Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/28478ea8-97a9-39be-a056-923c01c65688.roa
File:                     28478ea8-97a9-39be-a056-923c01c65688.roa (raw, json)
Hash identifier:          xDmq5gIsihoIcicpyWJ4w2jh1iFIMIy2YD5E/zPrV0U=
Subject key identifier:   F6:AE:5D:F8:6C:9F:08:09:8F:98:B1:59:8D:70:BA:60:1D:2B:ED:D7
Certificate issuer:       /CN=e979f6fc-bc29-44d7-bb62-f74ccc584c17
Certificate serial:       010D0C9F4328584950F961E4C0BD05B8F0F93600
Authority key identifier: 87:43:29:DF:52:16:E7:B9:FA:C2:B1:BF:40:4B:1A:6C:FC:E8:23:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/28478ea8-97a9-39be-a056-923c01c65688.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     22147
IP address blocks:        162.219.96.0/22 maxlen: 24
                          162.219.98.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:61:e4:c0:bd:05:b8:f0:f9:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e979f6fc-bc29-44d7-bb62-f74ccc584c17
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=438b2cb5-371e-4ef6-a1d4-a17e89b34cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:12:60:a8:4b:40:9f:7b:b5:d9:fb:51:fb:69:
                    f0:c8:53:58:8a:5e:ff:d4:be:81:6d:8d:ec:d3:95:
                    58:83:c5:a7:cf:a0:41:28:69:78:08:32:d3:50:09:
                    43:79:34:bd:40:a7:90:6a:08:46:a8:b6:fe:00:7a:
                    69:d9:01:8b:11:57:65:df:9f:69:94:0e:28:a8:aa:
                    68:97:9c:2f:6f:30:33:15:1f:23:3c:e2:8e:6a:e3:
                    d5:9d:fa:be:20:0b:81:e8:80:42:c3:5f:57:73:e4:
                    24:8b:b9:f5:0a:fd:ca:44:61:7d:0a:85:b6:ad:fc:
                    1b:54:59:2d:76:a1:1e:8f:c7:6d:78:86:7e:66:f6:
                    eb:33:9a:3a:37:b7:64:1d:5f:50:63:4c:b9:0f:36:
                    43:dd:75:d9:dd:57:ae:94:c5:9e:33:c5:09:a7:7f:
                    72:5d:11:28:82:71:34:47:47:c1:2e:11:7b:b3:24:
                    7c:bd:3b:1b:19:b1:d8:d4:d4:5a:60:48:6f:40:8c:
                    00:ae:e2:35:47:7a:41:35:c6:9f:f9:07:62:1d:92:
                    94:f6:5d:f4:06:79:b2:5a:d9:eb:69:37:3a:3f:e6:
                    00:9c:37:31:49:04:29:26:98:89:f8:10:e0:a2:29:
                    a4:00:03:6b:80:67:66:1a:b6:d7:60:4b:c6:fd:e1:
                    17:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AE:5D:F8:6C:9F:08:09:8F:98:B1:59:8D:70:BA:60:1D:2B:ED:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/28478ea8-97a9-39be-a056-923c01c65688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/e979f6fc-bc29-44d7-bb62-f74ccc584c17.crl

            X509v3 Authority Key Identifier:
                keyid:87:43:29:DF:52:16:E7:B9:FA:C2:B1:BF:40:4B:1A:6C:FC:E8:23:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:37:22:16:63:d1:22:49:b9:ef:bb:40:c3:a9:ca:96:9c:7b:
         04:5f:ae:82:e1:69:29:74:e7:b7:28:e1:73:2e:d0:f8:04:c9:
         de:d5:88:22:64:27:f8:7c:48:de:3d:de:16:2f:2d:0d:2a:4d:
         13:75:32:01:b7:36:1e:8e:9d:4c:92:a2:84:dd:65:eb:d3:6d:
         6f:60:e0:4d:ad:25:a0:7e:e3:e7:36:57:47:84:d6:64:88:b3:
         ba:ce:7f:bd:bb:dd:1d:37:fb:3a:ca:42:32:1e:cd:17:c5:cc:
         7b:b2:5c:ba:4b:43:b1:b0:8e:72:80:a6:ba:f0:60:0e:ba:de:
         11:96:18:f2:c5:37:8b:14:cb:8e:ba:6b:66:ff:65:03:a8:16:
         40:66:fa:68:19:73:c0:01:84:20:fc:fd:0e:95:17:1a:06:ab:
         fb:f2:6e:01:f5:43:1f:af:8f:7f:09:f3:59:c0:18:4d:47:fd:
         7c:2b:79:86:59:30:79:23:c6:ea:1d:a4:35:7a:3a:e2:b3:e2:
         78:37:0a:95:52:b9:20:58:3f:91:d1:79:42:46:c5:ce:8a:c2:
         b9:41:8c:b6:b2:63:85:1e:e0:cb:4f:f3:71:6d:fd:47:5c:71:
         70:9f:f8:c7:a9:1d:62:db:d3:ae:8a:2d:c8:8c:5c:64:84:f8:
         1a:c2:fb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----