Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed8e4407-49b2-3460-a43b-96ebd4717e69.roa
File:                     ed8e4407-49b2-3460-a43b-96ebd4717e69.roa (raw, json)
Hash identifier:          oZ7g2079Mw25yUIkmTrF9OHOAqEZ4ndZWfQCDpPkpBQ=
Subject key identifier:   AE:14:19:14:F1:78:DD:66:2F:2F:70:9A:29:4D:97:C3:F6:20:C7:4D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858498339F8DEBF77060776917400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed8e4407-49b2-3460-a43b-96ebd4717e69.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16625
IP address blocks:        23.194.176.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:f8:de:bf:77:06:07:76:91:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=fe4fa6f6-60e1-4788-8104-010004a98e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8e:ae:67:82:d0:70:56:0f:ad:d8:cf:64:f8:
                    86:c9:d8:12:8a:30:5e:d0:6e:0c:30:16:06:6f:61:
                    c5:91:83:cd:ae:70:ef:c8:6f:42:48:6c:8a:7d:e1:
                    a6:e0:0e:0c:30:a0:9f:b7:70:0c:d8:75:5c:80:9f:
                    f6:da:72:be:3d:4c:66:62:eb:c0:8c:36:4b:ef:38:
                    91:7d:1b:f3:fd:28:88:15:1e:6d:47:74:b5:84:e3:
                    68:e1:1e:79:10:70:a4:c0:77:48:93:79:19:1d:4f:
                    e8:29:15:5d:a4:69:8c:74:18:f1:00:94:f3:da:67:
                    7d:bb:bf:a9:b0:50:87:8b:01:48:3e:4f:9f:f0:07:
                    03:ac:e9:5f:c6:e7:bd:f1:f5:34:80:85:3c:16:95:
                    7c:d8:3c:ff:c9:cd:f0:e2:9c:8a:f4:9f:f9:fe:ed:
                    77:66:c1:a3:0c:02:2c:db:d4:ff:b3:5f:a5:db:42:
                    c9:7c:d9:3d:5a:9b:42:3b:f1:07:ce:8b:2e:eb:ae:
                    5d:c6:c6:ff:9b:05:e9:72:e0:9c:01:3f:23:cb:1c:
                    9b:e6:5d:ab:f0:1d:52:b9:10:7f:eb:db:c9:ea:b2:
                    05:71:cc:36:bd:83:1a:78:75:5d:4e:d0:97:13:76:
                    1b:68:1b:2a:c5:04:45:22:70:8a:63:0c:37:30:d3:
                    51:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:14:19:14:F1:78:DD:66:2F:2F:70:9A:29:4D:97:C3:F6:20:C7:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed8e4407-49b2-3460-a43b-96ebd4717e69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.194.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:47:fc:37:0c:43:87:56:35:6b:da:1f:4e:44:ad:9d:2e:4c:
         a2:86:b5:88:46:39:43:f5:e9:37:4c:a3:ed:7a:c4:28:6f:5d:
         e0:c5:b0:90:c2:01:8b:a1:6f:76:7f:e0:28:e5:5f:56:41:2c:
         b1:7e:12:59:17:c2:4b:18:db:9f:14:c2:d3:a4:3e:91:d0:69:
         b9:44:cf:34:ec:38:35:f9:f0:1c:83:db:3b:35:5b:52:c6:0c:
         62:b3:cb:8a:b4:6a:27:84:3f:1f:83:77:ba:e2:ed:76:8e:bd:
         73:d0:a9:48:fe:13:53:fa:bf:03:fa:f0:74:11:22:f2:15:dc:
         c0:49:b5:b3:4b:1e:87:d1:61:bf:5c:24:91:e3:ea:a4:84:f2:
         10:fc:7a:d8:8a:4c:50:fb:30:60:89:fe:b9:fa:d2:98:c8:00:
         81:56:fc:83:56:73:8f:be:78:73:69:ad:7e:4c:c5:26:df:c3:
         df:52:06:d5:b2:b4:ca:38:ba:c4:ea:50:81:49:f1:dc:9f:b1:
         3c:cd:94:f9:d2:d3:e1:24:40:1f:33:9d:74:f9:93:68:83:5e:
         90:b4:a1:73:02:f9:0c:9f:61:e1:e5:60:7b:28:bb:51:80:b1:
         2b:1c:7f:29:23:c1:da:b9:4d:69:1e:9b:87:ad:b5:4e:56:26:
         80:c5:c4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----