Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/9db22770-7fc9-33f5-b210-41b7efad06d2.roa
File:                     9db22770-7fc9-33f5-b210-41b7efad06d2.roa (raw, json)
Hash identifier:          03LQN+r304nNFuiB8+hli/6kBsL2sczfdSF8Yy22ItM=
Subject key identifier:   9C:33:7B:6E:95:E4:81:5D:54:F9:84:C3:F1:A9:E1:CE:4E:A1:56:C4
Certificate issuer:       /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Certificate serial:       010D0C9F432858495F409BDB12135D19D7D8E5D0
Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/9db22770-7fc9-33f5-b210-41b7efad06d2.roa
Signing time:             Mon 31 Mar 2025 15:45:48 +0000
ROA not before:           Mon 31 Mar 2025 15:45:48 +0000
ROA not after:            Sun 29 Jun 2025 15:45:48 +0000
asID:                     21782
IP address blocks:        67.209.192.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5f:40:9b:db:12:13:5d:19:d7:d8:e5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
        Validity
            Not Before: Mar 31 15:45:48 2025 GMT
            Not After : Jun 29 15:45:48 2025 GMT
        Subject: CN=1a211453-751c-40c6-a00f-b5e2d7cacd0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:94:92:fa:d7:55:aa:09:48:2f:72:08:27:db:
                    b6:91:e1:ba:5e:8e:fa:3d:64:36:0f:4a:18:fc:b4:
                    b7:9f:a6:f3:12:6c:7c:bf:a6:d1:ea:1b:f8:67:84:
                    53:79:c5:9b:4c:6c:3a:c0:9e:7d:fb:56:94:07:20:
                    0a:51:79:5e:a3:46:94:e2:19:bb:61:38:b3:32:62:
                    e2:4a:d8:04:82:dc:c9:57:28:ae:c3:64:c4:63:45:
                    dc:68:e8:f6:dc:aa:5d:b8:64:29:d1:81:ae:65:df:
                    3f:60:3e:f2:aa:27:cf:66:2b:5e:c2:1c:e1:56:ab:
                    3c:5f:aa:c6:24:c3:a7:c8:59:aa:b8:f4:48:06:61:
                    98:41:c9:e7:cc:36:b5:8c:3c:d9:93:e4:8b:3e:6e:
                    e8:d6:1a:a9:d6:9c:d6:73:6e:a5:93:e7:5f:88:ca:
                    67:93:78:94:f9:df:12:52:50:58:83:fa:2e:5f:e2:
                    68:c2:6c:ab:58:ce:64:a3:f5:5c:76:8e:27:e2:56:
                    a5:55:61:60:69:9f:ec:28:42:a3:24:b5:48:fb:67:
                    5b:91:25:6e:6f:1d:b9:7c:41:f4:fc:69:3e:67:42:
                    0f:11:12:d3:ee:56:8e:c0:ec:36:4c:2c:80:c3:be:
                    f9:dd:8b:9b:39:a0:c3:c6:5f:c3:57:59:1c:e4:de:
                    7d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:33:7B:6E:95:E4:81:5D:54:F9:84:C3:F1:A9:E1:CE:4E:A1:56:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/9db22770-7fc9-33f5-b210-41b7efad06d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl

            X509v3 Authority Key Identifier:
                keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.209.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:12:f0:33:bf:e4:e4:bb:c0:67:4f:46:0a:df:b9:7f:a9:61:
         f6:5c:21:0b:eb:27:f5:15:0d:72:61:d8:30:c2:2c:d7:8b:09:
         06:9c:ba:c8:eb:bd:cd:84:a9:fc:c9:94:a5:00:05:6d:bf:62:
         bb:5b:82:2c:03:31:91:b0:80:3e:85:40:84:c2:65:90:e1:f6:
         df:f3:d8:52:a2:e6:f8:30:ee:86:9a:e1:f9:2f:47:cc:1e:b4:
         97:ea:34:b0:93:29:04:61:c8:76:2a:12:f8:50:35:64:39:f4:
         ec:f7:a6:ae:08:52:b5:b1:94:37:fd:16:7e:60:5f:a4:d4:9b:
         bb:df:d4:d8:43:a0:66:3c:c1:6b:da:94:57:c6:f0:a5:40:4c:
         c1:15:2f:00:ef:bf:bf:eb:49:ef:e4:f1:04:a8:e7:4f:df:16:
         44:d1:56:d5:ca:89:2f:f7:8b:32:01:6f:7c:3a:3b:b4:56:94:
         b3:c3:94:ef:dd:2f:e9:9a:a2:d3:35:f7:b8:c4:82:94:79:3f:
         a5:b2:78:af:a9:f8:b1:fa:34:a2:f7:47:7b:2a:85:ba:e4:8e:
         f6:f6:62:48:f6:ed:35:3c:3d:93:94:2c:0b:ad:af:e8:dc:63:
         af:a4:36:a9:f0:8a:04:d8:99:28:bd:76:2f:fd:fc:c9:f1:7d:
         09:a2:b0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----