Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c08201ae-1993-4de4-a7ce-caf065422476/40fe5f6a-9434-3c95-9ab6-5f352f1be2e6.roa
File:                     40fe5f6a-9434-3c95-9ab6-5f352f1be2e6.roa (raw, json)
Hash identifier:          P6n5YOaOlQQXDapi6Z8QOtioeyQWm3sQ+N3xj4uNPKc=
Subject key identifier:   87:8B:C7:33:9F:CC:54:4C:95:AE:76:3D:7D:2E:5A:20:8D:4A:5C:49
Certificate issuer:       /CN=c08201ae-1993-4de4-a7ce-caf065422476
Certificate serial:       010D0C9F4328584563F310FA491230C5B63F1700
Authority key identifier: A3:40:28:9A:42:21:55:A4:7B:A6:F2:C8:F7:A6:42:D8:A2:CF:3A:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c08201ae-1993-4de4-a7ce-caf065422476.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c08201ae-1993-4de4-a7ce-caf065422476/40fe5f6a-9434-3c95-9ab6-5f352f1be2e6.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     16509
IP address blocks:        204.153.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:10:fa:49:12:30:c5:b6:3f:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c08201ae-1993-4de4-a7ce-caf065422476
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=8546077f-0a1a-4ecd-af8f-7c0433f8aebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fe:3c:00:42:25:42:5e:24:bd:28:0a:ce:cd:
                    78:4e:db:64:47:ea:47:d1:f8:29:01:bf:ac:09:42:
                    02:11:bf:48:ad:1c:5b:e8:02:d8:d5:74:2a:0b:f8:
                    61:cd:3a:d1:81:aa:11:54:b1:ec:4e:f1:99:4e:3d:
                    58:d6:c6:f9:ce:1d:a5:35:09:12:54:2e:7e:9b:2c:
                    bb:ad:61:b7:66:50:97:b7:18:e6:ac:a0:4a:a5:9a:
                    de:31:e7:7c:13:57:e8:bf:54:98:6e:33:39:ff:0d:
                    92:79:b9:05:e4:dd:eb:5a:ff:71:8b:29:6b:ae:41:
                    fd:de:0a:de:cc:bb:5b:b1:c0:64:38:57:6b:32:f4:
                    fe:a4:47:ca:b2:3e:1f:dd:61:24:27:1a:6f:c1:d8:
                    67:20:36:f4:13:f4:5c:7b:bf:42:a1:d4:35:67:a9:
                    d1:8a:f2:55:a9:a9:e7:70:70:ce:26:58:5f:bd:61:
                    59:8c:2d:36:60:0b:15:d9:42:93:d3:20:49:de:24:
                    e8:7f:6f:e7:7d:67:1e:df:23:7b:9e:60:a8:9c:e7:
                    91:ee:4a:cb:bf:87:73:d2:0f:7b:33:f4:e4:d9:87:
                    6d:15:ce:63:7e:75:0b:f9:40:cb:15:c3:44:ed:ca:
                    32:aa:2c:de:e9:04:b7:08:1a:f2:b2:d7:87:a6:fd:
                    25:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8B:C7:33:9F:CC:54:4C:95:AE:76:3D:7D:2E:5A:20:8D:4A:5C:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c08201ae-1993-4de4-a7ce-caf065422476/40fe5f6a-9434-3c95-9ab6-5f352f1be2e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c08201ae-1993-4de4-a7ce-caf065422476/c08201ae-1993-4de4-a7ce-caf065422476.crl

            X509v3 Authority Key Identifier:
                keyid:A3:40:28:9A:42:21:55:A4:7B:A6:F2:C8:F7:A6:42:D8:A2:CF:3A:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c08201ae-1993-4de4-a7ce-caf065422476.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.153.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:e3:9b:16:bb:da:40:1c:c7:be:0c:51:24:15:5d:f6:04:8f:
         87:a3:2e:db:9a:09:96:46:b4:e9:a0:45:9f:74:ee:84:de:04:
         0b:6a:9d:e6:34:26:42:66:9f:98:a1:4a:77:ec:07:57:ca:63:
         5c:a5:46:8f:16:84:70:7e:71:99:42:c1:81:b2:cf:5f:67:d5:
         cc:71:64:14:45:d5:25:f4:05:ac:ea:c0:62:0a:82:ad:6e:41:
         21:8e:55:a0:dd:5e:c3:1d:fb:52:1e:3c:0c:6d:97:b0:8e:37:
         36:ef:a7:84:ee:0c:19:b9:10:96:21:86:26:6f:3a:55:92:84:
         4f:97:8b:30:2a:70:8d:5a:e5:80:86:64:ba:51:dd:ff:bf:70:
         5e:8a:f0:a9:14:27:c4:61:1d:69:22:cd:9e:a5:22:fa:28:77:
         ce:e2:68:d4:27:e6:17:79:c0:c4:fa:7e:01:39:ef:01:8d:29:
         cb:61:3e:bc:03:32:2b:ba:ec:d5:ef:82:23:04:fb:73:2c:0f:
         15:00:74:68:53:3d:13:99:19:52:ba:b4:af:70:24:7d:f1:ca:
         c6:d0:bf:a5:76:88:ec:17:2f:72:c9:0d:ab:d6:d3:08:3d:15:
         bf:72:65:36:22:ac:c1:05:be:6b:54:f2:60:f5:24:6a:df:2f:
         a7:f7:e8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----