Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7f9121f-6925-3384-8a77-b9cde631b16b.roa
File:                     b7f9121f-6925-3384-8a77-b9cde631b16b.roa (raw, json)
Hash identifier:          VpLU4ra/aTOix4i9LRXWjw4jIrEjFzw6sNiz96n5Wzs=
Subject key identifier:   B5:35:70:DD:13:EA:3D:9A:A4:9C:22:81:17:87:2F:DC:8A:04:73:06
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858498339FA6A6F5089DC567ACA4B
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7f9121f-6925-3384-8a77-b9cde631b16b.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        23.195.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:fa:6a:6f:50:89:dc:56:7a:ca:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=40e7036f-8778-4558-a6ad-b1ddc3bfdff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:46:c5:62:93:ba:b1:c7:d5:8c:43:3d:ba:e7:
                    30:a1:d6:3a:05:44:a5:6b:72:52:6a:46:98:d7:e5:
                    37:1d:b5:8e:c3:62:58:2e:11:41:3c:2e:89:e9:20:
                    c8:00:f8:b1:d2:63:b5:3d:e7:9d:b2:f1:3a:70:67:
                    43:07:59:eb:71:0b:46:3b:0d:e5:b2:2b:de:d8:a3:
                    f4:57:3d:7d:56:f9:2c:c1:1b:25:c3:58:12:ea:d9:
                    05:3c:57:6b:3f:df:62:fc:9d:c8:93:0c:d8:e9:c3:
                    c3:6a:7a:ba:2d:dd:1b:27:dd:1b:3f:82:af:7e:39:
                    54:74:a3:b9:ba:cd:24:10:64:db:d1:b3:f3:4f:a1:
                    da:d7:27:c3:cc:4d:3c:3d:88:d9:99:24:9f:ea:95:
                    43:79:dd:c5:49:e2:1f:18:74:23:78:d8:28:65:e8:
                    4e:3c:f2:da:66:e6:70:27:37:fa:ae:fe:20:f3:6f:
                    46:e5:54:c1:ed:ef:89:5f:42:ce:31:74:c6:9a:ec:
                    cd:e9:1c:e2:af:86:45:87:21:90:1c:a2:73:c2:69:
                    ed:7b:f7:6d:9d:58:fa:5f:25:3f:92:8e:21:b5:37:
                    04:61:d3:c2:81:4d:00:f6:13:6c:92:89:a4:a5:5a:
                    9e:95:5a:a7:ab:9c:ff:d7:7b:82:09:e3:e6:25:72:
                    83:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:35:70:DD:13:EA:3D:9A:A4:9C:22:81:17:87:2F:DC:8A:04:73:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7f9121f-6925-3384-8a77-b9cde631b16b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.195.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:49:d4:43:43:1a:ec:fe:5f:91:d4:0d:af:4f:e7:43:9d:bd:
         80:2e:4f:d1:8d:af:9d:75:f6:54:44:51:09:0a:32:9a:62:49:
         3a:06:22:47:fa:04:3a:f9:a7:79:a5:c7:06:f5:68:82:5d:a8:
         04:53:e4:4a:bf:85:4c:6c:94:4f:c8:23:37:3f:eb:3a:b0:be:
         28:d9:bb:0a:9a:c5:e5:6a:93:05:e0:0b:54:99:a0:0a:77:4e:
         6b:2b:34:fa:8c:bc:24:17:c5:b1:ee:8a:12:47:9f:0b:43:a2:
         be:3b:8f:b2:10:18:e1:72:13:30:fe:29:48:65:35:01:51:5b:
         88:e9:88:a8:7a:49:9e:6c:35:a5:3d:41:bf:a5:29:cf:cb:24:
         7c:cf:9f:18:97:ff:1c:1b:8d:70:c5:7a:9d:85:54:02:0f:ca:
         e1:73:d3:d4:df:d1:e9:0f:81:92:d3:c5:8a:12:a8:22:ef:aa:
         9d:b5:12:7e:65:71:3c:91:66:58:da:3b:25:ea:47:2b:37:33:
         c6:b3:f1:95:aa:14:70:68:6b:7a:3e:a4:8b:6f:ce:94:a9:a8:
         3c:b0:a5:b7:c3:19:11:bc:c9:78:81:0b:96:bf:3d:31:19:fe:
         0b:a4:af:a9:2b:31:03:aa:9e:46:42:fa:46:17:9f:94:07:8c:
         63:10:06:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----