Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/f6a02adf-61d7-38a9-80c2-b6d92d0f8fbd.roa
File:                     f6a02adf-61d7-38a9-80c2-b6d92d0f8fbd.roa (raw, json)
Hash identifier:          TAQe8IgiBhSb9cIybbOpoYa7kHd43K+TRxngQZb5CVE=
Subject key identifier:   EB:33:39:D4:BE:49:E3:B3:B3:CC:1B:CE:5A:18:A0:59:AE:88:D4:4F
Certificate issuer:       /CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
Certificate serial:       010D0C9F432858497E0471ECA70A6BB7B68CF100
Authority key identifier: 39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/f6a02adf-61d7-38a9-80c2-b6d92d0f8fbd.roa
Signing time:             Fri 11 Apr 2025 16:14:38 +0000
ROA not before:           Fri 11 Apr 2025 16:14:38 +0000
ROA not after:            Thu 10 Jul 2025 16:14:38 +0000
asID:                     33164
IP address blocks:        162.252.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7e:04:71:ec:a7:0a:6b:b7:b6:8c:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
        Validity
            Not Before: Apr 11 16:14:38 2025 GMT
            Not After : Jul 10 16:14:38 2025 GMT
        Subject: CN=1c42ed9f-b867-4212-ad01-fd7900d21f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:28:11:40:8c:a3:b8:d9:a2:2d:ce:71:3a:c3:
                    f0:0d:3f:89:37:33:a0:b8:33:5e:8a:01:62:23:00:
                    9a:3d:d5:a9:26:51:95:4b:7d:f5:93:d6:f9:b1:eb:
                    7a:ac:df:26:4d:1e:df:ab:45:f8:18:6c:14:3c:86:
                    ad:bc:a9:25:4c:59:83:4f:c4:f8:eb:c5:0a:c1:84:
                    87:bf:d9:6d:a8:bc:e5:4d:1b:74:61:f9:2c:e8:14:
                    fc:35:0b:ea:f7:2f:c1:85:ac:b7:36:fd:37:a9:19:
                    20:db:33:8f:5f:9d:cf:ef:d4:7a:55:03:58:86:07:
                    e8:61:8d:eb:26:dc:99:9a:c1:6d:4e:14:63:45:fe:
                    08:52:15:6e:e9:3e:76:11:2b:c6:6c:75:38:63:3c:
                    d7:86:42:b5:40:96:b1:40:20:54:2e:c4:c9:cc:c6:
                    21:13:79:d2:02:d5:06:c6:ad:a7:0d:58:84:0d:8d:
                    ef:f0:61:2d:06:f6:3e:8a:1f:07:2d:c0:de:a8:44:
                    97:25:4b:6d:98:c1:fa:9f:a2:b1:d0:f3:da:ca:c2:
                    12:a8:01:32:3f:69:85:b1:ce:5c:42:b3:58:13:be:
                    87:4f:c5:bd:14:80:b7:ce:c8:43:3f:5f:1f:97:16:
                    99:23:d3:12:08:0a:95:fd:ca:77:51:d6:0d:f1:9f:
                    b5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:33:39:D4:BE:49:E3:B3:B3:CC:1B:CE:5A:18:A0:59:AE:88:D4:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/f6a02adf-61d7-38a9-80c2-b6d92d0f8fbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl

            X509v3 Authority Key Identifier:
                keyid:39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:52:d1:0c:5e:9b:81:9e:0f:a6:0f:57:4f:bb:e8:ef:46:40:
         1b:25:85:ed:0d:d4:93:69:58:f1:a5:29:9b:3b:e2:95:0e:c2:
         2c:8f:8b:3f:18:ab:88:b3:62:15:32:89:d0:d2:4a:36:1c:17:
         a3:91:cd:a0:4f:b9:6f:ba:76:3a:f7:c1:ad:15:04:8a:14:04:
         73:cc:04:7e:0f:ed:61:65:34:2c:5e:c9:dc:0c:fb:5d:e7:64:
         1e:7b:74:3d:81:89:18:2f:1b:65:96:26:c9:47:e6:59:6c:71:
         21:56:33:dd:ad:1b:f9:7f:9d:73:de:a6:14:64:b7:59:ad:93:
         f5:cf:57:28:42:d6:13:8d:c5:f6:53:67:29:1f:69:65:9f:0b:
         5f:19:8f:37:c8:97:31:bd:f0:1d:a5:37:36:67:8b:c3:a4:21:
         b4:8c:3b:1a:8d:65:49:fc:74:bc:c4:6c:76:8d:71:0c:63:88:
         2c:40:f2:00:ae:19:29:46:87:2b:1c:e4:30:fb:a7:de:cb:66:
         20:1c:6f:a7:f1:18:58:74:4c:55:c7:0b:76:80:ed:f1:59:36:
         8a:4a:f8:49:0c:29:b6:25:08:31:68:3b:94:c3:04:a9:e6:c3:
         21:cb:45:a1:0e:9a:fb:b9:58:6c:4e:32:73:46:fa:d1:62:ff:
         82:73:c4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----