Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d1b1dd6-100b-3281-8feb-5f8ee1ce3e8b.roa
File:                     7d1b1dd6-100b-3281-8feb-5f8ee1ce3e8b.roa (raw, json)
Hash identifier:          3UztocFpX3u/5NAzOGqQ59hwrL01rhYZPvTcgTqqk04=
Subject key identifier:   A9:15:F8:35:B7:40:AD:84:0C:3F:E1:DC:84:3E:2F:3F:9C:40:EC:4D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849833A10DCBCD105F6835B38C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d1b1dd6-100b-3281-8feb-5f8ee1ce3e8b.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     35994
IP address blocks:        23.198.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:10:dc:bc:d1:05:f6:83:5b:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=f2b4046c-649b-464d-a418-633870001fd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:69:27:cb:ae:fa:50:5d:43:88:1a:95:d2:2f:
                    8f:ea:6b:9c:66:6b:a5:22:5c:76:12:d8:de:c2:1c:
                    48:e5:ae:20:f6:4f:77:ad:9f:24:75:cb:21:9d:a8:
                    95:fc:c4:1f:b1:12:39:02:ab:be:05:8a:4e:c9:79:
                    14:b3:6e:27:ee:10:ae:ef:5e:3a:b8:d7:8e:80:26:
                    9c:00:9e:9c:32:11:0c:7e:92:25:d3:3d:b0:07:1d:
                    5a:b0:6e:3f:8e:15:10:40:e9:29:99:87:7b:0c:92:
                    5c:f2:f8:2c:dc:79:bc:69:2a:7e:ef:60:d3:08:b8:
                    7b:da:e1:9b:e4:a8:50:1b:01:6a:4a:1f:ed:8d:b5:
                    98:27:71:43:12:50:36:1f:39:87:c0:99:2b:34:f0:
                    79:97:03:7d:b5:57:d6:fc:61:79:cb:27:fc:ab:40:
                    a8:ae:81:e0:e3:e3:5c:cc:0a:19:23:16:64:72:29:
                    41:09:d0:3f:bc:5a:4f:8d:d3:7a:27:a6:8e:35:34:
                    7e:c6:38:9b:b1:19:16:13:20:e4:e9:27:e6:36:aa:
                    d4:9c:04:eb:76:a8:ff:a5:a1:32:ef:c6:f6:22:5e:
                    3e:ed:db:aa:50:22:b3:9b:65:15:1b:a5:6b:73:e6:
                    b1:34:2f:b8:53:ed:41:82:27:9f:d6:e2:66:0b:e4:
                    6a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:15:F8:35:B7:40:AD:84:0C:3F:E1:DC:84:3E:2F:3F:9C:40:EC:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d1b1dd6-100b-3281-8feb-5f8ee1ce3e8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.198.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:ef:29:c9:42:35:fa:f2:a7:ce:b3:93:01:64:89:ba:65:a5:
         07:b1:b4:c1:e4:7c:c3:2c:e7:a7:bf:65:3f:2d:5a:5f:50:e5:
         d4:e5:28:ce:24:fb:fc:33:da:e1:9e:89:22:f1:4a:51:4d:c4:
         62:4c:bc:65:b1:df:47:b2:76:fc:db:3c:ad:1d:9d:3c:36:d9:
         9f:47:bd:c6:8c:6b:c5:97:9f:57:00:c6:dc:30:88:c9:3b:23:
         c9:e6:8d:03:5b:f5:a2:c2:43:35:74:f9:bb:83:48:4d:1b:45:
         a5:20:af:8a:0e:f1:b0:7a:e1:ab:b0:b7:24:7c:a5:a9:d8:f3:
         e4:13:34:4b:0f:d0:e9:35:1f:86:ee:6b:8e:af:b5:79:55:bd:
         8f:a6:ec:af:2a:21:2e:28:46:0f:dc:37:5f:bc:54:1b:0a:ea:
         d6:d6:92:40:8a:6a:f2:2d:a9:d6:d5:90:84:3c:85:47:23:23:
         17:f3:62:64:22:5d:bd:cf:63:4b:c5:9f:65:86:b3:cc:59:85:
         32:74:d6:44:c0:63:a7:57:5b:6a:ba:32:2f:a3:83:47:47:2d:
         85:7b:1e:2d:45:d7:23:21:c1:4b:f5:c3:d5:cf:9b:0c:6d:bc:
         65:8f:e9:1a:dd:62:1d:00:7a:4e:22:15:7e:f2:6c:7e:48:4b:
         d2:bc:88:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----