Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b29c80bc-009a-3da4-ae58-96b8bae82cc5.roa
File:                     b29c80bc-009a-3da4-ae58-96b8bae82cc5.roa (raw, json)
Hash identifier:          k4A6PJZPSwpD3aGdGihhZNNZ9XEHjTiawbhQ5GF2i7w=
Subject key identifier:   6E:0E:3F:A3:BA:B1:07:4E:4C:DC:AD:89:5E:04:19:55:AB:3E:31:0C
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F432858497C3EF3F7BFF27EC4F315E000
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b29c80bc-009a-3da4-ae58-96b8bae82cc5.roa
Signing time:             Fri 11 Apr 2025 01:00:48 +0000
ROA not before:           Fri 11 Apr 2025 01:00:48 +0000
ROA not after:            Thu 10 Jul 2025 01:00:48 +0000
asID:                     8069
IP address blocks:        20.33.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7c:3e:f3:f7:bf:f2:7e:c4:f3:15:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Apr 11 01:00:48 2025 GMT
            Not After : Jul 10 01:00:48 2025 GMT
        Subject: CN=c0bb2c48-5136-4e36-9512-793d7eb466b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b5:54:c1:59:17:e8:a9:19:b1:03:09:2b:7f:
                    ac:8e:f8:1f:c9:e6:f2:f4:25:e0:cc:da:d2:32:21:
                    31:5a:75:bf:73:ba:36:79:c1:02:99:71:0f:a6:ca:
                    b3:b3:c6:9c:e9:0c:39:b4:bd:6a:4d:0c:d3:27:78:
                    46:94:27:10:5e:05:b8:12:9c:57:e3:36:8d:01:8b:
                    ee:3b:ad:08:c0:4c:fc:fc:f5:25:7d:ae:a6:b9:3e:
                    a0:b6:dd:68:70:be:01:81:3c:56:85:e2:c1:78:cf:
                    6b:61:a6:bb:f6:ba:b3:c2:8c:55:a9:b2:68:19:3d:
                    b6:81:62:a0:23:d6:90:52:e2:c7:76:97:93:18:21:
                    bf:a5:99:c2:5b:9a:52:90:73:c6:d8:e6:13:c0:da:
                    30:66:e5:91:06:a6:a4:34:bb:28:57:84:25:e4:9f:
                    6f:e1:bb:e4:37:69:b3:2d:c4:84:4c:7f:f7:39:85:
                    21:c9:8f:b8:77:ef:d5:db:64:2e:16:62:f5:43:e0:
                    0b:63:73:ec:a6:20:fd:b8:df:2b:0a:ec:ec:49:82:
                    22:0c:bc:af:d7:7a:bc:0c:22:29:d2:97:f5:ee:f6:
                    8e:d9:b3:1c:c0:f4:a8:1c:42:bd:91:46:4e:5f:69:
                    c7:61:25:93:0b:02:1e:ed:f4:5b:c0:39:a1:b9:6c:
                    e6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0E:3F:A3:BA:B1:07:4E:4C:DC:AD:89:5E:04:19:55:AB:3E:31:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b29c80bc-009a-3da4-ae58-96b8bae82cc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.33.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:69:9e:20:06:4b:25:cb:76:e1:a3:b9:0b:d0:18:6f:90:88:
         9c:b1:03:04:f3:cb:fb:65:10:67:cd:d5:fd:6c:55:78:63:87:
         6c:a1:79:84:21:72:b8:1d:43:56:1f:47:63:c2:53:38:b9:69:
         dd:60:c5:5f:69:33:28:9c:c0:ed:fe:41:cd:8b:4f:49:5b:b4:
         87:3e:6f:fb:20:6d:bd:9e:4e:74:70:50:65:a5:e1:b5:20:44:
         b4:9f:a2:2c:f2:46:6e:b8:f1:42:4d:43:47:96:1c:a9:52:1e:
         c3:83:42:a4:2b:29:c6:68:42:30:8d:fa:82:6e:62:21:33:af:
         15:0f:3b:63:56:10:81:fb:d4:2b:50:25:50:1f:01:b4:15:bb:
         81:2e:86:e7:a4:84:7b:31:36:c7:4f:64:10:38:2f:0d:b8:e2:
         2a:e5:5c:be:b3:6f:fb:9b:55:25:f2:11:20:81:c2:a3:15:fc:
         7b:7e:21:7a:ce:1e:85:1f:3b:e3:25:e9:75:aa:a9:e6:26:55:
         cb:94:95:98:fb:73:62:72:db:86:5e:c1:4f:b4:71:04:fe:ca:
         12:35:0f:e3:e2:b8:db:c3:c0:fc:7d:85:b0:98:0d:26:78:d2:
         e4:2a:10:68:4f:27:85:39:89:76:ec:69:fe:19:da:5c:d6:a7:
         90:b2:39:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----