Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/e2fcacc4-1802-3056-9db1-e7e83d3f1d26.roa
File:                     e2fcacc4-1802-3056-9db1-e7e83d3f1d26.roa (raw, json)
Hash identifier:          oNrWfQGVpIvygsZ6Rdl//X5FC7t71j3x1Oe5iZUvcfI=
Subject key identifier:   63:D3:89:DE:B9:9D:79:2D:61:30:B7:7D:0E:4F:D9:D9:F6:F6:F2:73
Certificate issuer:       /CN=69182550-6727-45f4-8b5c-c13c70b39cf9
Certificate serial:       010D0C9F432858493ED3D7173815974F13966280
Authority key identifier: 7E:A7:A0:1F:72:2F:B7:AF:97:66:CB:DA:6A:FB:48:58:EE:3C:FA:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/e2fcacc4-1802-3056-9db1-e7e83d3f1d26.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        207.207.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:d7:17:38:15:97:4f:13:96:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69182550-6727-45f4-8b5c-c13c70b39cf9
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=7a71814d-a54b-4c97-b9e8-96ceae6b926b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d2:79:6c:04:1a:a4:d2:81:cb:b7:66:a2:96:
                    67:06:f9:13:39:f0:8c:92:2e:b3:16:8a:30:72:56:
                    1b:60:d8:99:10:a7:0e:dd:8e:12:82:a1:0e:01:74:
                    71:af:23:67:e2:ac:ac:2e:99:f0:5f:e0:24:39:a8:
                    36:03:93:27:50:40:76:45:8f:32:eb:82:93:c2:cb:
                    ad:e7:8d:d8:ce:d5:9d:f7:b7:be:9d:85:4e:fb:10:
                    bc:25:0d:52:e1:4e:09:4f:4e:d5:f5:d3:b8:c8:0e:
                    ab:ad:62:7f:e1:18:33:a1:0a:2b:10:25:74:05:91:
                    9d:79:3d:fa:46:2b:81:52:58:e7:47:24:57:fd:7f:
                    86:34:0d:ad:87:1a:c7:02:5d:8a:cf:86:2d:c3:07:
                    19:c7:72:b0:d5:4e:69:a6:6e:fc:58:a3:2f:5a:67:
                    e2:b6:2d:76:62:f1:b6:13:fc:a9:03:03:d4:c1:00:
                    76:10:82:5f:d9:ed:79:14:3c:7e:df:7e:ca:09:41:
                    eb:ce:9a:05:e6:80:9b:96:c0:c4:0b:f0:02:69:8b:
                    c2:e0:f8:68:28:c4:58:b2:d3:50:76:6e:d6:f8:6c:
                    37:28:a9:f9:ac:c0:f3:56:27:e9:f3:2e:bd:d3:65:
                    af:06:14:db:d3:9a:d3:81:be:2a:18:63:76:0e:06:
                    a4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D3:89:DE:B9:9D:79:2D:61:30:B7:7D:0E:4F:D9:D9:F6:F6:F2:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/e2fcacc4-1802-3056-9db1-e7e83d3f1d26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/69182550-6727-45f4-8b5c-c13c70b39cf9.crl

            X509v3 Authority Key Identifier:
                keyid:7E:A7:A0:1F:72:2F:B7:AF:97:66:CB:DA:6A:FB:48:58:EE:3C:FA:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.207.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:b8:40:b6:d6:13:f4:f1:a9:a8:38:2a:06:d2:26:a0:15:b2:
         34:18:bf:3c:46:de:3a:9d:6a:a9:87:fc:f3:f7:96:99:1c:77:
         94:8a:ca:97:95:69:ea:e3:0d:f8:21:7d:ef:1c:62:7c:5a:24:
         f7:5e:0b:2f:06:a4:b3:fb:d2:f9:6a:82:42:ec:2c:07:78:d7:
         24:db:ad:c8:c1:e5:55:c8:3b:ce:67:d6:8b:d6:7e:97:17:c4:
         c9:fb:80:6e:2b:a3:45:51:4b:59:d2:a0:c9:67:53:00:a5:5d:
         26:27:89:45:2b:35:e6:53:97:0b:1c:9b:0e:f4:1f:e8:9e:eb:
         ca:c9:86:d2:42:79:8c:d2:15:48:1d:c0:b8:52:e2:dd:09:d3:
         2b:fd:a0:d1:b4:eb:3e:3c:36:f4:43:8e:73:21:32:15:c6:aa:
         eb:9d:41:b3:84:e3:07:d0:03:72:81:de:f7:e8:8f:6b:cb:47:
         f2:2c:79:1a:b1:9d:54:7a:17:e4:f6:5e:ca:d1:99:27:98:9c:
         11:14:2e:b8:8f:54:e2:8c:2a:17:9c:fc:54:ce:b2:ed:d5:d9:
         32:23:de:de:c3:5b:2b:93:96:de:5b:15:16:87:9d:1d:bd:cf:
         6c:7d:df:8c:f9:3b:7b:2f:0b:96:e1:7f:c4:f8:e2:9f:31:ab:
         96:16:aa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----