Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf1e3177-28b4-3037-9544-789bed6a62ed.roa
File:                     cf1e3177-28b4-3037-9544-789bed6a62ed.roa (raw, json)
Hash identifier:          i43QpcGzPznBPD5MaktF3GnF358cxTM5Mu1vxEyENZk=
Subject key identifier:   AA:20:CB:14:91:45:8B:75:B2:5B:C9:0B:6B:6C:34:90:4E:4A:91:86
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858494E2EB6A6F0E48E58C723B200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf1e3177-28b4-3037-9544-789bed6a62ed.roa
Signing time:             Tue 25 Mar 2025 13:00:51 +0000
ROA not before:           Tue 25 Mar 2025 13:00:51 +0000
ROA not after:            Mon 23 Jun 2025 13:00:51 +0000
asID:                     16625
IP address blocks:        23.33.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4e:2e:b6:a6:f0:e4:8e:58:c7:23:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 25 13:00:51 2025 GMT
            Not After : Jun 23 13:00:51 2025 GMT
        Subject: CN=4f032609-67a1-4853-a7cc-56daed2dfb81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b0:14:1a:3e:84:46:78:46:05:5f:72:19:e2:
                    ec:9d:29:31:a2:a9:3d:ac:3b:c0:c8:2e:36:35:68:
                    d7:66:2d:f0:26:28:42:fe:9d:b0:f8:7c:eb:81:f7:
                    7a:63:c0:bd:62:da:32:f1:da:c4:67:79:0c:20:aa:
                    95:0f:55:07:c2:9b:94:44:fa:58:e6:0e:32:c3:d9:
                    90:69:40:12:51:a8:d2:70:60:04:44:c8:c0:04:85:
                    a1:28:8b:97:6f:fb:cc:ae:e0:3b:bc:4a:91:ff:6b:
                    b0:bc:1b:c2:8b:0b:09:d2:b0:b9:59:f1:b8:18:b9:
                    99:41:9b:22:71:1d:53:f7:cf:f8:b4:5a:d5:8e:79:
                    37:85:14:e1:d0:39:0c:05:8a:6e:84:e4:1b:d0:73:
                    4c:5f:28:84:89:f8:85:72:b9:01:69:90:00:4b:84:
                    02:03:52:3d:44:f6:47:e6:6f:4e:b0:e1:58:3f:62:
                    5c:58:6e:40:01:9b:bd:14:3f:51:8d:13:8d:d6:65:
                    cc:4d:5b:ae:43:66:64:c8:7f:b5:a5:cc:63:39:b5:
                    e8:11:b3:74:7b:48:44:23:10:95:b0:9f:ce:38:a4:
                    ac:19:70:9f:c7:bd:6e:9f:46:0d:a3:87:ef:d6:19:
                    3f:eb:16:ba:92:d7:10:c7:b4:d6:42:d9:e4:b8:c4:
                    ec:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:20:CB:14:91:45:8B:75:B2:5B:C9:0B:6B:6C:34:90:4E:4A:91:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf1e3177-28b4-3037-9544-789bed6a62ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.33.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ec:17:90:4e:9f:f0:27:9a:1f:e4:f0:62:a6:54:8a:04:69:
         3c:4c:b0:18:ec:bf:92:57:aa:20:39:65:36:46:94:56:0e:9a:
         04:f6:d2:d5:19:dc:9c:99:41:b3:dd:72:85:a6:50:13:0e:58:
         b1:26:92:01:2b:e4:d8:24:5f:87:03:09:18:10:53:cb:3e:2a:
         fc:93:43:12:d3:60:56:29:da:41:2f:c0:52:6a:3b:50:b6:4f:
         ab:63:d7:58:46:c3:47:22:00:43:f3:bf:cd:3e:a4:cb:16:de:
         78:d2:cc:5e:47:0b:17:51:c4:65:07:30:2b:62:7c:66:80:ba:
         bf:e4:8e:66:fa:ce:8f:c1:a4:4e:01:0e:64:c9:01:0a:64:c0:
         ed:82:ee:c1:52:55:66:05:ed:99:19:1d:53:49:5c:43:71:31:
         df:db:17:d6:f3:d7:be:7c:d3:d7:da:2b:00:39:37:d7:79:c5:
         2d:fb:b1:bd:89:ca:38:3a:a8:1e:35:28:82:7d:d6:e6:34:22:
         49:1e:54:45:cf:52:aa:70:09:cb:42:fa:d3:c1:dc:b2:03:c3:
         ea:a8:c7:8c:b1:43:e5:9d:d8:bf:e4:f5:fc:0e:70:70:53:4c:
         78:55:a7:26:20:fa:2d:d1:c6:f0:50:01:20:6a:fa:cd:dc:84:
         05:cf:dd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----