Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c03ff9b6-4e19-32ff-b3eb-7bff4de90176.roa
File:                     c03ff9b6-4e19-32ff-b3eb-7bff4de90176.roa (raw, json)
Hash identifier:          lm8Skhy7X8OoeBMx0FJoeNbJKq5ziQvOT5S4dGXMvJk=
Subject key identifier:   85:C1:94:3D:FB:BF:63:46:54:59:18:D5:C7:65:64:0E:FB:3E:7E:72
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C2449DC802E29318B2BF644
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c03ff9b6-4e19-32ff-b3eb-7bff4de90176.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     701
IP address blocks:        208.36.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:49:dc:80:2e:29:31:8b:2b:f6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=29401db4-e2fc-45e3-a222-42c4dfa90c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:37:54:82:de:51:a8:fb:0e:e8:38:aa:4f:2f:
                    55:f5:1d:6c:5b:e8:bc:e4:08:c4:25:26:4b:f6:d2:
                    53:cd:d4:e7:1e:01:0d:cf:1a:00:0c:45:70:aa:3c:
                    f0:22:df:d5:5b:1b:b1:48:b0:2e:69:f3:ce:47:a5:
                    2f:5f:0f:b0:51:50:e8:d6:78:74:79:83:60:da:b9:
                    ff:2a:63:6a:6c:f4:63:99:cb:aa:bb:fa:9f:a7:80:
                    c8:75:e2:d6:04:56:20:07:9d:a9:64:23:f6:c8:98:
                    a6:d4:ba:f4:dc:2f:7b:88:51:fe:de:9a:dd:a1:b2:
                    d1:cd:cc:0a:ea:52:eb:25:a5:37:24:c6:78:cd:ad:
                    5c:7c:57:3e:b0:1f:cb:fc:9b:77:f6:4d:15:6c:3a:
                    aa:66:13:9b:19:7d:9b:22:8f:14:35:49:d0:bd:ab:
                    1d:50:6f:c6:80:0c:29:aa:0d:1f:7e:28:a3:4a:56:
                    05:cf:e2:5a:06:45:de:37:48:73:95:ab:45:b3:d2:
                    0b:df:86:9b:ac:e4:01:a8:62:ea:9d:9b:25:57:9f:
                    76:37:bc:ee:94:ae:36:99:fa:45:f5:9a:5e:5a:2e:
                    49:64:3c:f4:cd:24:4f:25:a7:ff:69:e2:49:11:d7:
                    dd:01:7d:30:2f:5b:de:bc:a0:01:ac:1b:bb:24:c8:
                    dd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C1:94:3D:FB:BF:63:46:54:59:18:D5:C7:65:64:0E:FB:3E:7E:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c03ff9b6-4e19-32ff-b3eb-7bff4de90176.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.36.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:b7:fd:bd:bb:05:d0:92:e4:31:67:04:58:0f:fd:50:86:88:
         e9:28:c1:99:15:ed:33:88:72:1a:e4:4a:7f:c0:13:94:f9:27:
         82:ca:56:8a:27:55:03:2f:f0:5b:60:94:ac:73:d7:0a:8e:6a:
         10:b6:fb:d3:d2:a9:ea:d4:67:c1:54:79:0f:3d:ec:49:a9:98:
         74:72:e7:1e:a7:25:f4:a4:b1:b7:ad:34:59:bc:73:a4:86:7e:
         b9:ca:c1:55:44:0c:08:ee:d4:40:be:e4:ea:c8:eb:2a:1b:08:
         c9:a3:7e:88:80:39:1d:dc:91:5d:c9:bf:4d:a5:36:bf:52:2b:
         a0:dc:e1:c8:e0:90:22:34:48:12:24:87:80:0f:6d:97:13:92:
         35:58:c1:a9:83:38:e3:6f:d8:cd:93:28:40:d0:e2:a0:c2:82:
         46:22:58:57:d1:f9:4b:f2:36:a7:cd:35:79:6a:64:a4:e2:60:
         a4:68:57:fb:e3:b2:d1:36:f1:a1:4f:ea:47:ab:ef:15:f0:ca:
         d8:a8:75:65:d2:22:3d:bf:54:65:38:1b:cc:98:04:b6:f9:14:
         7a:50:14:90:a2:41:8a:9f:4c:4e:fc:e2:cb:b1:b4:4b:a5:5a:
         dd:14:59:bd:23:6b:9f:4c:5e:0f:f0:d5:1a:19:60:ae:00:45:
         39:96:dc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----