Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/590bf6f7-530f-355a-b88f-0f44384871d6.roa
File:                     590bf6f7-530f-355a-b88f-0f44384871d6.roa (raw, json)
Hash identifier:          N+j0KkYwYLSzdVVABp04AEZm+x3FVE2VPhv/6fGMT/Q=
Subject key identifier:   8E:22:94:72:BD:F3:D1:35:DE:47:23:6A:70:3E:F1:FA:41:06:52:67
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858495EEEF4D46B4AFB25D2758180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/590bf6f7-530f-355a-b88f-0f44384871d6.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     20940
IP address blocks:        23.47.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:f4:d4:6b:4a:fb:25:d2:75:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=1b04e474-005d-4775-ba40-793a6a3be340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4b:a5:5c:3c:7b:61:fc:fb:40:5c:3c:6b:02:
                    37:1e:5f:6f:ae:79:f1:86:41:08:f7:70:2a:d0:1f:
                    f1:a0:63:da:46:82:55:d8:12:00:d0:70:8f:4f:27:
                    89:32:95:9c:57:cb:62:88:5e:36:2e:d4:cb:25:c9:
                    e3:57:ce:aa:47:8f:f2:94:73:93:52:98:a2:bb:d8:
                    f9:b1:e6:ef:96:ec:82:30:be:13:06:40:88:16:15:
                    ac:58:de:a0:13:42:bd:ae:26:2d:78:d4:89:14:52:
                    2e:96:23:82:f2:2c:22:8e:ba:8f:b9:7d:5b:f4:4b:
                    e6:df:cd:2e:63:b0:73:4f:8f:af:aa:72:8a:90:0a:
                    82:34:65:95:b5:a2:f3:e0:2f:5d:d2:2e:ab:17:45:
                    71:c1:a8:2d:bd:80:f7:56:88:d9:58:8a:67:86:99:
                    3c:2a:d4:11:0f:25:4e:58:e5:a6:5d:b8:ed:f2:4c:
                    a9:b1:83:24:d4:de:3f:40:73:bd:1f:01:56:cc:37:
                    21:d1:74:fd:55:9a:2d:75:19:9b:84:23:b4:6f:b3:
                    20:1e:1d:0e:fc:78:9a:4a:12:de:a7:16:d7:57:50:
                    23:c5:73:63:f2:62:0b:c0:23:ea:6e:02:6b:2f:68:
                    b2:5b:6e:c9:62:91:6f:7a:50:db:fe:01:66:29:31:
                    cc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:22:94:72:BD:F3:D1:35:DE:47:23:6A:70:3E:F1:FA:41:06:52:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/590bf6f7-530f-355a-b88f-0f44384871d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.47.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:88:80:6a:ab:7f:6d:5f:bf:80:64:8c:41:15:7f:29:f9:c7:
         49:70:3c:9e:09:a3:03:ff:d8:13:41:e0:13:d7:22:f0:11:d0:
         e4:37:ce:3b:ab:ce:15:13:e1:09:40:ac:6b:c5:dd:e1:49:22:
         bc:15:4c:77:3b:e9:b4:a1:5c:5c:22:49:2b:98:e4:84:e0:85:
         9c:ed:2a:4b:a5:d0:67:84:25:4f:82:4e:26:b4:7c:a5:a6:26:
         99:ee:81:76:28:0f:a9:37:48:86:6f:6f:a4:5d:77:a2:61:be:
         1e:64:81:25:70:e4:86:75:43:7a:ab:df:6d:89:be:1a:7c:5a:
         c4:d7:06:89:bb:76:f6:7e:45:d2:2b:ed:f5:8d:a8:07:0f:9b:
         52:d4:0e:20:ca:0a:00:39:4a:0f:fd:b5:2b:39:2d:e5:f9:91:
         78:a0:43:c2:87:f8:20:e5:b3:f7:a0:79:1a:19:7f:0b:9c:de:
         43:bf:12:53:81:a3:87:6c:2b:8e:fd:e3:dd:0e:42:24:35:2c:
         c8:dc:b4:4e:0a:fe:ef:04:0a:7f:e2:bd:f1:53:d5:f0:fe:37:
         e9:56:ce:c5:41:51:c6:03:49:21:a7:44:fc:4e:2e:fc:eb:07:
         42:b6:67:16:71:0e:07:0a:43:eb:66:87:c5:74:b6:fe:c5:0e:
         c7:21:59:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----