Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1ae068c-b2bb-3e50-9a66-b03a81564113.roa
File:                     d1ae068c-b2bb-3e50-9a66-b03a81564113.roa (raw, json)
Hash identifier:          bH2Ah85CVvEfXjczm4gYX8LcHRfcZlvSns4lUam+7VQ=
Subject key identifier:   D4:CE:93:5B:AC:B7:33:E0:48:A2:F4:56:31:28:B6:25:F7:6F:0D:FB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858495EEEF8CB3AC60AB8A2E77C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1ae068c-b2bb-3e50-9a66-b03a81564113.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     20940
IP address blocks:        23.48.250.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:f8:cb:3a:c6:0a:b8:a2:e7:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=f68ce17e-292b-4f61-8c49-0a9d01d92742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fd:80:a7:ab:fb:38:82:93:c5:69:58:fe:db:
                    7d:46:1e:c0:d3:25:88:10:e4:d5:2a:f8:08:02:83:
                    52:af:dc:d3:90:5e:73:01:ee:1b:f3:a2:94:b3:79:
                    c0:cd:5e:33:06:2d:7c:66:11:b0:eb:62:c7:ae:e5:
                    5c:d6:92:c0:61:87:8f:27:88:d8:08:01:c4:84:24:
                    7c:0f:3b:6d:5d:54:65:ff:77:f6:8a:7c:f8:68:7f:
                    a4:1c:00:ea:d0:05:f2:63:53:39:70:4b:56:a0:8c:
                    d4:28:3a:7b:82:65:7d:fd:5e:73:d7:a0:33:df:8e:
                    12:8b:69:ad:ab:41:85:fa:9a:c4:8f:70:55:6d:55:
                    d5:66:11:59:b3:1a:67:c4:23:45:0b:f7:1e:82:3d:
                    0b:1a:6a:c7:88:45:aa:58:22:a0:64:36:2d:43:93:
                    bf:41:0e:99:44:2d:cb:8b:ca:38:1f:5b:9e:27:2f:
                    20:af:d8:68:32:2f:be:25:15:c9:df:32:12:77:c9:
                    1e:da:c7:96:df:29:d4:fb:43:c1:2b:b9:65:c1:a1:
                    9d:90:c3:f0:e0:2f:52:d6:e7:49:9a:ef:6e:93:e7:
                    a0:47:fa:ee:8f:37:6e:ba:f2:a3:ec:a6:c9:2c:e3:
                    d4:ac:ce:0e:61:e2:4a:02:b0:9c:e2:5a:8a:e6:03:
                    da:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CE:93:5B:AC:B7:33:E0:48:A2:F4:56:31:28:B6:25:F7:6F:0D:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1ae068c-b2bb-3e50-9a66-b03a81564113.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.48.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:0b:86:67:4c:ba:1b:0a:19:e2:cc:a5:84:21:9c:98:8d:68:
         58:74:9e:d3:78:f5:82:5f:88:02:e9:41:54:b3:d6:f6:7d:b2:
         29:63:1b:2b:49:ae:18:8d:75:1d:bc:d7:46:56:f5:5e:1c:ca:
         7e:75:c6:0f:94:5f:d4:9d:2d:71:38:37:3b:42:e8:0a:9c:b1:
         7e:75:ad:9a:51:1d:b0:79:ae:39:d1:ce:fe:2b:21:1e:17:3b:
         b5:8e:f4:a5:7c:ee:4a:66:5b:f2:3a:1f:fb:e1:9f:f4:b4:e2:
         a0:6f:66:da:ae:a4:e3:63:e7:47:58:61:19:1c:49:50:a5:b9:
         24:42:d7:02:fc:fe:44:3c:c2:ea:48:9c:f1:39:e1:ca:e9:af:
         05:7c:9b:29:f4:f9:d1:10:17:da:80:73:c9:f2:a5:ec:e2:43:
         d5:c4:15:dc:9f:ea:c2:c4:12:19:4d:e8:0f:75:13:6c:be:58:
         09:f9:c1:65:f0:c7:7a:1d:38:41:33:48:06:92:2c:b7:87:b2:
         3c:29:5b:96:9d:79:55:1e:44:38:68:dd:50:b2:73:84:b2:06:
         c0:03:e7:a1:88:51:0f:95:d2:82:1f:55:76:cc:55:af:d0:dd:
         44:3a:e6:25:bd:e4:39:c2:9f:20:84:fc:7c:e3:fc:16:5a:1a:
         74:cb:c9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----