Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/48cacc22-44a1-304e-ac91-adb3b51dc302.roa
File:                     48cacc22-44a1-304e-ac91-adb3b51dc302.roa (raw, json)
Hash identifier:          Q8oQncIZHAQHIbUkxHmvEXELi8fepgcSX1crqoD0vqw=
Subject key identifier:   A6:67:F3:FE:0A:B4:C8:00:A5:FC:56:12:DE:E1:C0:D2:2C:E7:61:B0
Certificate issuer:       /CN=a2ff7ccf-c138-4e25-b3bb-dc206512af3a
Certificate serial:       010D0C9F43285844879F934B2A4E0F1AB6C4CC00
Authority key identifier: DC:0F:FB:CA:DD:AE:2F:35:60:29:BF:BC:FD:B6:6F:2D:03:9F:E4:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/48cacc22-44a1-304e-ac91-adb3b51dc302.roa
Signing time:             Fri 12 Jan 2024 14:54:47 +0000
ROA not before:           Fri 12 Jan 2024 14:54:47 +0000
ROA not after:            Thu 11 Apr 2024 13:54:47 +0000
asID:                     396982
IP address blocks:        144.49.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:87:9f:93:4b:2a:4e:0f:1a:b6:c4:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ff7ccf-c138-4e25-b3bb-dc206512af3a
        Validity
            Not Before: Jan 12 14:54:47 2024 GMT
            Not After : Apr 11 13:54:47 2024 GMT
        Subject: CN=de3c3d26-f701-4a9d-812c-0045c21b23a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7c:87:7a:6c:af:5a:44:cb:8b:cd:89:6b:17:
                    38:e9:c3:af:2a:03:a2:c3:3c:19:47:55:fa:dd:a3:
                    95:ad:b7:bb:c6:2e:79:8f:dc:72:28:3d:b4:e9:0c:
                    82:7c:b8:c8:3f:b9:f8:d5:ad:24:29:06:80:40:cb:
                    d0:9c:9e:6f:92:94:de:dd:07:14:27:c3:0b:57:24:
                    f6:f4:13:f7:71:dd:f5:17:9e:a9:2c:be:34:e3:f5:
                    71:af:b9:ce:e8:3f:5e:6f:3e:b4:1b:6f:18:6a:ef:
                    7d:78:50:1b:91:a9:e0:4c:91:82:c8:b9:db:0c:af:
                    f6:55:02:c0:b1:c3:a6:53:a6:d8:3a:cf:b5:bb:ff:
                    b2:e2:9d:5b:e0:54:b8:e5:3c:e0:a5:ee:15:db:3d:
                    31:8f:f7:3e:87:87:17:76:53:61:f8:e3:68:89:41:
                    74:63:8a:b5:a9:6f:ac:6d:f7:5b:46:99:d3:fb:b9:
                    c3:6a:03:67:a9:3e:f6:ce:93:c7:8a:73:e5:88:c9:
                    85:7e:5f:c0:16:53:80:4b:5a:e6:09:98:35:46:07:
                    8b:35:74:93:14:b5:6e:e8:9e:c5:fd:69:ad:85:41:
                    69:c1:dd:a9:d3:61:e8:42:27:91:e9:3b:17:52:10:
                    7e:73:e1:42:a3:62:ae:3a:a7:7a:2c:73:ec:5a:b5:
                    20:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:67:F3:FE:0A:B4:C8:00:A5:FC:56:12:DE:E1:C0:D2:2C:E7:61:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/48cacc22-44a1-304e-ac91-adb3b51dc302.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.crl

            X509v3 Authority Key Identifier:
                keyid:DC:0F:FB:CA:DD:AE:2F:35:60:29:BF:BC:FD:B6:6F:2D:03:9F:E4:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.49.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:40:d5:cf:04:0e:8f:1a:28:74:19:cd:8a:f3:e3:45:39:bc:
         09:ed:a0:c1:2d:87:70:74:c9:9f:ec:e4:bf:4c:48:c2:0b:e4:
         06:01:ab:ec:62:05:51:d1:80:c5:68:0c:49:8e:02:a6:07:95:
         0a:36:a5:ae:0d:6e:1f:a5:c3:07:04:a6:28:03:95:55:ee:8e:
         54:f3:fb:47:1b:b3:f8:53:42:28:f5:09:cf:8f:4c:31:b7:5d:
         2a:15:50:80:dc:ee:42:05:47:40:f2:f7:73:d5:4b:2e:62:06:
         ab:f4:84:c9:c9:d7:a3:49:8a:c6:09:74:31:d1:b3:c6:00:97:
         c8:72:05:38:87:85:bd:cc:7a:0d:48:39:f9:c9:55:33:e8:f5:
         9a:32:1b:8c:c3:f4:81:dc:c8:ea:20:d9:3c:d5:88:a5:70:2b:
         d3:29:f0:93:74:fa:48:4a:bb:35:35:fa:6c:2f:85:ef:26:be:
         e5:61:c6:98:80:dd:45:75:4f:8d:a7:b7:aa:d2:6e:0a:95:68:
         b7:4c:e0:9d:dd:1d:3c:1e:53:76:e0:99:dd:cd:8f:72:38:da:
         6b:b2:9e:d9:ae:f8:e7:43:49:eb:77:3b:88:84:44:8d:1e:64:
         4e:e2:b9:a8:5e:02:c5:39:2c:b9:2e:32:16:7c:74:92:30:bc:
         77:55:f9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----