Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/a917fca9-ce27-3640-9fa5-0743e75ecab6.roa
File:                     a917fca9-ce27-3640-9fa5-0743e75ecab6.roa (raw, json)
Hash identifier:          fzcYhufbPaPiLqCWxecljDcDKfiGleKMLevm8BijsdI=
Subject key identifier:   C8:A0:A9:1F:1E:08:08:AF:64:63:05:67:8F:7E:7B:15:5B:F6:45:85
Certificate issuer:       /CN=afcec77b-3d5a-4896-b9ed-b5b47b1bbadb
Certificate serial:       010D0C9F4328584981D450B880940A73C9244840
Authority key identifier: AF:5C:52:31:D5:97:38:D7:F0:C9:EC:32:6C:81:F0:87:F3:FE:5D:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/a917fca9-ce27-3640-9fa5-0743e75ecab6.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     395163
IP address blocks:        23.150.192.0/24 maxlen: 24
                          2604:70c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:50:b8:80:94:0a:73:c9:24:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afcec77b-3d5a-4896-b9ed-b5b47b1bbadb
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=1e837dcd-e0f4-4daa-939a-dd58e71111b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ad:b9:c7:85:05:de:e7:d6:bf:32:e0:ac:a5:
                    15:05:e1:73:62:4e:d0:18:9e:17:8e:aa:e0:83:72:
                    ba:d6:c8:1a:f9:9d:c7:ef:24:5a:83:c6:ea:0c:29:
                    31:9d:bf:24:02:61:05:1c:4d:35:b7:40:71:d7:3a:
                    d4:4d:8a:eb:1c:35:cc:94:20:13:32:e8:93:4b:25:
                    d1:cf:53:47:fe:02:37:b4:08:f3:75:24:a9:27:35:
                    df:ce:12:ed:64:ba:15:9a:3f:78:38:41:b5:2c:75:
                    7f:27:a2:6f:d7:12:7f:cd:81:55:01:25:31:ff:95:
                    7d:2c:ee:71:73:18:3e:e2:15:a9:22:7d:6b:d3:67:
                    6a:75:0f:64:e4:1a:4b:92:15:0b:8d:d1:8d:5e:f2:
                    9f:dd:c1:c2:b1:cb:81:4d:12:b5:c1:03:c5:44:80:
                    af:22:9d:95:34:55:42:12:45:b0:b2:6f:43:cd:ee:
                    56:cc:17:7b:f9:a6:0f:20:39:52:06:db:36:c9:f3:
                    e3:e7:e2:64:60:e6:99:4f:36:28:e5:51:81:69:c9:
                    c5:cf:37:f8:5d:de:1c:c0:1b:48:d4:30:55:4c:42:
                    4f:c7:5b:4d:13:11:4c:a3:ee:0f:eb:45:5c:2c:bf:
                    6e:54:e3:f0:df:73:d9:b8:15:db:81:b2:51:2d:97:
                    aa:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A0:A9:1F:1E:08:08:AF:64:63:05:67:8F:7E:7B:15:5B:F6:45:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/a917fca9-ce27-3640-9fa5-0743e75ecab6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.crl

            X509v3 Authority Key Identifier:
                keyid:AF:5C:52:31:D5:97:38:D7:F0:C9:EC:32:6C:81:F0:87:F3:FE:5D:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.192.0/24
                IPv6:
                  2604:70c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:6d:e9:dd:37:75:6a:eb:17:84:88:ff:98:42:3e:e1:43:12:
         7e:39:54:9e:cb:e5:44:b4:15:a0:82:15:d8:08:88:a9:d9:df:
         7a:71:57:39:87:a8:ef:b2:a2:f2:e5:15:b7:33:92:57:63:93:
         bb:df:0f:a6:92:d9:5a:bc:b9:b6:fa:ff:21:97:e2:df:48:be:
         33:77:aa:c5:37:e9:93:ad:3d:7c:30:83:e2:16:e0:4c:8d:46:
         39:d7:a2:63:0e:43:08:48:d3:73:86:11:c5:52:a3:e6:1a:56:
         74:d9:a5:4e:16:15:0e:3e:bd:b6:5b:d2:9d:a4:7b:9f:11:2b:
         da:13:38:c4:2a:94:fc:ce:99:9b:56:9f:57:e1:70:db:66:3c:
         16:b7:1e:b7:cb:76:44:40:89:87:96:a5:29:62:28:58:f0:e2:
         a3:db:fe:41:a4:a7:26:16:a8:57:51:af:0a:92:04:46:74:de:
         3e:3e:54:e3:83:19:57:1a:89:c9:73:ed:2d:65:12:18:b1:46:
         4a:69:35:8f:35:5c:91:17:6a:9f:46:2c:76:38:70:3c:50:59:
         c0:24:0d:b5:a1:5c:5f:63:6f:4a:12:c5:34:e9:e7:1d:17:30:
         95:32:ba:82:aa:a5:e8:64:3b:06:e2:bd:95:b8:aa:d4:6a:d8:
         b1:02:33:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----