Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4c4ea8e-4440-3631-9400-cb81c746fa73.roa
File:                     e4c4ea8e-4440-3631-9400-cb81c746fa73.roa (raw, json)
Hash identifier:          ieIREMAc24w0FWSkXmdi4IFQjbq3R96d4VzmQWgQPZ8=
Subject key identifier:   66:82:1B:6A:57:08:47:0E:52:F4:A8:D0:73:A3:10:93:A6:64:01:AD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858493243F920278F7AD2DCAAFD40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4c4ea8e-4440-3631-9400-cb81c746fa73.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     16625
IP address blocks:        104.72.112.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:f9:20:27:8f:7a:d2:dc:aa:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=2a085e8b-7cbb-4da5-bf1d-64789eb2e84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:86:db:aa:c2:0a:96:53:69:d6:bf:15:ab:06:
                    b5:b0:21:7d:5d:02:dd:1a:c2:65:98:a8:60:62:41:
                    f5:44:94:8f:df:1a:d2:ba:d8:89:ce:1a:cc:ac:26:
                    05:dd:85:ff:ba:1b:c3:25:67:45:32:64:9f:00:cf:
                    91:da:df:3a:23:dc:ee:ec:53:cf:e6:90:11:f3:4d:
                    65:40:d7:d9:d1:ae:24:97:33:7d:9d:81:bd:14:59:
                    7e:10:93:68:f9:22:96:87:9d:e6:d2:4c:95:1d:b9:
                    19:0c:9a:39:f0:9e:c5:6f:4f:df:3c:13:29:3d:08:
                    ba:4b:18:a1:b3:38:b1:d1:98:1e:da:b0:80:c8:9b:
                    4f:22:4b:03:b7:cb:dd:1d:62:af:0e:bb:d9:df:d1:
                    e9:51:55:32:18:4f:c5:94:b4:f5:a1:60:b4:d2:61:
                    0a:0f:81:9b:6a:88:0c:74:fe:51:37:4e:ba:70:14:
                    fd:8e:b5:2d:3d:6b:21:50:2c:b0:92:d4:da:1e:38:
                    c8:5f:0b:ba:db:0f:2c:1c:f8:c0:fb:e8:25:ad:08:
                    1a:11:ce:da:5c:c8:d1:33:d5:7e:71:2f:dd:1b:4b:
                    63:6d:21:e2:55:b7:77:db:1c:85:7d:82:6c:08:5b:
                    a9:83:ea:a0:44:ee:4e:8c:7d:9a:34:5c:4f:49:33:
                    44:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:82:1B:6A:57:08:47:0E:52:F4:A8:D0:73:A3:10:93:A6:64:01:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4c4ea8e-4440-3631-9400-cb81c746fa73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.72.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:3f:96:34:87:f8:25:6b:c4:5a:21:91:bc:25:aa:7f:45:92:
         46:ba:01:de:67:83:7a:7a:cb:5e:c0:96:6e:a4:d6:f9:3d:43:
         ed:39:83:22:09:bd:90:1f:36:04:f5:d7:4f:4e:c9:ee:6b:6e:
         ab:e6:44:df:05:5e:4b:26:e2:36:87:cf:a8:94:cd:80:1c:95:
         86:23:64:ee:dc:ce:67:ee:93:08:6a:64:7d:3a:a6:62:a3:0e:
         2c:ff:da:7e:3b:e4:88:ca:21:89:d5:ed:0e:66:7d:cb:60:c7:
         fe:2a:8d:90:02:77:8a:59:dc:fb:69:05:02:e8:15:65:47:0c:
         e5:49:f3:cb:40:f0:ff:dc:81:14:fa:76:33:d8:e7:0c:46:9b:
         f4:60:b9:36:93:fb:2d:30:b7:05:e5:d4:db:b1:24:2f:bb:a4:
         70:1b:b9:b7:43:a7:69:51:49:34:8c:15:02:d0:f7:d5:96:76:
         70:d8:af:af:ca:6e:c2:9e:fa:00:81:7e:fa:95:e3:e2:f3:91:
         36:f5:d2:bc:7b:71:f4:8b:35:14:42:c8:fe:c0:8b:d1:42:40:
         fe:a7:89:4a:9e:2f:d9:5d:99:00:aa:be:ef:4f:a2:53:c0:bb:
         b4:6f:70:d6:80:77:82:79:9c:68:08:e3:35:20:f9:43:b3:8c:
         0e:d8:1f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----