Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/5b2340ea-6054-31e3-b42d-7f23e40eb030.roa
File:                     5b2340ea-6054-31e3-b42d-7f23e40eb030.roa (raw, json)
Hash identifier:          uEs2/E4KH8r6/n2PlZE841TTA/rQoKJi6YQx6W/3HBM=
Subject key identifier:   49:19:BE:DC:4A:88:59:F2:21:52:7A:46:B8:88:0A:A1:CA:51:C5:CA
Certificate issuer:       /CN=025f6cf8-1ef8-442b-a23d-43cf79ed5d3f
Certificate serial:       010D0C9F43285848960B537E9277E3BBDD78D180
Authority key identifier: 68:3D:46:AA:59:3B:FA:04:A5:1C:0E:01:20:31:78:03:1D:57:51:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/5b2340ea-6054-31e3-b42d-7f23e40eb030.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     399603
IP address blocks:        64.112.14.0/24 maxlen: 32
                          2602:fc9c::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:53:7e:92:77:e3:bb:dd:78:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=025f6cf8-1ef8-442b-a23d-43cf79ed5d3f
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=5f483b21-5f81-45e0-9810-91fe41bb07ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cf:e1:27:bb:52:36:c2:51:c3:47:69:76:9c:
                    dd:b5:9e:be:55:76:a5:74:3d:fb:ba:1d:a4:8a:54:
                    4f:87:bc:ca:a3:11:a0:30:9a:d7:42:18:6d:b6:c6:
                    5b:f2:77:b0:2c:0f:74:af:be:e0:48:a0:5e:28:86:
                    d7:2e:a9:07:9c:7b:3d:8b:e1:ea:79:20:35:4d:82:
                    30:53:44:93:5f:a4:21:b7:00:5f:b6:c7:1c:3c:71:
                    c4:5b:89:8d:6d:72:58:06:1f:d8:f3:cc:7d:9e:c5:
                    26:47:a6:f0:7b:5b:31:69:c0:2a:de:63:b5:d6:2d:
                    ad:1f:f7:1e:d0:ef:81:90:6e:b4:3a:ce:9e:2a:ac:
                    48:5f:91:5e:b5:e1:94:bd:09:c4:f5:fc:9e:b6:72:
                    0b:6b:80:98:71:7b:bb:c7:6c:ee:8d:e3:82:b9:0a:
                    d0:d2:98:c6:73:bb:17:48:57:5f:39:b8:10:59:45:
                    b3:7b:f3:12:0d:d5:14:b4:70:86:2c:bb:74:72:07:
                    a4:94:81:16:dd:42:e2:58:d9:c8:49:aa:46:7a:4f:
                    d1:b1:26:ca:31:a8:02:d0:15:32:5d:a2:6d:43:62:
                    1a:c7:88:09:c4:46:66:06:5b:ec:34:fc:36:65:81:
                    18:3b:38:a7:01:ae:f7:94:36:9b:d1:18:1d:57:a8:
                    35:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:19:BE:DC:4A:88:59:F2:21:52:7A:46:B8:88:0A:A1:CA:51:C5:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/5b2340ea-6054-31e3-b42d-7f23e40eb030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.crl

            X509v3 Authority Key Identifier:
                keyid:68:3D:46:AA:59:3B:FA:04:A5:1C:0E:01:20:31:78:03:1D:57:51:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.14.0/24
                IPv6:
                  2602:fc9c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:e5:8e:c9:51:49:24:4f:f5:db:c8:54:d0:cd:64:28:36:ed:
         3a:e0:eb:b1:60:df:63:dc:c4:16:ac:83:fe:10:71:6d:3c:b8:
         03:d4:d1:3b:3a:0b:a5:42:ac:06:a5:00:84:e6:f9:9b:85:46:
         74:6a:40:5a:ae:13:57:09:6f:24:28:ee:cf:25:b4:ef:3e:c5:
         01:1b:e4:95:92:a9:51:30:0f:05:f0:f7:24:fe:bb:c6:d4:6a:
         bf:47:68:2a:69:a8:e4:04:76:b6:c9:03:9d:83:88:8f:ee:28:
         26:e3:4e:75:4d:14:31:13:a4:a3:29:77:da:b8:7f:91:6a:4c:
         0f:6b:7e:12:37:38:3f:98:fb:50:bf:2d:b3:ef:c1:14:56:0d:
         e0:f2:d4:d1:98:6a:42:17:e2:20:5b:69:67:87:87:15:46:76:
         38:32:49:d0:0b:d6:3c:88:56:0a:d9:1b:59:52:e6:70:f3:85:
         3d:ed:86:6c:b4:e9:e8:1b:a6:d7:88:b4:38:fb:91:4f:2b:ae:
         e2:35:43:9c:81:a1:cb:9d:a0:b8:0d:73:7a:9b:1a:dd:04:b1:
         cb:4f:2f:84:4b:ef:6a:c5:83:1d:29:ab:fe:b3:77:01:4d:82:
         67:6b:7f:de:6c:d5:50:2d:f2:ef:b5:01:15:56:1f:4e:b7:e0:
         ee:5c:61:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----