Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/92a62ed8-e635-3e42-b339-c7256c7b367c.roa
File:                     92a62ed8-e635-3e42-b339-c7256c7b367c.roa (raw, json)
Hash identifier:          e5EYYuIaQhtVivhYFpMCXyIiPaXA8pdxyw2VeO/M1SI=
Subject key identifier:   24:5B:35:72:EF:28:6C:E7:3E:7A:5B:B5:FC:3C:D5:D1:39:4D:8F:8C
Certificate issuer:       /CN=3e6683fc-5b15-4663-9da3-19c5de5a85c0
Certificate serial:       010D0C9F432858493C0922F8E4F51520B1F25020
Authority key identifier: 42:55:62:1A:8C:64:0F:DA:C2:60:93:BF:A8:F1:2B:A6:ED:6E:D5:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/92a62ed8-e635-3e42-b339-c7256c7b367c.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        203.96.184.0/22 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:22:f8:e4:f5:15:20:b1:f2:50:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6683fc-5b15-4663-9da3-19c5de5a85c0
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=a9943ee4-477c-450b-b853-1eb4cf560559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:eb:ac:90:e1:4c:f8:63:b6:d8:e7:89:ab:4a:
                    bb:14:41:3f:a1:c5:ed:75:55:6e:d3:9e:f0:96:78:
                    f6:87:aa:f8:ae:18:ff:ac:8f:7e:a9:d8:82:82:58:
                    ca:51:49:4a:97:86:8e:90:c6:72:34:2e:80:28:84:
                    3d:e3:b4:a3:3e:ee:a2:d0:2f:66:c5:53:ca:8a:8d:
                    26:47:7b:f0:0c:fa:e3:3e:26:77:a4:0f:df:21:36:
                    ef:33:2d:00:b1:61:da:51:b4:db:0d:98:a7:e3:24:
                    aa:a4:e1:52:73:d3:02:37:a2:74:3e:e7:b1:35:d4:
                    88:2b:14:5f:48:74:6e:e5:c8:07:a4:7c:98:d2:3f:
                    a9:d2:c4:a0:af:11:73:f6:a9:7d:19:e1:fa:31:bf:
                    51:e8:ff:2e:be:24:f5:c6:6c:9f:d6:58:1a:91:8f:
                    2f:87:7a:b9:87:7b:a7:7b:2a:37:50:bd:06:33:09:
                    e5:88:4d:8a:5a:94:44:26:96:5c:95:fe:d1:90:78:
                    65:50:ca:e1:79:b9:ce:27:ee:cd:fc:56:1f:ab:3a:
                    6f:1d:2d:2a:67:12:35:db:25:15:ac:d1:ef:46:10:
                    c8:0f:2f:7b:50:d0:f8:64:9e:e0:e3:89:32:19:12:
                    df:68:71:ef:b5:82:35:47:0e:76:c8:d4:41:65:c2:
                    2e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5B:35:72:EF:28:6C:E7:3E:7A:5B:B5:FC:3C:D5:D1:39:4D:8F:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/92a62ed8-e635-3e42-b339-c7256c7b367c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/3e6683fc-5b15-4663-9da3-19c5de5a85c0.crl

            X509v3 Authority Key Identifier:
                keyid:42:55:62:1A:8C:64:0F:DA:C2:60:93:BF:A8:F1:2B:A6:ED:6E:D5:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.96.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:b4:7b:0e:84:df:64:59:d1:5a:f0:94:81:cc:7d:de:6a:23:
         7f:27:4e:0c:c5:2f:e7:08:fb:de:30:99:2b:e0:46:29:70:b9:
         bc:29:86:65:5f:48:a6:82:76:25:15:44:cb:c0:92:04:13:1a:
         cf:bb:23:85:56:3e:69:02:7b:9f:44:fd:2e:28:6c:6c:45:8f:
         09:7a:60:eb:ad:fb:33:bc:cb:03:27:b7:45:15:58:42:da:e0:
         b0:6b:1a:4d:0b:23:99:06:27:fd:6b:37:8e:9d:a5:6a:ea:b1:
         17:d9:02:9c:b5:d9:51:fa:f7:b7:19:ba:0e:dc:24:64:60:5c:
         85:ff:a7:50:d5:69:f0:d9:c7:26:60:6a:07:07:e5:70:53:b1:
         f8:5a:38:c3:10:c6:15:d6:ad:fb:d5:ea:4e:54:a0:09:a4:93:
         6c:52:d2:f3:e1:e9:d6:06:26:3f:ab:99:48:20:35:64:a3:fb:
         dc:92:0e:8c:98:92:f2:8e:db:4d:34:7b:1f:dc:80:f0:20:48:
         ad:f6:d4:79:d1:cf:22:7c:1f:02:79:c5:f5:e9:73:e2:e9:11:
         87:6e:32:5d:92:15:13:69:b1:a8:c5:11:e1:ed:bf:c3:7f:5e:
         c6:f3:58:27:42:cf:72:42:11:50:ee:c6:0b:99:4c:eb:6c:b5:
         93:d4:9c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----