Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cb4f663-8163-3280-abb8-c9b58fa88c34.roa
File:                     1cb4f663-8163-3280-abb8-c9b58fa88c34.roa (raw, json)
Hash identifier:          l78SqBCRLhRoIbkVuZIkWIl+2mQ9mJs/uK8cfBUZwoE=
Subject key identifier:   F9:01:9C:28:7F:C5:42:F1:6A:A7:94:FB:E5:54:75:AF:1B:C3:1B:A3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848D9C20DFA461F571092805880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cb4f663-8163-3280-abb8-c9b58fa88c34.roa
Signing time:             Tue 11 Feb 2025 20:08:18 +0000
ROA not before:           Tue 11 Feb 2025 20:08:18 +0000
ROA not after:            Mon 12 May 2025 19:08:18 +0000
asID:                     3855
IP address blocks:        199.172.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d9:c2:0d:fa:46:1f:57:10:92:80:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 11 20:08:18 2025 GMT
            Not After : May 12 19:08:18 2025 GMT
        Subject: CN=553d7615-0593-4f9c-885d-080ea5643dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fa:18:00:42:57:ca:05:a6:13:14:42:e4:cd:
                    84:88:b8:77:6e:b0:83:80:83:81:10:55:3c:9a:38:
                    57:19:35:9d:6d:88:dc:84:46:50:19:14:05:8a:99:
                    72:5c:09:0b:9c:50:dc:63:9f:4c:30:d5:0b:02:a4:
                    d8:61:88:5a:2b:19:14:8e:0c:21:25:42:7c:e1:56:
                    cc:7d:f6:3e:4e:bb:c8:15:0c:52:2b:50:9d:87:d0:
                    27:0c:dc:bb:91:fe:03:ee:de:dc:0c:cf:ec:a3:8f:
                    62:45:c2:d5:07:28:55:ac:99:2a:07:e6:60:73:78:
                    3d:4e:29:c5:1d:79:c9:2d:1c:3f:68:a8:ee:bc:ac:
                    d8:1e:69:11:82:f1:26:51:4e:b4:98:ea:da:c3:a4:
                    86:93:06:c9:68:da:82:40:bd:af:d2:71:35:44:04:
                    98:2e:04:02:70:36:93:7e:8c:d3:92:4e:2e:dd:92:
                    af:b7:73:1e:15:e6:b9:ca:56:b0:3f:93:8b:50:7c:
                    ea:cc:9c:2b:ee:95:32:cb:a2:0d:57:52:cb:c0:97:
                    96:f4:80:ec:70:5e:8d:9c:21:5e:99:9c:97:98:a0:
                    76:8b:0d:13:92:c9:40:d5:98:de:d3:b7:5c:09:ec:
                    ca:49:79:76:a2:c6:a3:c8:40:e3:37:71:85:c8:bb:
                    55:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:01:9C:28:7F:C5:42:F1:6A:A7:94:FB:E5:54:75:AF:1B:C3:1B:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cb4f663-8163-3280-abb8-c9b58fa88c34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.172.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ce:4b:f7:e5:e1:c7:75:f1:89:2d:27:f2:4d:72:71:67:14:
         1f:ea:af:07:de:6d:f0:36:bb:62:57:41:29:cb:5c:29:09:86:
         05:a3:35:94:f2:b1:a8:63:c9:59:6a:07:0b:fb:40:14:44:e5:
         af:ab:b6:36:2a:0c:2e:e0:47:f2:78:c4:a5:2d:0f:7d:a4:a8:
         d1:ac:9e:c3:3b:e0:0a:5e:41:c0:1c:32:6e:0e:10:0b:e4:16:
         5e:6f:43:33:e8:f4:b6:a2:f2:b2:c3:67:43:2d:47:80:8b:8b:
         73:b9:12:ca:b7:cb:90:dc:14:7f:ea:21:1a:7b:c0:b5:0c:e4:
         70:b6:31:37:6b:12:2f:49:2e:e5:0a:5e:75:24:22:4a:c6:6e:
         98:cf:f4:d6:2d:42:a1:01:17:b7:b0:70:18:dc:55:99:33:ba:
         f3:44:a3:71:1f:46:cc:7e:d0:b6:cb:fa:8e:b0:8c:e8:62:34:
         62:82:5e:3f:38:09:22:de:18:37:22:8f:c4:53:1a:52:13:11:
         fe:33:e3:d1:9e:38:c2:b2:23:34:f3:42:16:8e:a2:6a:54:74:
         df:41:53:c6:60:96:57:b7:37:9f:82:92:31:6e:7d:25:26:66:
         be:08:d2:9f:7c:7c:63:09:55:06:d6:34:51:10:82:00:2f:9c:
         a1:bc:01:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----