Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b907a47f-1eb3-3bd2-9fe0-5237da52d58e.roa
File:                     b907a47f-1eb3-3bd2-9fe0-5237da52d58e.roa (raw, json)
Hash identifier:          teDZUzPH7tExEfc/hvllXyMdnyfguPQyU3cT1T/bSKc=
Subject key identifier:   E5:57:ED:75:50:17:C2:78:46:65:FC:C0:7A:A6:5E:E6:27:3D:17:28
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584981D4431E98A306F834E20640
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b907a47f-1eb3-3bd2-9fe0-5237da52d58e.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     6167
IP address blocks:        97.209.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:43:1e:98:a3:06:f8:34:e2:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=a105f88c-5d75-4aaf-bfa8-eddb811c446e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:06:8c:45:27:0f:ae:4b:e0:2b:da:15:d9:c0:
                    5e:fe:b3:18:9d:13:e9:d9:57:71:19:53:c6:51:77:
                    c5:68:3b:45:d3:60:63:da:61:e0:80:49:40:03:a1:
                    87:43:d0:f5:ef:2f:6f:8d:e1:e0:c9:0a:ed:30:f6:
                    62:27:60:c8:ef:16:6a:49:07:ea:aa:7b:f0:ca:47:
                    ab:c3:ba:97:d3:df:6a:d3:ea:4e:90:c9:da:64:52:
                    19:96:da:55:7a:42:e9:d1:5b:8d:8e:32:21:12:8b:
                    96:f6:79:c8:b8:d3:df:a2:8c:36:d9:b4:75:7d:42:
                    ba:86:12:9c:f0:9d:18:41:61:15:b4:3b:86:d2:74:
                    f7:25:ad:fe:49:73:52:35:65:72:c4:9b:8c:33:3c:
                    21:e6:74:90:21:2f:bc:96:d1:f9:f6:44:08:0d:af:
                    bd:9e:8f:0f:b4:5f:d4:c5:41:40:bd:73:b0:a7:76:
                    fe:be:c7:11:c9:84:85:71:2f:db:65:62:ce:21:52:
                    ff:07:77:92:cc:c5:7b:48:4d:b2:7d:14:38:74:7a:
                    a7:dc:33:88:21:1e:87:b9:fd:3f:a4:2c:bb:df:76:
                    77:bc:44:10:83:df:26:5e:cf:18:ba:9f:f8:76:3a:
                    6f:40:39:a2:07:2c:90:e0:37:4b:bf:2c:01:c0:29:
                    a4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:57:ED:75:50:17:C2:78:46:65:FC:C0:7A:A6:5E:E6:27:3D:17:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b907a47f-1eb3-3bd2-9fe0-5237da52d58e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.209.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:4a:97:7f:4c:e8:2b:6b:2a:3f:fe:93:a0:8c:10:ec:27:5f:
         51:b8:cf:75:65:a3:a8:0f:91:af:ce:ca:56:a2:26:dd:2e:dd:
         a6:c8:95:13:a7:ed:1a:a5:ee:af:01:18:a9:ff:10:54:f0:04:
         40:3c:af:33:79:6c:ce:b7:e1:63:17:c5:17:28:a0:b2:16:eb:
         e1:fd:69:a5:ff:16:25:6f:78:3e:b9:4f:ab:a9:02:17:26:d0:
         3d:66:3e:19:42:a3:42:de:7c:75:ee:84:8d:f3:ed:10:72:91:
         00:dc:d1:b8:eb:09:36:e4:85:ce:99:65:d0:ef:82:c4:df:de:
         66:a9:e3:df:68:13:35:d0:a9:73:27:ea:a8:1f:04:a3:e7:7a:
         e4:02:e8:5b:dc:80:e7:c4:8d:de:3e:5d:c0:2b:62:e2:08:bc:
         f3:ee:03:81:be:ad:65:22:5d:4a:10:92:cc:11:01:68:dc:54:
         49:8f:3c:f4:d5:a1:27:a0:76:86:ad:d7:83:e2:1e:6a:2e:52:
         bd:bc:e4:9d:4c:7a:a0:ae:db:43:d7:d2:e9:00:d6:47:37:78:
         fd:9e:9e:1d:75:e1:86:14:2b:14:d0:f6:f1:70:29:31:a9:f9:
         3d:31:73:fd:ca:5f:af:ed:3c:5a:10:76:1b:bf:6b:84:5a:3f:
         1e:3d:4c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----