Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/0e183b81-df1f-3a09-86bb-471a923af2a8.roa
File:                     0e183b81-df1f-3a09-86bb-471a923af2a8.roa (raw, json)
Hash identifier:          IY82bdj0TOZJNpQWRxrsPbd4rx2dOGFOKVDZogbSQH8=
Subject key identifier:   52:65:5D:D9:C2:7F:5B:FC:61:21:44:DB:B9:4A:FC:43:DB:2A:11:B0
Certificate issuer:       /CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
Certificate serial:       010D0C9F432858497E03EC84512035A822EEB300
Authority key identifier: 39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/0e183b81-df1f-3a09-86bb-471a923af2a8.roa
Signing time:             Fri 11 Apr 2025 16:13:35 +0000
ROA not before:           Fri 11 Apr 2025 16:13:35 +0000
ROA not after:            Thu 10 Jul 2025 16:13:35 +0000
asID:                     33164
IP address blocks:        162.252.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7e:03:ec:84:51:20:35:a8:22:ee:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
        Validity
            Not Before: Apr 11 16:13:35 2025 GMT
            Not After : Jul 10 16:13:35 2025 GMT
        Subject: CN=0ae834fe-cd82-4e8f-8d8d-0622f5fa6a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:be:31:c4:16:08:b7:91:1e:f1:a5:22:e5:a5:
                    99:55:34:c3:4b:e7:5c:da:17:9e:19:a2:3f:2e:95:
                    6d:3e:b3:54:8f:9a:4e:75:d9:63:7e:57:1c:23:18:
                    6b:7b:aa:e5:3c:70:ef:ad:e7:5f:ea:41:68:4e:28:
                    0d:55:26:7e:c3:06:3c:e0:42:83:8e:41:7f:fb:62:
                    07:ab:d8:42:ed:c5:b4:79:8a:ba:1e:a2:10:e9:fb:
                    52:13:f9:af:24:5a:9b:05:e2:0f:e6:68:13:a7:27:
                    73:dd:c7:c6:9a:b2:c9:0e:62:c0:6c:8e:76:49:b4:
                    c9:5b:f9:14:36:22:35:a9:95:74:c4:03:9e:23:87:
                    16:68:82:46:49:eb:cf:98:4e:a1:72:db:9f:57:98:
                    80:fc:37:d0:cf:ba:9a:74:24:1e:64:97:82:47:19:
                    b4:3f:61:21:c0:b7:f9:e8:bc:ae:ff:6c:b7:25:b9:
                    64:b0:7b:f1:67:ad:fa:1e:43:60:3a:5b:73:3f:25:
                    07:cf:dc:38:06:ff:c3:bb:d0:47:4f:5a:16:d8:0b:
                    9e:65:9e:f1:ff:a9:30:54:9c:ec:7f:28:df:97:cd:
                    e4:24:16:02:41:0f:3b:57:5a:34:08:d0:1f:5b:ba:
                    c6:72:09:c7:97:73:be:e4:dc:8c:fb:fc:c8:34:db:
                    ed:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:65:5D:D9:C2:7F:5B:FC:61:21:44:DB:B9:4A:FC:43:DB:2A:11:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/0e183b81-df1f-3a09-86bb-471a923af2a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl

            X509v3 Authority Key Identifier:
                keyid:39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:ab:33:e9:4d:45:44:41:11:22:ec:19:6b:ba:8c:21:af:e1:
         4b:0f:24:75:5d:cc:22:a9:35:c7:bb:70:1d:8e:cd:a8:ad:d3:
         5d:de:41:3c:88:0c:93:f2:b5:2c:67:fa:ca:72:09:d1:d4:e7:
         b3:f6:87:78:21:a0:e7:85:b9:7c:c6:42:d1:c8:41:29:79:48:
         76:51:f4:a8:3c:0f:9e:3f:67:2b:35:2c:2e:8c:f8:cc:fe:68:
         b8:d8:41:54:77:40:d2:83:ab:07:df:5c:a1:3b:7b:b5:17:21:
         72:ba:68:db:46:b0:91:d5:5f:b6:72:49:89:f7:2b:cc:c7:4c:
         4d:83:5c:a7:be:d5:02:8a:0c:8a:fe:56:f6:c4:5e:1c:da:53:
         fd:b3:a2:65:be:1c:db:15:82:2e:50:e7:20:44:06:ae:43:aa:
         2b:a2:81:1d:e2:ba:d8:c6:9b:c3:43:b1:85:72:4f:ff:28:a6:
         c9:40:bd:9a:f0:3c:67:97:98:47:37:ea:a3:f4:53:83:ca:91:
         ac:6c:5a:a6:f4:c9:95:64:da:26:fd:48:4f:7d:b6:29:21:60:
         60:97:94:e5:eb:d8:13:de:ea:ba:fc:e9:73:83:b2:a9:07:38:
         36:c7:78:0e:01:68:ec:bf:06:91:aa:d4:25:2b:fb:e9:d2:5a:
         29:94:48:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----