Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14859d00-a0b8-3074-a1f6-13ea0e58c8d5.roa
File:                     14859d00-a0b8-3074-a1f6-13ea0e58c8d5.roa (raw, json)
Hash identifier:          HgeIG7wVVWAqHIMfyNzu2aes6hhMxzozTXr2tgFO9ac=
Subject key identifier:   DE:6D:AB:D1:EE:CB:13:7C:86:B3:A1:42:C3:B1:F4:DB:62:16:E0:64
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584964845E82254E58615F841F20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14859d00-a0b8-3074-a1f6-13ea0e58c8d5.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        75.198.24.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:5e:82:25:4e:58:61:5f:84:1f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=b0ca4c20-022b-4f3d-900a-4b429b75ffbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c4:b7:fe:cb:6e:8a:4f:25:06:6a:d5:83:06:
                    a8:fc:b7:32:00:a2:3c:ba:51:79:30:fc:5c:b9:39:
                    c2:67:26:4a:e4:e6:5f:49:d3:c0:8b:bd:bc:fd:7c:
                    a5:f4:66:f2:f2:14:6b:de:af:6d:6b:6a:1a:c6:28:
                    d4:65:20:1a:4a:1c:b1:26:a3:16:db:0c:90:e3:a2:
                    66:35:00:8e:05:e0:00:c6:10:93:8b:98:ac:83:6b:
                    32:36:85:fe:77:69:c0:a2:f6:0e:6b:a0:1c:62:9c:
                    1b:be:4c:e3:63:4e:3d:48:6b:e6:c6:45:69:16:b7:
                    16:fc:45:72:59:5d:6e:44:f4:bc:60:c0:6d:25:06:
                    d6:4f:4e:50:78:ae:82:bd:7d:b2:93:e6:92:31:95:
                    83:6f:af:4d:de:c1:a9:56:9f:ed:04:85:10:a4:7e:
                    e3:38:8a:e4:81:2e:5f:5d:22:85:b8:77:f8:24:74:
                    96:51:70:34:b4:26:dd:80:25:b2:6c:51:82:e9:83:
                    17:71:9d:dd:69:2f:80:f0:5f:ad:9d:f6:c6:39:35:
                    97:9d:3d:aa:a1:f6:05:56:fd:4b:a7:46:bd:b0:d8:
                    df:c9:4c:dc:12:aa:4d:63:c4:d1:b4:71:f4:92:ac:
                    61:87:69:72:a4:bf:6d:50:db:01:ef:7c:f6:44:72:
                    43:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6D:AB:D1:EE:CB:13:7C:86:B3:A1:42:C3:B1:F4:DB:62:16:E0:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14859d00-a0b8-3074-a1f6-13ea0e58c8d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.198.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:00:29:c4:9b:27:95:11:b6:61:5b:d5:dc:03:c8:ae:45:ed:
         3c:e3:46:96:bc:8d:ca:78:3c:3d:e7:f5:18:cf:20:fa:61:ca:
         79:d1:b7:ce:b2:c0:9f:ef:82:72:2a:6a:d0:b0:a1:79:f3:d0:
         f0:12:d5:45:e2:2b:9c:d1:3f:d4:07:88:d6:fb:56:e9:6b:62:
         45:54:a4:d4:62:95:80:c5:76:4c:2a:1b:7d:72:9f:05:2d:95:
         5d:0d:f9:8e:c2:95:b5:6e:1f:cb:98:f1:5d:eb:4a:f3:e0:dd:
         d6:a2:6f:e4:80:55:70:86:e7:bc:47:39:b3:43:8d:2e:59:50:
         0c:11:d0:c0:d0:6c:0e:b0:af:2c:6b:7d:b8:d1:22:bd:5a:82:
         47:a6:f7:42:99:2f:87:67:b6:2f:26:90:f0:b9:53:79:50:5a:
         3b:c7:e6:26:d6:2b:35:d2:19:16:f7:47:38:44:4b:21:8c:52:
         4e:3b:d3:8d:45:c5:d2:33:78:c6:82:4e:c2:84:3a:34:47:01:
         3d:37:97:83:7b:43:88:4c:a7:e2:54:f1:54:d8:0d:d1:48:bf:
         c4:fd:5e:85:31:99:1d:c6:de:bb:d6:3d:ba:b0:d0:c9:6d:09:
         1a:4d:2c:dc:fc:46:32:6c:bd:4a:8d:e5:f6:56:e1:8a:fe:56:
         f0:89:de:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----