Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/38034f38-ee51-39ae-8b7b-9c9ac94d3590.roa
File:                     38034f38-ee51-39ae-8b7b-9c9ac94d3590.roa (raw, json)
Hash identifier:          RTxBVTO8h2h8NSgo9/F71W6lcIXZoktYpk2ySmgYxT4=
Subject key identifier:   1D:ED:2C:BB:73:D2:ED:79:83:17:83:7C:DD:18:F1:C2:EB:E5:23:9B
Certificate issuer:       /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Certificate serial:       010D0C9F432858495F40CE0462345094A5A12180
Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/38034f38-ee51-39ae-8b7b-9c9ac94d3590.roa
Signing time:             Mon 31 Mar 2025 15:46:11 +0000
ROA not before:           Mon 31 Mar 2025 15:46:11 +0000
ROA not after:            Sun 29 Jun 2025 15:46:11 +0000
asID:                     21782
IP address blocks:        67.209.208.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5f:40:ce:04:62:34:50:94:a5:a1:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
        Validity
            Not Before: Mar 31 15:46:11 2025 GMT
            Not After : Jun 29 15:46:11 2025 GMT
        Subject: CN=7792f1de-73ce-4e67-9dac-1200458c742c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:19:3f:e2:85:14:84:38:f8:b3:6a:33:bb:80:
                    70:04:e2:37:b6:d7:a7:dd:be:df:ff:88:19:74:a3:
                    c2:c8:55:28:95:cf:1d:24:be:34:cc:b9:a6:36:e7:
                    96:f7:83:aa:93:59:d7:22:33:e6:dc:4b:ea:6f:b7:
                    3a:41:df:ea:48:38:fa:9a:d6:60:f2:ad:b8:ac:6b:
                    99:03:84:58:9f:a9:b1:49:84:16:73:96:02:b5:e2:
                    d6:b9:fe:97:23:46:c7:bd:33:9a:44:b1:db:a7:67:
                    19:bb:3b:d4:ba:0f:bc:1a:f6:96:27:ae:7b:53:49:
                    35:ba:f6:bc:23:84:45:67:a3:27:60:9a:8f:b4:1a:
                    6d:01:90:22:17:35:81:01:17:2a:a2:2b:c4:52:02:
                    5d:6a:89:69:5d:19:62:7e:41:a9:57:33:1f:d9:76:
                    a2:9d:66:c9:6c:7e:6f:1b:76:5e:d4:a2:2d:71:48:
                    53:ec:de:90:d2:aa:0d:14:6b:b5:1e:2c:46:1f:03:
                    f6:90:f7:be:d9:84:6d:74:68:b0:bc:fe:7f:78:e7:
                    16:76:12:69:2c:ff:45:d0:03:7e:d0:1b:82:97:9f:
                    2a:8e:b4:e7:c6:a2:9d:88:44:01:ab:6c:11:20:e0:
                    b6:6e:e5:92:c2:1a:7a:ed:03:ed:aa:46:e0:3c:e0:
                    6a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:ED:2C:BB:73:D2:ED:79:83:17:83:7C:DD:18:F1:C2:EB:E5:23:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/38034f38-ee51-39ae-8b7b-9c9ac94d3590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl

            X509v3 Authority Key Identifier:
                keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.209.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:68:3d:54:91:ea:48:d7:1a:8c:ce:1e:cf:9e:85:d9:65:e2:
         79:21:62:04:89:65:2b:a5:6f:3f:60:3c:36:cd:2b:b7:8c:91:
         95:5b:a0:9d:3d:95:40:63:7c:45:42:61:e3:eb:28:7e:21:cb:
         a8:f2:da:7f:c9:cc:ca:4a:b9:b3:d1:6b:70:04:33:dc:c6:ad:
         f2:86:39:01:d3:1a:f0:57:d7:c4:04:c0:9f:f8:de:ae:c4:a6:
         d6:0e:3e:8a:79:42:2a:52:35:6a:3c:c7:b6:39:24:ca:f0:30:
         1f:6f:42:b2:f9:60:81:40:88:aa:6c:9c:5c:15:2f:13:dc:10:
         40:74:31:05:72:cf:62:10:b1:e0:2c:64:9e:d8:c0:dc:fc:70:
         49:42:6b:11:23:62:5d:90:4b:ae:80:c7:b1:c5:fa:9b:14:54:
         e4:1c:3b:9c:50:e3:61:5f:08:1b:67:8d:d2:bd:56:a0:5f:a3:
         1d:52:d2:e0:f9:d3:81:f3:67:bb:41:df:c7:23:d9:bc:c6:a9:
         ff:43:e2:c9:68:c3:07:e4:cb:a2:80:60:d8:bd:c9:27:39:53:
         3b:9b:fa:d4:da:28:41:5d:5d:8c:70:fa:94:6a:6d:1a:55:97:
         62:ee:02:a6:8d:17:68:c0:05:8e:a8:41:43:be:61:44:46:0f:
         cf:a3:33:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----