Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3776020d-59a1-3de4-89cd-a55f5939bd22.roa
File:                     3776020d-59a1-3de4-89cd-a55f5939bd22.roa (raw, json)
Hash identifier:          Qs+Ji+ncpxlv06z6RVomsEFD85fUTwevR4fTmV+ShN4=
Subject key identifier:   27:A4:F8:86:CA:70:09:A0:25:84:59:F0:1F:08:87:2A:7B:78:87:3E
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D17A7882EFF8D3E8271E20
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3776020d-59a1-3de4-89cd-a55f5939bd22.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        35.130.128.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:7a:78:82:ef:f8:d3:e8:27:1e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=6fd8fe0e-ff04-4dfd-b321-6c5faa5e56a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:98:0e:20:7e:64:91:d1:cb:73:fb:a2:ab:c7:
                    49:97:7e:ab:b8:5b:c1:39:2f:7c:30:87:6d:6c:6c:
                    9d:97:ca:49:db:68:81:bc:18:49:f9:22:d6:6a:72:
                    1f:90:e6:d6:b5:b6:d8:9e:db:64:c3:0a:37:05:43:
                    39:e5:2f:c5:90:51:00:21:47:1e:63:d8:3e:da:b3:
                    68:fc:5b:a4:90:3e:14:0a:2b:4c:da:e3:1b:00:92:
                    6d:a7:e2:a9:de:1b:29:41:e0:62:35:b7:f3:67:4a:
                    1c:f2:16:98:4e:9c:b6:05:d4:63:7a:fb:42:ce:0c:
                    f2:50:84:1a:ab:17:10:8d:50:f5:13:3c:82:22:ed:
                    a7:3c:14:f1:26:eb:85:b6:dc:65:f9:f5:5a:64:28:
                    dd:1f:bb:89:cd:d8:7a:cc:ce:bb:3a:ca:5e:31:91:
                    bd:a7:76:49:a4:ca:69:ec:8a:71:e9:14:ea:73:8b:
                    bd:22:f9:0a:56:b5:eb:6d:9e:e4:c6:ca:22:37:84:
                    6b:1e:c0:a1:c1:7c:2a:85:9d:78:bf:15:9d:59:45:
                    56:73:26:be:22:82:d6:ed:44:0f:62:4c:37:2e:6e:
                    95:39:d9:9f:51:be:c9:4c:8a:18:01:94:03:86:6c:
                    93:d0:d3:dd:a2:7c:d3:97:f5:41:a8:ea:8a:d8:9c:
                    54:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A4:F8:86:CA:70:09:A0:25:84:59:F0:1F:08:87:2A:7B:78:87:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3776020d-59a1-3de4-89cd-a55f5939bd22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.130.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:35:9d:7d:09:d5:a9:49:65:50:16:8e:53:f9:ec:81:ea:a1:
         c6:4e:0c:68:fc:ed:76:50:87:19:f2:0e:47:ef:da:01:9a:ee:
         f4:3f:4d:bc:1b:76:79:a8:51:d4:4a:7f:13:be:9b:29:3c:1f:
         ec:be:3d:97:4e:c4:1e:54:bc:17:6c:4b:60:a6:30:cf:2f:8c:
         ae:37:65:e1:09:8f:46:40:69:46:0e:18:0e:98:7c:46:25:68:
         08:e6:a8:0b:9d:6d:b8:79:8c:28:5b:f8:97:a0:07:05:fd:46:
         1a:09:50:89:3f:ae:11:c8:d9:95:f6:9c:6f:08:94:cd:14:25:
         80:73:69:c1:be:83:2c:4b:ad:f0:d9:e5:59:a0:39:24:fb:81:
         3b:71:d5:1f:cf:67:e2:af:1d:e6:3c:98:5b:54:05:08:b4:19:
         53:8a:d3:4d:e8:65:11:6a:8e:d3:48:9a:ee:48:d8:3f:54:15:
         4f:0b:8d:ff:89:cf:f2:ae:20:83:1a:f2:70:3e:63:58:96:b8:
         76:e0:39:cc:bb:cf:05:dd:07:d7:1b:03:30:47:c3:69:73:e0:
         12:05:cf:aa:9d:3f:06:0a:43:13:f4:dd:62:96:9e:1a:d4:d9:
         1c:9b:ef:79:a1:92:e1:db:8a:f5:36:ef:85:56:e7:c6:a4:c0:
         0d:fd:98:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----