Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f7d410db-d7ae-3791-9c9c-44c55a2465a0.roa
File:                     f7d410db-d7ae-3791-9c9c-44c55a2465a0.roa (raw, json)
Hash identifier:          gLicZXEe6Jb8biGpSl4lzX9Smryhs4LpvoW7L1SyoaE=
Subject key identifier:   26:8A:3E:9D:FD:F3:1A:04:72:DA:E4:69:72:92:65:C3:B0:20:7A:F0
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F432858497C3EF2939958389A8AFD9480
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f7d410db-d7ae-3791-9c9c-44c55a2465a0.roa
Signing time:             Fri 11 Apr 2025 01:00:48 +0000
ROA not before:           Fri 11 Apr 2025 01:00:48 +0000
ROA not after:            Thu 10 Jul 2025 01:00:48 +0000
asID:                     8069
IP address blocks:        20.33.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7c:3e:f2:93:99:58:38:9a:8a:fd:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Apr 11 01:00:48 2025 GMT
            Not After : Jul 10 01:00:48 2025 GMT
        Subject: CN=264fa891-b9e0-4714-9d4e-800cb29b5dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:19:66:a9:a7:0a:6e:ba:b6:d3:d9:40:db:b6:
                    1a:bf:19:72:dc:f6:5c:36:3a:9b:9a:f8:35:61:f0:
                    1e:13:1b:9d:44:2c:b2:cb:6b:cf:69:d8:a3:09:0e:
                    38:8a:92:59:94:1e:f5:48:0b:06:9f:fa:1e:73:98:
                    41:97:85:b5:5a:9a:bd:d3:03:4a:a2:4c:36:87:de:
                    b8:a5:49:3e:48:69:5e:c9:12:9e:b6:98:6e:e2:65:
                    95:76:c8:ef:cd:72:c0:31:47:72:26:c8:c0:c8:08:
                    47:e1:21:61:ed:e8:8a:04:bc:a3:9b:12:70:d9:91:
                    1a:97:1d:76:d4:09:ae:93:c4:f5:e8:76:e2:4f:26:
                    bb:2f:49:c4:7c:18:f5:57:01:f1:56:33:1c:86:ea:
                    40:06:f6:19:42:b9:4f:0b:d0:e9:2e:47:ab:6e:00:
                    46:2a:97:a0:d3:21:09:9d:1b:b5:b6:23:2b:5d:a8:
                    e4:8f:80:eb:24:c6:9e:de:de:1b:ec:8b:64:d7:0f:
                    9d:7c:c2:d0:01:d4:32:42:14:12:1d:89:ac:91:d6:
                    6e:a0:68:93:f6:d1:16:c2:0f:a5:84:4d:f1:22:2c:
                    23:f7:b6:e6:11:8c:27:5b:28:25:b0:fd:8b:66:6c:
                    85:f2:80:d2:dd:6c:cc:0c:5e:08:e2:d3:ff:bb:b5:
                    d5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8A:3E:9D:FD:F3:1A:04:72:DA:E4:69:72:92:65:C3:B0:20:7A:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f7d410db-d7ae-3791-9c9c-44c55a2465a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.33.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:77:06:ec:ae:6a:45:44:7e:7a:a9:19:43:67:31:77:26:7b:
         f6:cf:77:74:a2:ae:89:72:fe:88:79:67:e1:46:f9:af:33:56:
         bf:f8:ea:ab:a9:d8:ee:14:81:c6:b3:4f:b5:1c:66:df:6d:74:
         97:d0:67:e0:65:74:2d:07:bc:bc:d8:3c:f6:5d:6e:6f:5f:da:
         7a:0e:4d:07:62:fa:da:99:76:d9:dd:d5:bc:9a:94:b5:5b:fa:
         6a:a8:86:c5:38:98:64:a9:1f:af:66:7a:9b:54:66:bb:de:9f:
         82:2c:ce:66:54:dd:2b:18:3e:46:39:5b:a4:d3:fb:0e:e4:f7:
         05:9e:d9:31:cf:7c:43:c4:01:49:72:20:14:b9:97:6c:9b:8d:
         1d:0e:96:93:72:a6:3b:a4:3e:4c:6d:50:e9:d2:91:8d:61:a2:
         a4:08:a1:95:b8:32:9c:ef:e9:e0:da:54:62:0d:62:be:b3:99:
         42:27:ec:7b:bb:62:26:ab:c2:ab:70:b2:d2:5f:46:c1:69:97:
         bc:db:0e:66:64:cb:f4:9b:7f:39:07:8f:11:51:46:31:c9:07:
         61:87:b9:e8:1a:d0:b1:89:6e:4d:20:9e:9e:a8:47:f9:75:76:
         aa:97:53:1a:36:2e:49:c6:86:f6:12:6b:44:dd:fe:f9:0b:6a:
         18:0c:90:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----