Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b610fa22-514b-365f-ac1c-a4b79eac7ba1.roa
File:                     b610fa22-514b-365f-ac1c-a4b79eac7ba1.roa (raw, json)
Hash identifier:          XP5M6SzoZcXFPoWx5reGrO3tsH4EBh4WORTfGMxLIoc=
Subject key identifier:   E9:A0:97:6A:0D:83:AD:34:74:31:10:94:67:7A:3C:97:FE:1C:2A:36
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858495ABED55C2C1322A63AB25800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b610fa22-514b-365f-ac1c-a4b79eac7ba1.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     20940
IP address blocks:        23.40.206.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:d5:5c:2c:13:22:a6:3a:b2:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=32113996-a51b-49c3-8f66-e03d1e6b3583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e3:f3:59:c7:4e:e6:9f:c3:ea:25:b7:bb:cb:
                    75:b5:87:a7:0d:8a:2c:ca:39:51:c4:44:fa:5c:c9:
                    68:28:3e:69:09:36:c6:5a:f7:8e:9e:a0:05:b4:46:
                    a4:96:8e:03:66:05:7f:c5:59:32:78:18:83:a4:c3:
                    ef:b0:e6:ac:9b:88:84:36:79:73:41:08:4b:f7:b8:
                    14:f7:e7:1f:79:52:82:ea:3d:e7:cf:ba:d5:f7:51:
                    e3:91:87:5a:f5:84:d9:61:54:d5:6f:6e:04:b2:74:
                    73:d5:2e:52:e5:ef:6c:33:c5:82:37:5a:c7:a0:47:
                    7e:66:ab:21:56:18:22:e3:21:d3:4f:d7:ad:5b:ef:
                    df:49:a3:88:0a:95:22:69:fb:83:c5:0e:f3:15:fe:
                    a6:37:fa:cd:1c:66:87:3e:1d:cb:d0:47:f8:a2:0f:
                    5f:c5:f4:df:7c:59:da:36:4c:d7:8a:37:09:0e:9a:
                    be:4a:e3:b1:03:4d:eb:29:ce:f1:1e:e6:7b:22:f9:
                    ca:19:1f:90:9d:fd:59:49:37:87:15:4a:8c:bb:51:
                    76:75:d9:07:3d:d0:38:3e:d6:78:54:b5:c8:0a:22:
                    5c:69:75:d0:0c:3f:03:d3:0c:f5:84:83:23:a6:62:
                    b8:12:f2:cc:cc:30:09:35:21:6f:f6:bb:fc:f8:4b:
                    5c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A0:97:6A:0D:83:AD:34:74:31:10:94:67:7A:3C:97:FE:1C:2A:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b610fa22-514b-365f-ac1c-a4b79eac7ba1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.40.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:37:b5:8f:ae:7d:22:4e:35:f1:28:f8:65:7e:5d:29:c5:0c:
         ce:83:9b:fa:43:0b:8b:4a:a3:fe:a9:0e:98:35:4b:9b:65:68:
         c2:b9:b7:9e:42:3f:f3:36:0b:1f:8e:d9:64:25:fb:60:5f:8a:
         b0:85:3f:3e:5d:3d:7a:a8:21:fb:50:93:4f:31:31:01:9f:96:
         08:67:aa:8c:95:d9:9f:16:28:5e:2a:27:b4:97:76:74:fa:d4:
         23:53:7b:ba:5c:25:0d:18:84:c2:fd:31:bc:b1:fd:33:8a:66:
         ba:76:d3:d6:31:b9:19:56:b2:9e:f6:6f:a1:f6:24:51:fd:e3:
         42:9f:bb:69:bd:a8:20:23:92:2d:c7:4a:67:32:1f:90:9c:a6:
         ec:75:8d:8f:3d:70:6a:84:8b:33:8e:7e:07:d5:27:6a:81:f6:
         04:73:e7:2f:f5:5c:61:2d:a6:0d:07:e7:7f:5c:be:2a:35:52:
         ce:93:e5:96:37:38:9d:11:df:cf:0f:8a:a3:c7:54:ba:79:9d:
         31:12:45:b0:4d:0f:ba:80:ad:f1:d6:2f:b8:a2:81:9d:d9:b5:
         8c:90:2e:3c:e9:e2:a5:5d:af:e5:1c:f8:5e:96:62:72:29:80:
         ab:35:c8:04:d9:c0:ad:d7:1f:e0:bd:bf:fc:1c:f0:3e:5a:f0:
         71:fc:01:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----