Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/28986011-044d-3ddc-91d9-ea7ed00e5470.roa
File:                     28986011-044d-3ddc-91d9-ea7ed00e5470.roa (raw, json)
Hash identifier:          Hsy3AkYA+TqdyyGMuusVH+3z+BuDltXw7uKpk6TGCys=
Subject key identifier:   31:B7:F8:8C:C8:52:38:10:C5:D8:E7:08:48:91:DC:CA:94:FC:06:BD
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F432858494733F0DE5B3864EA6C864C80
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/28986011-044d-3ddc-91d9-ea7ed00e5470.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     36692
IP address blocks:        67.215.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:f0:de:5b:38:64:ea:6c:86:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=d5db8cbf-fcaa-469a-b1b6-f2134a5ad284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:e2:69:f4:52:79:bb:c5:b3:26:ea:ef:0d:e5:
                    35:25:63:98:1c:46:d2:a5:50:a9:ad:42:8e:b5:db:
                    33:52:25:d2:f1:03:96:6e:b4:32:65:04:53:38:2e:
                    9a:52:56:d2:e8:d6:05:12:b4:d5:46:9f:11:fd:71:
                    85:f6:e7:3b:d3:30:39:23:97:a4:21:ca:18:8e:eb:
                    de:2a:a0:6d:0c:35:66:d8:a6:86:15:59:d8:2d:b7:
                    91:3e:16:3e:66:97:11:d7:f5:74:09:df:25:f7:f3:
                    39:98:26:d5:40:8b:16:85:ce:74:58:5b:1b:83:a0:
                    28:21:b9:04:7c:a1:e5:4c:3f:06:ee:af:fc:a2:d6:
                    fb:f2:d8:9f:7b:c6:7a:08:27:e9:dc:c2:01:8e:af:
                    3d:d8:54:7c:e2:c8:5c:a8:71:b9:dd:d0:e3:82:28:
                    de:2b:d8:38:ba:75:9c:dd:0a:78:64:ec:60:1e:02:
                    84:30:58:63:e0:d3:71:b4:51:c8:5b:47:d7:eb:97:
                    36:bf:09:a5:ca:38:a9:ab:bd:62:a0:db:a7:ba:13:
                    26:fd:56:86:31:5a:1c:18:a8:a9:76:6c:2a:00:62:
                    6f:f4:58:94:62:d8:44:ce:14:74:fd:c5:70:16:9f:
                    a7:e0:03:af:22:d7:b1:31:e9:c3:1f:c6:4e:0b:90:
                    3b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B7:F8:8C:C8:52:38:10:C5:D8:E7:08:48:91:DC:CA:94:FC:06:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/28986011-044d-3ddc-91d9-ea7ed00e5470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:68:52:49:04:1c:ee:19:73:de:74:3e:48:7d:9c:84:2f:92:
         b2:74:8b:c5:b4:1d:d2:53:d9:d1:88:1c:62:1c:b4:6f:f0:df:
         b7:b4:7b:45:db:24:41:28:fc:44:9d:9c:5a:da:e6:9c:c0:2a:
         da:d3:e3:7a:8c:a8:e1:ee:87:40:fe:27:09:ec:a4:6b:65:0e:
         36:62:7f:c3:a4:1d:08:2b:f8:33:bb:fb:68:af:66:57:32:75:
         4d:25:34:e8:df:24:31:9b:e7:05:f5:12:d0:92:22:96:2e:97:
         30:06:1e:46:3e:bc:4e:2f:f1:2a:13:5e:f3:7c:c2:76:a2:b3:
         88:d3:9e:38:53:37:b1:a8:4e:11:aa:7e:34:47:6c:04:0e:25:
         b4:7c:58:db:0c:4b:70:b4:d5:4c:5e:0d:c0:95:3f:47:cc:44:
         da:56:ba:19:e6:43:9a:f9:2b:a9:f9:62:56:cf:be:2e:be:13:
         74:9e:a4:e4:dc:73:76:a9:52:b7:bd:d2:04:e1:bd:fb:89:b1:
         ea:bc:59:73:2c:73:65:d7:32:03:e3:2b:7c:38:15:61:bd:b1:
         93:71:a5:06:8f:61:fa:7d:57:48:18:18:83:8b:2a:7a:9e:6a:
         d9:df:9f:a4:09:4e:e8:02:00:97:0c:cf:c3:fa:ef:35:77:84:
         04:78:6d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----