Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f0ca258-2143-4f72-a475-0e4f4a725e58/dc0c8863-0a3f-3922-a593-0edfea1e78fc.roa
File:                     dc0c8863-0a3f-3922-a593-0edfea1e78fc.roa (raw, json)
Hash identifier:          xvErHI1R50vZ+T/c7Yox/WW8sw16jJd7Np714jVO9+Y=
Subject key identifier:   BA:64:92:8F:89:7A:F3:89:6C:1D:43:17:A2:6D:54:42:B7:D0:F9:5F
Certificate issuer:       /CN=6f0ca258-2143-4f72-a475-0e4f4a725e58
Certificate serial:       010D0C9F432858400117C91ABDB97FDD51DCD800
Authority key identifier: 0D:A8:2A:12:6F:90:24:0E:2D:9C:8A:0C:A6:3E:28:99:1A:BC:2E:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f0ca258-2143-4f72-a475-0e4f4a725e58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f0ca258-2143-4f72-a475-0e4f4a725e58/dc0c8863-0a3f-3922-a593-0edfea1e78fc.roa
Signing time:             Tue 22 Nov 2022 14:20:01 +0000
ROA not before:           Tue 22 Nov 2022 14:20:01 +0000
ROA not after:            Mon 24 Feb 2025 05:00:00 +0000
asID:                     207279
IP address blocks:        216.185.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:01:17:c9:1a:bd:b9:7f:dd:51:dc:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0ca258-2143-4f72-a475-0e4f4a725e58
        Validity
            Not Before: Nov 22 14:20:01 2022 GMT
            Not After : Feb 24 05:00:00 2025 GMT
        Subject: CN=986c946d-d7c0-4e20-937d-d9d38312acd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:03:46:2b:eb:50:26:c4:3c:41:a5:7d:a4:af:
                    96:a8:70:7e:16:ae:72:ee:70:c9:45:ab:23:ba:2d:
                    f9:3d:5f:28:58:8c:c5:a8:37:49:86:4b:ea:dd:ce:
                    ef:a8:c1:f6:65:cd:cd:e5:79:ba:e2:89:65:62:07:
                    fb:52:28:f1:81:0a:b4:9f:ee:ea:51:9e:5a:31:ea:
                    14:6b:17:e3:41:75:82:ee:e7:69:a6:ef:ef:3d:1f:
                    2a:11:0b:3a:84:43:54:f7:b2:f9:9a:11:23:d5:a4:
                    70:e7:81:b7:01:d8:38:1a:c9:a7:d2:86:a2:de:1f:
                    73:d0:d3:3a:30:4f:dc:30:94:32:b5:17:1a:72:0d:
                    66:e7:96:d3:07:a0:8f:ee:0a:f1:5a:90:35:44:25:
                    c1:90:39:f6:fd:67:6b:5b:44:9a:2a:d5:bc:4f:21:
                    45:a0:7a:32:b6:02:98:d5:ad:a7:2d:cb:18:8b:a6:
                    ed:7d:2b:d5:da:c9:8d:9c:e8:8d:94:cf:75:bc:3b:
                    9c:aa:62:2d:74:17:0d:8c:58:01:cf:30:34:c2:ae:
                    f7:40:45:21:e3:5d:fc:d7:0f:75:73:11:44:33:2e:
                    43:ae:81:b6:17:2c:93:f9:39:12:a0:0a:2a:9f:27:
                    d4:3c:b0:58:f4:0f:15:b8:a3:7c:df:ac:50:5c:76:
                    90:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:64:92:8F:89:7A:F3:89:6C:1D:43:17:A2:6D:54:42:B7:D0:F9:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f0ca258-2143-4f72-a475-0e4f4a725e58/dc0c8863-0a3f-3922-a593-0edfea1e78fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f0ca258-2143-4f72-a475-0e4f4a725e58/6f0ca258-2143-4f72-a475-0e4f4a725e58.crl

            X509v3 Authority Key Identifier:
                keyid:0D:A8:2A:12:6F:90:24:0E:2D:9C:8A:0C:A6:3E:28:99:1A:BC:2E:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f0ca258-2143-4f72-a475-0e4f4a725e58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:19:12:66:ee:74:c0:d5:8d:3f:08:66:54:a2:3e:a9:b7:12:
         8e:f9:7b:72:3e:b2:0c:52:39:b8:c3:24:a5:ec:87:90:32:cb:
         dc:5a:56:9a:fa:66:58:c9:f8:b3:07:c6:23:12:40:7f:65:36:
         e4:2d:93:99:f0:98:44:18:dd:9f:70:e6:29:5e:88:71:f7:de:
         de:b1:1f:ea:64:22:30:0e:57:57:3f:05:9e:dc:d5:60:2f:2b:
         83:47:ff:d7:5e:10:c0:e8:e9:5b:c4:78:58:66:50:a6:c2:7d:
         94:b2:6a:fb:19:d1:fc:81:2a:2c:e3:61:5d:d6:09:e3:cc:30:
         2a:c0:3c:5e:7b:91:07:70:62:b5:bd:c3:d3:fd:a8:6f:c4:b0:
         c6:c6:81:03:37:0e:bf:17:42:e1:c7:9b:f0:ae:71:f3:8b:b9:
         87:83:db:c9:da:6c:df:60:d6:ee:3a:43:78:2d:bd:a4:fd:6e:
         7c:e9:7b:0e:df:a1:a4:26:08:ce:7d:22:e0:87:5b:d3:ce:c6:
         94:96:4d:46:b0:ce:50:b9:3d:e3:17:f7:ef:f7:82:17:c5:2a:
         32:03:9f:de:8c:3f:bf:a6:28:31:01:d9:92:8e:e2:a8:e5:17:
         cc:28:54:ec:1b:ac:c5:c6:61:2f:ad:bc:ac:54:34:73:db:ad:
         4b:51:12:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----