Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/2f47e308-f739-3a69-9b6c-30dc262792e4.roa
File:                     2f47e308-f739-3a69-9b6c-30dc262792e4.roa (raw, json)
Hash identifier:          7PxPOftA7ofOsAxcMh66wfjQPGqUrjGjM93oPr4B2FM=
Subject key identifier:   54:34:AC:5F:5A:C3:1D:5F:B3:B5:E7:1D:1B:44:D3:6E:B7:1D:0E:58
Certificate issuer:       /CN=69182550-6727-45f4-8b5c-c13c70b39cf9
Certificate serial:       010D0C9F43285848EF6140DABA122C786A281080
Authority key identifier: 7E:A7:A0:1F:72:2F:B7:AF:97:66:CB:DA:6A:FB:48:58:EE:3C:FA:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/2f47e308-f739-3a69-9b6c-30dc262792e4.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        207.207.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:40:da:ba:12:2c:78:6a:28:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69182550-6727-45f4-8b5c-c13c70b39cf9
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=00a5c678-abbe-4d8b-8858-9c79a975309f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:02:5a:d2:50:d5:22:05:9b:04:91:ed:70:df:
                    2f:8c:ae:ab:aa:c8:01:df:8b:7a:6c:6b:51:21:56:
                    b9:44:b9:de:59:eb:d3:fa:77:01:db:8c:d3:1e:ca:
                    8e:3e:68:df:52:50:f5:e9:0a:87:16:c6:ed:cf:dd:
                    75:71:67:9f:bb:70:69:b1:10:c8:96:2a:85:17:ca:
                    f2:48:e3:81:79:d2:d1:b6:9f:b1:bf:14:75:77:d1:
                    4d:a3:40:64:03:91:34:f7:90:d1:29:1e:d9:f2:07:
                    7b:49:10:4d:03:26:98:ca:d8:22:5e:23:ff:de:9e:
                    dc:6e:3a:13:53:89:c8:c6:f1:32:b4:5a:1f:c9:f7:
                    ea:5a:74:99:b4:f9:a7:f5:e1:b7:88:14:fa:5f:8c:
                    c8:fa:a9:f8:17:f7:f1:ae:f2:51:9a:9e:e9:2a:2b:
                    a2:4c:71:d8:fa:85:5b:28:8d:14:36:66:4f:ed:52:
                    bc:6b:4c:35:75:56:b1:f7:24:3a:d0:67:75:75:fa:
                    09:64:c5:b6:cf:db:60:bb:04:e5:78:01:38:92:98:
                    e9:44:c3:54:92:0e:56:13:57:0f:b0:26:de:6e:72:
                    fe:4d:91:59:df:20:d5:1c:2a:64:7c:71:c9:a4:3c:
                    5a:39:6b:0d:2f:98:22:ae:b0:5a:35:62:10:cc:a4:
                    2c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:34:AC:5F:5A:C3:1D:5F:B3:B5:E7:1D:1B:44:D3:6E:B7:1D:0E:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/2f47e308-f739-3a69-9b6c-30dc262792e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/69182550-6727-45f4-8b5c-c13c70b39cf9.crl

            X509v3 Authority Key Identifier:
                keyid:7E:A7:A0:1F:72:2F:B7:AF:97:66:CB:DA:6A:FB:48:58:EE:3C:FA:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.207.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:12:17:47:ff:61:6f:dd:37:f5:67:86:69:72:9a:9f:b5:26:
         63:d1:29:9a:30:dd:18:d4:ac:88:44:45:81:8b:5f:22:25:c8:
         86:26:9a:43:9c:6f:ef:b6:df:9c:6e:26:49:4c:27:07:d5:c1:
         6d:cb:bb:ef:20:81:3e:8c:a1:b1:77:f4:b1:41:08:67:27:6f:
         12:c1:d7:6b:a6:2f:ec:17:88:cd:81:81:c0:fa:3b:fb:50:b3:
         a3:0e:c7:07:e3:84:7b:e5:38:86:01:41:44:18:94:15:6b:d4:
         48:97:c1:32:c4:e0:b0:6a:0c:69:1a:ee:0a:ca:55:35:f6:de:
         f7:5e:14:d4:0d:2d:a4:ec:b2:e3:8d:ce:01:2c:85:d6:ff:52:
         25:d6:a6:94:df:e4:c6:48:28:49:5e:b1:26:a4:83:bb:b0:2a:
         1c:cd:9c:28:bc:b9:43:d9:a2:1f:40:f6:0c:2a:43:ff:99:02:
         fb:f1:a7:a3:f0:cb:69:65:9c:a4:db:ce:81:28:b9:c8:bb:7b:
         49:d8:4d:c5:57:f0:6e:0b:4f:ee:02:62:e0:5b:71:29:5d:06:
         02:72:25:d5:86:83:ab:30:b9:94:7d:a9:f6:70:30:48:56:be:
         c6:0a:9f:79:8e:c7:77:6e:5e:37:fb:e0:3e:ab:43:eb:47:1d:
         e8:8f:ef:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----