:a7:34:00:0c:57:b0:9c:59:15:fd:94:15:04:c2:54:3f:f4:
         af:c6:58:68:e9:fe:66:1a:bf:a4:d1:7c:57:a8:39:46:4a:6d:
         e3:96:ce:4b:79:3f:52:f8:d3:a6:b6:94:f5:b8:3e:a4:e6:38:
         54:27:36:be:17:7e:de:40:bb:04:37:da:28:ba:05:7d:26:b6:
         2e:e7:68:91:03:d1:3e:84:1a:83:62:12:6b:33:60:7e:7c:87:
         f8:c8:ac:6e:b0:88:5b:14:02:a3:84:f5:2e:fc:78:b2:48:45:
         1f:45:82:ed:87:84:04:ea:82:00:69:87:b4:32:b5:4e:d0:2d:
         f2:54:0e:24:ee:2a:cf:b4:4f:3d:ea:65:1a:0c:9e:8c:4d:a1:
         4d:d0:20:0a:e5:7b:73:ee:dc:e9:f8:71:39:74:b7:b8:b6:38:
         6e:aa:b4:03:95:d1:c9:82:ba:eb:d6:c0:55:96:7e:bf:a5:24:
         f6:04:4d:7e:81:cc:41:bb:08:33:27:21:fa:a3:ea:35:da:74:
         4e:a4:4e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----