Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63a6474b-a6a7-3626-8a56-59196517ca50.roa
File:                     63a6474b-a6a7-3626-8a56-59196517ca50.roa (raw, json)
Hash identifier:          ZT8haKOtxSgMgeAGeQkFCEaHitDg/HevHE0ggGfIouE=
Subject key identifier:   10:E7:5A:2C:AE:CB:AE:CD:35:B3:0F:C9:41:26:5B:39:DC:ED:68:C4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848EF61785DE4316708D01609A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63a6474b-a6a7-3626-8a56-59196517ca50.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        174.40.0.0/14 maxlen: 14

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:78:5d:e4:31:67:08:d0:16:09:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=d236f7db-120f-4bd6-90a9-4b168833cb14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4c:92:9d:8e:c5:89:28:9b:cc:6d:fb:a9:5c:
                    2d:1e:35:34:9b:c0:cf:4c:05:ff:3c:b7:7d:8d:93:
                    08:dd:1f:56:bb:72:ce:9c:cb:39:dd:cc:c3:99:5b:
                    43:16:77:53:0a:61:35:e4:4c:ef:b2:bc:58:ff:95:
                    52:2f:4b:ff:52:4e:3c:b8:c4:ee:a7:fa:8e:86:e1:
                    b0:5e:38:c8:b9:8e:8b:2f:d4:ea:06:5c:89:a2:4b:
                    31:9f:03:c9:78:5c:d0:28:15:b0:8f:3b:4e:d1:4a:
                    ae:25:27:bd:52:68:bc:42:60:75:d1:39:80:73:63:
                    ba:64:ff:15:90:2f:ad:6c:b4:b1:2a:04:4d:26:2f:
                    d6:18:8d:2f:40:cd:6e:65:47:3b:59:4a:6f:49:8d:
                    af:ba:ae:d5:5d:ee:f2:f5:58:45:a7:6a:59:dd:88:
                    0a:6a:fb:42:62:d9:e7:af:55:4b:23:37:97:3a:b4:
                    99:72:a3:59:e7:2f:5d:1a:b7:d2:7c:85:88:e2:05:
                    6c:59:25:26:16:3e:eb:47:eb:b8:73:23:31:a8:70:
                    16:88:e7:8c:74:4d:24:48:4b:9e:3d:b9:62:14:32:
                    c9:b9:b3:16:1b:2a:bd:c1:88:74:b2:bb:af:09:8b:
                    73:f8:d7:69:3a:bd:ff:2a:48:52:ad:fa:40:93:d9:
                    c1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E7:5A:2C:AE:CB:AE:CD:35:B3:0F:C9:41:26:5B:39:DC:ED:68:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63a6474b-a6a7-3626-8a56-59196517ca50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.40.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:0c:e8:72:c8:b6:7e:ed:c5:b7:54:8e:98:48:70:02:6b:96:
         b6:7d:5c:9c:e3:a3:fe:6e:58:6f:85:76:1e:ef:2a:25:bd:22:
         a4:9c:ad:a7:d3:a1:ec:2c:c4:29:93:b4:f6:c4:7b:d6:9c:0d:
         ef:04:09:fe:34:68:72:74:85:d7:bf:87:02:16:95:b7:c5:51:
         f7:0f:ba:bd:a6:dd:68:67:ac:0d:81:53:43:51:97:44:db:52:
         96:6c:01:a3:3a:c4:1c:cb:f0:50:f4:7f:b0:4c:c9:0c:ab:b9:
         80:d6:1f:f9:a2:1d:f2:31:3c:6b:d2:a3:78:d1:a1:89:6a:47:
         2c:39:28:f8:c6:b3:07:7f:a8:fe:1a:42:10:6f:8f:ac:29:c8:
         31:f6:f4:72:7c:d8:bc:69:dd:1d:e5:3b:b1:24:45:3e:b9:58:
         e5:2c:31:ed:0a:e8:12:f6:4f:78:bc:83:45:55:81:c1:fe:97:
         a5:2a:a7:12:1d:35:42:08:92:40:d0:0b:e5:c7:42:21:26:6e:
         d3:f3:38:b3:38:5d:05:a1:33:4e:00:6d:88:f0:f6:7c:29:e1:
         49:58:66:6d:65:82:de:27:d5:d1:2b:0e:8d:c8:fd:2e:51:6b:
         25:70:4c:4c:a2:ff:5d:d9:05:14:fb:71:1d:c7:70:8b:84:e4:
         ae:7c:c3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----