Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef6513d5-17cd-3c6c-a63d-0dd6337e478d.roa
File:                     ef6513d5-17cd-3c6c-a63d-0dd6337e478d.roa (raw, json)
Hash identifier:          srzi55lik+wqxadp71s2S8M4tv9YY9dktwJPBfa573w=
Subject key identifier:   15:49:99:B0:F5:F4:1B:82:3A:A4:16:9E:8C:33:1F:18:99:F1:E0:22
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848FFB195FCAAD50A666758A000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef6513d5-17cd-3c6c-a63d-0dd6337e478d.roa
Signing time:             Tue 25 Feb 2025 10:15:50 +0000
ROA not before:           Tue 25 Feb 2025 10:15:50 +0000
ROA not after:            Mon 26 May 2025 09:15:50 +0000
asID:                     16625
IP address blocks:        23.214.0.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ff:b1:95:fc:aa:d5:0a:66:67:58:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 25 10:15:50 2025 GMT
            Not After : May 26 09:15:50 2025 GMT
        Subject: CN=f71969fc-a3be-4d57-b25c-735aeebc627e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:67:4c:be:31:75:eb:2c:ab:29:4e:ba:e5:a9:
                    dd:24:63:78:f7:55:af:49:5e:45:da:f1:04:b8:7c:
                    08:cd:49:b7:36:ff:f5:81:a2:ac:ed:0e:bf:7c:74:
                    54:a6:64:4c:2a:bc:37:df:ab:97:e8:d0:b4:9f:d7:
                    74:fa:01:3e:03:5e:d0:8a:48:19:da:f7:b4:94:ae:
                    62:18:36:c2:52:c1:f8:73:87:e7:58:8d:eb:af:18:
                    bb:7c:5a:e6:f4:da:2e:32:72:2c:4b:f7:29:f2:02:
                    ce:96:70:2f:9f:db:62:b4:06:e5:67:36:c0:a5:21:
                    bb:dd:3f:f6:ca:ca:77:da:31:6d:b5:e9:62:cf:66:
                    36:60:6a:9f:db:14:1e:c9:69:e3:1c:2a:43:d2:9a:
                    cc:e1:87:69:40:f2:39:36:47:f3:70:99:e3:6b:f4:
                    61:60:c8:7b:65:36:54:ad:0c:ca:34:1e:fd:3e:3d:
                    63:6b:86:92:fd:3c:a0:09:6c:24:db:02:7c:f0:04:
                    1b:fe:79:e4:05:7a:a6:cf:1a:eb:8a:38:d0:4d:43:
                    5e:96:38:15:85:aa:68:66:51:a0:07:ac:5e:13:2a:
                    f5:3c:02:df:ba:ee:1a:09:d3:5f:57:7b:b9:27:d8:
                    2d:59:c0:1b:cc:2b:c5:cd:ce:da:5e:4b:8a:54:2f:
                    dc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:49:99:B0:F5:F4:1B:82:3A:A4:16:9E:8C:33:1F:18:99:F1:E0:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef6513d5-17cd-3c6c-a63d-0dd6337e478d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.214.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:1f:63:9e:60:03:a4:59:ca:1d:55:58:a0:65:a4:1e:29:3d:
         36:54:47:9b:92:11:13:ce:23:2b:88:36:83:f9:cc:b9:be:23:
         0e:a3:c8:6f:db:c7:d2:e8:e9:3f:68:ed:98:7b:5d:bd:a8:09:
         7e:19:55:06:f1:c7:e0:8e:ac:5f:95:19:1f:ef:6b:59:78:b4:
         a0:0a:29:bf:24:60:ce:10:e7:63:68:ba:48:2a:fb:07:43:25:
         25:2b:00:77:24:d9:d7:42:19:9e:23:c6:7c:51:70:cc:67:3f:
         bf:33:42:d8:9f:7d:ea:07:9f:a3:9d:93:d0:81:9b:16:d8:7d:
         16:b4:51:47:50:31:bf:b5:be:e9:4c:78:dd:c4:c7:4d:bd:36:
         55:26:d4:c9:35:a4:60:b1:fa:04:9d:03:48:3e:df:e6:bf:fb:
         f2:f7:21:03:d1:32:ed:49:eb:5a:92:d0:2d:58:f7:35:67:f5:
         c2:95:98:44:f4:02:4a:c1:36:5c:65:e6:bc:ff:0c:a5:af:0f:
         21:fd:51:45:92:0a:40:01:85:9d:80:4a:76:03:7f:46:a4:70:
         b9:68:34:b7:9f:41:7d:c6:bc:f8:22:97:f8:aa:17:ad:7b:10:
         5e:96:e5:8f:fe:d6:fc:02:2a:83:10:cf:79:be:dc:7d:26:f2:
         ea:ca:3a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----