Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/409f642b-be8e-3ab9-9ebc-e0c88eba795c.roa
File:                     409f642b-be8e-3ab9-9ebc-e0c88eba795c.roa (raw, json)
Hash identifier:          WyNB04Rm489JzOgRYpBHvBfLbKCFwXpYx5bxp6ZAhYI=
Subject key identifier:   F5:44:3D:DF:D6:AD:1B:DD:76:84:59:23:F8:9B:4C:82:8B:98:FB:C6
Certificate issuer:       /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial:       010D0C9F43285848E9CBD8CEE7C8E337D2928328
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/409f642b-be8e-3ab9-9ebc-e0c88eba795c.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     2906
IP address blocks:        198.45.48.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:d8:ce:e7:c8:e3:37:d2:92:83:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=f0ba03cf-0142-4c47-a7c0-ec6c254e9583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:91:9d:34:22:3a:85:97:9e:55:6a:87:e8:b9:
                    88:73:ec:5a:fd:64:9b:77:f5:ad:7e:e7:cd:6f:aa:
                    b1:24:62:25:9e:b1:1a:cd:a2:b7:79:4a:d3:d2:2f:
                    8d:f7:d5:bb:a9:ed:56:b4:9a:74:ce:d1:9b:c5:cd:
                    ea:93:44:19:70:e2:57:74:6e:43:05:e9:45:a0:3b:
                    37:41:fc:6a:49:54:9f:91:d7:e5:f5:65:4e:fc:6c:
                    63:1e:82:70:02:99:6c:df:b2:64:52:b1:5c:94:3f:
                    2c:c9:6b:69:41:94:3a:40:67:05:8c:fa:19:a0:51:
                    ca:4a:33:91:7b:2d:9d:1a:ff:63:55:de:28:96:ad:
                    c2:f2:8e:06:17:fd:79:a4:25:df:22:ad:fb:f3:f0:
                    f8:c8:1a:ac:c0:9b:00:71:1a:52:95:c2:e6:e2:38:
                    1a:25:43:e5:59:f9:0b:68:9b:29:ec:21:2e:70:8b:
                    06:c9:2d:ee:8d:a0:fa:6c:51:2b:79:7d:0e:53:a2:
                    21:71:d2:22:cc:46:55:56:7f:f0:e9:6f:7c:ba:e2:
                    6f:95:07:0a:97:5f:88:ca:51:e9:52:4e:97:28:e5:
                    78:21:8f:4e:31:aa:40:a2:e6:0f:cf:61:f7:49:83:
                    62:89:7d:56:4a:dd:69:08:18:fa:98:45:9e:93:fe:
                    c8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:44:3D:DF:D6:AD:1B:DD:76:84:59:23:F8:9B:4C:82:8B:98:FB:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/409f642b-be8e-3ab9-9ebc-e0c88eba795c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl

            X509v3 Authority Key Identifier:
                keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:c5:f2:74:0b:c0:22:ce:cb:16:5d:a9:f1:d2:27:4d:2e:23:
         05:15:1b:7e:1d:e8:a9:3c:5b:4f:7c:5b:ec:a5:ce:29:ff:81:
         b3:72:c6:e9:8e:99:b2:44:e7:d7:88:8d:d1:f0:81:35:08:42:
         a0:74:35:01:51:2d:ab:3b:81:ac:27:ac:1a:92:a6:02:c0:a3:
         1f:34:59:e7:96:c8:58:61:84:80:a2:a7:ba:0f:5a:46:2d:4f:
         8e:88:ec:2e:57:cc:e9:c8:e0:4f:0c:b1:45:a2:e2:ff:c2:a3:
         6b:eb:44:2e:a1:e0:6a:63:3a:e6:b6:ff:0f:80:5d:7e:bc:bb:
         99:a9:0a:48:c1:bf:e8:77:30:09:f3:5a:2b:6e:43:09:22:b0:
         b7:eb:67:7b:1d:58:0d:a2:c8:6a:a2:ee:16:e8:0c:40:d8:89:
         47:e0:d3:c3:7f:7d:bc:40:5d:71:1b:16:bc:86:4d:45:12:bb:
         f6:0f:8f:a7:fe:d7:91:be:fc:4e:31:f5:d0:5f:82:5f:02:fe:
         e0:e2:ac:17:a6:c5:7f:de:75:03:f4:d9:c7:22:78:f9:83:12:
         18:21:48:23:52:21:d8:c3:9a:84:bb:d4:4c:3c:d7:ea:05:47:
         12:a5:ab:aa:f5:c9:fc:a9:db:34:da:8a:7e:b5:cb:07:a0:ea:
         16:5b:13:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----