Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/b843c24c-9470-32c3-9572-a733f7a4b73d.roa
File:                     b843c24c-9470-32c3-9572-a733f7a4b73d.roa (raw, json)
Hash identifier:          N14eN5hC9/CiRb8Wf/DF81mS7whrOQejRAaULGvXdNg=
Subject key identifier:   7D:6E:90:FB:41:3F:24:96:F4:C2:20:E7:07:02:CD:F7:3A:6D:12:4D
Certificate issuer:       /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Certificate serial:       010D0C9F432858491110846EAF2A3E72FC2B7500
Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/b843c24c-9470-32c3-9572-a733f7a4b73d.roa
Signing time:             Mon 03 Mar 2025 15:35:51 +0000
ROA not before:           Mon 03 Mar 2025 15:35:51 +0000
ROA not after:            Sun 01 Jun 2025 14:35:51 +0000
asID:                     21782
IP address blocks:        104.156.32.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:11:10:84:6e:af:2a:3e:72:fc:2b:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
        Validity
            Not Before: Mar  3 15:35:51 2025 GMT
            Not After : Jun  1 14:35:51 2025 GMT
        Subject: CN=ca2335c1-ab9e-42be-9ddc-26598ac9671f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f6:6c:15:bf:2b:7d:35:82:82:5a:03:04:b3:
                    05:81:0d:fd:66:fd:20:33:b7:5c:b5:53:8a:73:83:
                    b0:e1:0a:a2:c5:de:b3:a6:4f:14:4b:b7:3b:27:bc:
                    24:dc:b7:36:fc:30:e8:b3:87:0c:3a:25:ed:17:a8:
                    b5:d3:43:74:ae:39:49:31:96:7f:ff:cb:42:57:6f:
                    38:ca:fb:e6:f2:d5:e3:a1:6c:7a:35:9c:56:a7:ba:
                    80:9d:1f:8c:d4:8e:8a:dc:f3:ff:26:da:fa:49:e1:
                    5b:21:ac:e6:df:93:a7:e9:d2:0d:e3:5b:67:1d:f4:
                    5a:db:f1:23:91:d7:0f:40:23:ab:6a:fd:e1:8f:52:
                    7f:25:dd:f7:00:e6:42:7a:ea:34:8a:be:be:0e:69:
                    1c:1d:4d:cc:8e:62:b3:f2:3e:41:99:89:2b:2d:e5:
                    ee:a2:5f:5e:25:75:98:b4:20:0a:86:18:15:0c:1e:
                    3f:cf:63:81:85:d1:8c:0d:ed:cc:f1:a8:14:cb:89:
                    a4:0e:47:c7:43:9d:99:c9:3a:ac:64:f2:49:c8:ba:
                    3b:ca:cf:c0:7f:16:f1:99:e9:18:9a:35:57:49:87:
                    0d:e7:11:25:be:4c:f8:f6:6e:7c:de:1b:33:d2:35:
                    f9:23:71:16:af:97:a7:72:34:78:e3:31:09:3a:e0:
                    18:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6E:90:FB:41:3F:24:96:F4:C2:20:E7:07:02:CD:F7:3A:6D:12:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/b843c24c-9470-32c3-9572-a733f7a4b73d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl

            X509v3 Authority Key Identifier:
                keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:a6:f1:ee:1c:26:16:27:da:a4:71:9d:33:84:d1:87:83:21:
         39:da:08:0d:b5:5f:f2:e8:c0:45:02:e5:45:35:a0:dd:49:5f:
         75:21:e1:12:dd:a9:51:f0:41:7b:31:ed:4d:b2:19:a6:ee:7b:
         13:9f:b1:62:d3:a9:97:c5:2a:f0:33:28:89:9c:37:d6:28:67:
         57:e0:24:de:f8:a9:64:b2:43:c3:77:06:bb:ac:d1:3a:b2:55:
         48:1a:d0:1e:6c:bc:41:dd:51:14:2c:b0:7f:44:26:fd:9a:e6:
         a1:7a:58:ed:25:a4:1a:58:9b:9c:c6:08:0a:11:94:a0:25:0d:
         c4:ae:94:04:57:90:44:14:41:ac:90:0b:3d:26:a0:25:18:fe:
         a6:20:c1:cc:68:58:22:5c:e2:d3:0f:43:ab:0d:ce:82:62:ed:
         f9:20:c6:59:a0:49:81:17:07:45:81:e3:27:47:6e:69:e3:d4:
         85:0c:bb:4e:5e:c9:77:89:e4:f8:5f:18:95:8e:2b:37:20:2e:
         bb:97:2d:f5:4f:7a:d9:a9:0b:7a:5d:a8:9a:ab:86:d1:b1:5d:
         fd:3a:54:d1:2b:f6:34:b4:6d:57:e6:65:02:21:c1:20:0f:46:
         68:a8:22:b1:39:bd:80:11:29:40:98:fb:58:0c:be:6a:38:5e:
         29:d6:91:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----