Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/c461c5fe-c5e8-367f-aab1-05171d70fc01.roa
File:                     c461c5fe-c5e8-367f-aab1-05171d70fc01.roa (raw, json)
Hash identifier:          cbWC6HwHOcLTMQZ7WxFw9tfIJta7l5+RRxEk+DeexiI=
Subject key identifier:   63:8E:C4:C1:C6:9B:EB:4C:C7:CD:14:19:BB:94:00:4E:A1:27:11:96
Certificate issuer:       /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Certificate serial:       010D0C9F432858495ABEB5FF1CEF3A5E8C5A9F00
Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/c461c5fe-c5e8-367f-aab1-05171d70fc01.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     36678
IP address blocks:        69.163.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:b5:ff:1c:ef:3a:5e:8c:5a:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=881bda79-3020-4b9b-835d-0994ba3f8a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c6:90:0e:4c:04:84:74:b9:91:ca:a1:5f:ca:
                    33:08:d3:5e:19:e4:6b:da:e1:d0:80:1b:cd:35:2c:
                    ca:81:45:1e:08:93:72:0a:61:35:29:2e:81:dc:9e:
                    b8:16:05:ee:43:b5:33:e6:06:7d:25:ba:9c:ee:60:
                    e9:d2:50:e3:7e:1a:45:39:03:7e:87:50:81:8e:59:
                    2d:4d:7f:59:ed:6e:7d:da:4b:26:8f:1b:7c:c6:7f:
                    5f:df:54:cf:18:4b:23:f5:e3:55:2a:2a:61:21:45:
                    e2:cf:de:f3:6e:e4:4f:ce:14:19:a9:bb:30:d4:ce:
                    8e:dc:72:37:0e:70:45:0a:80:ba:15:c2:fa:06:59:
                    2b:77:fe:8e:9c:86:c3:a9:e2:b6:de:3b:8f:09:2a:
                    09:d6:a7:de:38:49:53:a0:93:28:c5:fc:0e:f1:e6:
                    28:12:1c:4d:68:20:7b:c8:cc:63:7a:ac:87:13:94:
                    ce:fd:a8:2e:a6:fc:16:9f:c8:de:59:10:61:46:eb:
                    0f:cc:20:e7:16:80:c3:84:cd:c0:32:09:23:80:20:
                    bd:41:8d:3c:b6:c3:e3:71:c6:c4:e9:43:34:01:bf:
                    be:17:de:7d:c5:6d:0d:d5:d6:13:29:3c:13:ba:57:
                    97:30:0d:e2:98:12:03:de:1c:e9:fa:6c:df:cb:b7:
                    f7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8E:C4:C1:C6:9B:EB:4C:C7:CD:14:19:BB:94:00:4E:A1:27:11:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/c461c5fe-c5e8-367f-aab1-05171d70fc01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl

            X509v3 Authority Key Identifier:
                keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.163.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:9b:d2:4b:25:fa:3a:48:3c:f6:f2:dd:55:9a:e0:c4:26:87:
         c8:46:cd:3f:fb:4f:20:fd:14:db:5b:5b:58:0e:0f:2b:b7:5e:
         59:71:38:84:9d:11:b5:b8:41:ef:c7:10:4e:29:1e:c6:94:49:
         24:c9:ba:5b:23:fc:2a:fa:99:3d:e6:00:8d:22:a7:31:62:2a:
         7f:60:69:39:c4:d9:5f:40:8b:75:58:61:2c:b3:86:3f:ae:9d:
         62:38:b0:33:36:69:58:da:4b:78:bc:69:85:9c:70:41:b4:c1:
         9d:b0:52:50:fd:c9:01:49:87:34:9b:40:14:3c:3e:f1:1e:bc:
         59:56:54:74:95:62:c7:6c:07:40:5a:a9:df:f3:df:51:b8:f9:
         24:26:d7:2e:7e:58:98:f4:81:60:66:fc:ba:e6:68:ec:1b:4e:
         37:46:b2:e1:7c:eb:f0:0c:14:81:4e:b1:79:64:c9:fe:bd:9d:
         7d:be:45:18:87:6c:f5:8f:1f:b1:54:19:63:04:6d:a7:64:69:
         e3:67:6f:37:9d:5d:4e:2c:27:92:4e:81:bf:63:c4:d0:ed:70:
         4d:9c:74:15:a0:7f:77:3f:d4:ca:6c:7a:c4:6e:9c:69:4d:e1:
         f1:ba:b9:a6:5f:68:52:23:64:08:0d:80:f3:be:c8:57:42:48:
         38:51:bd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----